Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/26b45221-7e77-33a1-aecf-a77aee56e9dc.roa
File:                     26b45221-7e77-33a1-aecf-a77aee56e9dc.roa (raw, json)
Hash identifier:          xzu4JycstubaZ0oiogSVmQjQHkbRwffh0Gc3eqphGLI=
Subject key identifier:   A0:64:E4:B1:60:DD:34:77:78:6A:10:EE:C3:7C:8E:19:50:03:B1:6F
Certificate issuer:       /CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
Certificate serial:       010D0C9F4328584EF5B211BDC0FF1B4B236AE680
Authority key identifier: B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/26b45221-7e77-33a1-aecf-a77aee56e9dc.roa
Signing time:             Wed 26 Aug 2026 01:00:12 +0000
ROA not before:           Wed 26 Aug 2026 01:00:12 +0000
ROA not after:            Tue 24 Nov 2026 02:00:12 +0000
asID:                     812
IP address blocks:        67.210.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f5:b2:11:bd:c0:ff:1b:4b:23:6a:e6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f7c91ae-026c-479d-9cb5-d3837e3d4751
        Validity
            Not Before: Aug 26 01:00:12 2026 GMT
            Not After : Nov 24 02:00:12 2026 GMT
        Subject: CN=3f965ca8-e582-4335-bb67-9a1d6a41c302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:45:26:ba:14:bb:39:73:b4:b8:d1:0e:44:01:
                    4e:ce:99:c2:04:4f:ab:de:dc:0d:49:c2:2f:e9:d8:
                    77:44:39:40:58:62:b8:84:5a:fe:88:62:73:50:f6:
                    78:5e:08:85:04:5a:1e:96:99:00:da:97:fe:0b:91:
                    5d:a9:f0:58:81:a8:55:65:cc:c5:fb:53:fc:97:c4:
                    51:e2:4b:75:d0:a6:54:10:36:8b:ed:68:6a:aa:1e:
                    b8:0e:c6:71:60:cb:03:37:e3:c4:54:72:76:d3:0b:
                    0b:a8:5c:64:85:dc:b8:7c:ed:e5:c4:9e:bb:79:3a:
                    06:4f:fd:03:4f:ae:82:81:eb:b6:aa:90:09:81:3d:
                    ff:f2:32:4d:c6:79:ab:80:df:9a:cc:52:5c:8c:3e:
                    01:5b:8a:f5:fe:ae:6a:eb:af:fc:68:03:f9:0e:9c:
                    86:8e:43:39:df:55:28:b0:35:fd:cd:f6:31:e5:a8:
                    cd:11:75:aa:fb:af:ae:9b:83:06:f0:3b:07:c9:45:
                    d7:1d:27:bf:22:3f:2c:f5:e6:0c:e1:db:83:56:21:
                    23:5c:d1:84:84:c3:c5:e5:82:e0:ba:86:23:90:ca:
                    cb:ba:36:90:67:4c:da:98:3a:02:5c:bf:82:30:60:
                    3a:02:85:5e:99:56:72:ec:e2:c8:f9:5c:83:c6:59:
                    ba:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:64:E4:B1:60:DD:34:77:78:6A:10:EE:C3:7C:8E:19:50:03:B1:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/26b45221-7e77-33a1-aecf-a77aee56e9dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751/1f7c91ae-026c-479d-9cb5-d3837e3d4751.crl

            X509v3 Authority Key Identifier:
                keyid:B6:31:20:DC:30:4B:1B:26:F4:1F:E4:5B:2B:92:7D:62:52:7E:13:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1f7c91ae-026c-479d-9cb5-d3837e3d4751.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:b5:6f:b8:81:1e:47:78:75:4c:f4:c7:7e:cb:3c:7b:ef:e4:
         09:76:2f:d1:d2:55:ab:c6:31:c4:58:f9:fa:17:ce:7b:12:82:
         2d:28:36:ed:0b:1c:18:20:8a:5d:95:8c:a2:9f:81:f2:5d:5a:
         23:ca:14:9d:41:03:25:6f:b6:c8:f7:a6:91:56:ba:7e:79:12:
         33:8a:2b:18:42:d7:84:04:bd:c1:9b:04:b9:8f:53:66:72:fa:
         06:a1:dd:23:ab:01:bd:ca:b3:62:09:9b:22:fb:40:3d:e6:67:
         37:c2:c5:d0:45:a5:84:82:b4:7f:9f:1c:77:47:78:71:b3:77:
         65:a3:85:ef:9b:9e:06:26:7d:5a:59:db:47:19:53:79:79:57:
         be:69:f9:ab:72:db:43:6d:d6:eb:9e:68:71:c1:c1:59:a3:4c:
         f3:b0:04:3c:00:7b:49:72:61:f9:ea:f9:bd:76:93:90:31:ec:
         60:55:ab:0b:a3:53:2b:6c:81:b6:9a:b3:d1:e5:88:0a:cf:bc:
         a4:4f:7c:ae:e6:6c:b4:fc:39:51:8b:84:68:04:b8:85:28:d8:
         8f:5f:e8:63:83:41:81:9a:9d:b8:65:f1:a1:28:cb:5b:3a:8c:
         ed:79:f0:69:2a:6a:b7:8b:fb:c4:62:52:da:af:31:68:54:9a:
         31:02:d7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:44:43 2026 by rpki-client