Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/e2f1a153-ec2c-307c-8f27-72f78ec9f5db.roa
File:                     e2f1a153-ec2c-307c-8f27-72f78ec9f5db.roa (raw, json)
Hash identifier:          NbnPaMpbRXyZkM7QOEvZcnYTLW0NVFNBXHXKoV15su0=
Subject key identifier:   E4:AE:4C:C0:11:B3:01:3E:11:A1:0F:B0:AB:10:0C:89:1C:03:18:55
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584ED861E508EC852C165BEE95C0
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/e2f1a153-ec2c-307c-8f27-72f78ec9f5db.roa
Signing time:             Sat 15 Aug 2026 13:00:11 +0000
ROA not before:           Sat 15 Aug 2026 13:00:11 +0000
ROA not after:            Fri 13 Nov 2026 14:00:11 +0000
asID:                     19901
IP address blocks:        67.144.0.0/19 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:d8:61:e5:08:ec:85:2c:16:5b:ee:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Aug 15 13:00:11 2026 GMT
            Not After : Nov 13 14:00:11 2026 GMT
        Subject: CN=8f76de36-3509-4894-9bed-f96ba2b2d7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:03:60:ef:87:a8:23:11:33:3a:44:cc:41:26:
                    ed:5d:87:28:bb:7f:fe:fc:f0:ab:0a:52:f7:67:4d:
                    82:34:48:3d:e4:42:4e:8c:b4:c8:18:6b:7c:96:49:
                    62:51:73:34:93:c2:33:88:17:c5:b8:2f:bd:cc:0e:
                    82:a3:48:ba:2f:7e:f8:c0:aa:61:bd:9b:e0:fa:80:
                    5b:49:a3:f7:91:f1:11:09:fb:98:e8:e5:ec:f7:c2:
                    f3:dd:cd:3e:fa:00:53:4f:d0:a0:ac:5b:3b:56:7b:
                    ed:85:1f:06:ae:f0:9b:33:25:e0:3d:e1:fd:8b:9e:
                    58:5c:2c:1f:e6:ce:c8:b0:01:ee:44:c1:03:64:47:
                    0b:a2:9b:64:f9:49:4d:f5:83:c0:9b:2f:bc:c6:34:
                    a3:f0:57:ce:9d:6c:78:5c:69:2e:b6:e9:93:f6:ee:
                    fa:9f:73:a5:43:42:0e:ac:35:9a:4c:38:57:00:78:
                    a3:54:f7:d9:63:17:c5:d0:52:c8:80:91:c0:67:9f:
                    82:0a:68:ed:01:32:57:61:81:20:76:20:f9:6f:3e:
                    3a:b7:04:95:de:7c:79:7a:14:9c:59:06:99:18:e3:
                    74:01:f5:19:83:e8:ee:f2:ea:e4:e8:6b:6e:3e:28:
                    90:4f:36:0d:10:67:35:7a:aa:ba:20:cc:d2:51:79:
                    53:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AE:4C:C0:11:B3:01:3E:11:A1:0F:B0:AB:10:0C:89:1C:03:18:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/e2f1a153-ec2c-307c-8f27-72f78ec9f5db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.144.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:20:78:a4:6a:50:bc:cc:63:61:01:0d:5a:75:58:fd:bb:c1:
         e2:2d:da:70:66:e1:d7:cc:21:4d:e9:fe:9a:f9:93:f6:dd:5a:
         b1:a0:fa:d7:ad:ee:1f:c7:a0:95:c7:c6:d1:b8:b4:9f:fd:50:
         e3:cd:b7:db:ee:43:58:3b:1a:e6:95:23:be:fb:26:5b:c5:1a:
         b2:53:02:7a:d4:24:0a:dd:b6:f2:ff:d0:84:f1:96:42:f5:1d:
         8a:ac:1f:80:8d:2e:f9:eb:90:5a:d6:4b:96:de:5c:4e:24:c7:
         5c:11:16:ab:8a:8e:56:aa:02:14:c7:3d:a7:1b:f4:f8:9a:01:
         46:f4:fd:5d:c4:39:84:d1:f3:d4:e2:95:09:f7:23:d2:43:4b:
         26:44:51:f4:8d:52:20:6c:53:32:87:93:27:91:1d:b0:3f:59:
         eb:8e:bf:1e:8e:d5:48:49:48:71:b6:3d:30:10:c1:6f:1e:b7:
         87:88:b0:20:d2:0c:fc:ed:79:b9:ee:da:08:a5:6b:86:a4:25:
         0c:49:7c:22:ed:e0:76:4e:5a:9c:f5:46:30:dd:b3:8f:34:ca:
         2e:af:37:79:22:ab:ac:0f:45:e0:da:8e:51:2b:a9:81:31:b0:
         49:3f:19:06:0d:6d:82:0f:da:6f:c7:44:ba:b6:7f:90:bd:a5:
         cb:84:8c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:52:49 2026 by rpki-client