Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/e7f8b070-b54d-345a-99c3-6754564c0672.roa
File:                     e7f8b070-b54d-345a-99c3-6754564c0672.roa (raw, json)
Hash identifier:          vDKXUEowXSbM7T6dB6nXk7D816d+jqqc55KuymEV0Yk=
Subject key identifier:   C9:7A:7A:8D:CC:CE:E7:34:96:CB:A9:3B:9C:98:C5:EF:84:2A:F7:1A
Certificate issuer:       /CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Certificate serial:       010D0C9F4328584F093CEE2F0CF268138525D780
Authority key identifier: 95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/e7f8b070-b54d-345a-99c3-6754564c0672.roa
Signing time:             Wed 02 Sep 2026 01:00:12 +0000
ROA not before:           Wed 02 Sep 2026 01:00:12 +0000
ROA not after:            Tue 01 Dec 2026 02:00:12 +0000
asID:                     8075
IP address blocks:        67.210.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:09:3c:ee:2f:0c:f2:68:13:85:25:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
        Validity
            Not Before: Sep  2 01:00:12 2026 GMT
            Not After : Dec  1 02:00:12 2026 GMT
        Subject: CN=7ae670e2-546c-42aa-9a58-753e3d355c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4b:b4:de:50:6e:44:4c:0f:06:bd:3b:9e:89:
                    7d:f8:3b:69:b2:68:29:5a:d5:3a:6c:91:87:a2:0d:
                    55:69:d8:2d:40:92:72:32:55:7c:63:f2:e2:7a:6a:
                    0a:13:2f:25:f1:f4:10:fa:66:d6:ce:8b:e8:74:7f:
                    39:2d:b7:12:fe:89:e0:b8:d3:ed:20:b5:c5:b2:c8:
                    f9:38:78:37:36:d1:1a:cd:4e:b2:7f:d5:43:26:7e:
                    07:09:b8:31:9c:e8:17:a6:01:cb:88:8b:73:17:10:
                    42:60:39:ec:e5:ab:d5:59:e7:95:5c:b5:e6:a6:1d:
                    3f:c9:0f:bc:25:02:81:0d:e5:f9:aa:58:a1:b7:56:
                    68:f5:7a:e6:26:59:40:72:ee:6d:ed:f9:92:0f:2a:
                    99:b9:87:43:b7:a8:ee:30:7e:6e:33:c4:37:96:c4:
                    ce:75:e8:68:08:0f:5e:27:ba:14:fb:43:62:7b:17:
                    0a:dc:cd:85:4a:f2:64:cd:a2:ac:26:52:1c:12:6a:
                    b5:52:a2:a4:27:c5:b3:74:b1:cd:ee:54:59:92:e7:
                    46:6c:51:09:cf:bd:ab:24:ca:cf:0e:1c:a5:8b:0f:
                    93:d7:fd:47:a8:b9:53:e5:4a:83:a4:3f:81:37:e0:
                    f7:f0:46:8e:63:c8:7a:84:c8:37:13:62:1a:8b:3c:
                    ac:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7A:7A:8D:CC:CE:E7:34:96:CB:A9:3B:9C:98:C5:EF:84:2A:F7:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/e7f8b070-b54d-345a-99c3-6754564c0672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl

            X509v3 Authority Key Identifier:
                keyid:95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:b7:68:c4:6c:69:78:4f:11:05:a3:38:31:4a:c4:e1:8e:4b:
         39:8a:c2:56:9a:21:96:6c:cf:01:45:12:4c:3c:91:af:b8:29:
         30:27:51:3f:da:01:d7:5c:c0:86:64:12:04:f3:e6:c6:0b:74:
         3e:95:f4:dd:b3:36:55:46:d7:ca:fb:5a:4b:bb:04:9f:3d:29:
         c6:22:63:a0:b8:0d:ae:e9:c2:f0:62:5c:c4:42:c3:b5:16:85:
         78:94:17:8e:6a:41:90:75:7a:06:d8:94:e6:ab:0e:06:29:57:
         81:55:9a:8b:c9:8b:37:36:3b:33:1f:34:c6:68:30:1e:21:a8:
         a7:9f:ca:3b:a7:40:df:e1:15:89:95:2b:bf:e9:fb:d2:f7:0e:
         9b:01:d0:4f:a6:a3:67:b3:cb:a1:1f:85:3d:33:b8:4f:b2:a9:
         e5:15:d5:9a:fe:c3:4e:75:75:a0:54:13:0f:50:b4:12:6c:42:
         77:99:65:8f:a7:5b:0b:ec:e8:b5:94:82:6e:21:2c:f6:ac:8f:
         a3:92:ac:5d:c4:25:c2:a1:b0:16:59:01:37:41:3d:a9:40:fc:
         67:bf:41:01:21:eb:9a:9a:99:d2:5e:6c:f5:3c:d1:9f:60:bb:
         54:b0:8b:be:93:ae:69:3f:78:f9:6e:18:17:a2:34:f9:ce:85:
         23:0f:47:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:08:25 2026 by rpki-client