Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/de68ba4b-0448-34a6-b157-10c801d3775e.roa
File:                     de68ba4b-0448-34a6-b157-10c801d3775e.roa (raw, json)
Hash identifier:          24GVfrdl3pml0qmc23hgNa5GxTP5HFPTKyFaRlZFzi8=
Subject key identifier:   C1:6D:53:44:AD:5B:B9:A9:66:F8:22:16:AE:7C:70:8B:2B:A7:52:BB
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584EE0C215AF498EAB0A68A500E0
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/de68ba4b-0448-34a6-b157-10c801d3775e.roa
Signing time:             Tue 18 Aug 2026 13:00:12 +0000
ROA not before:           Tue 18 Aug 2026 13:00:12 +0000
ROA not after:            Mon 16 Nov 2026 14:00:12 +0000
asID:                     22504
IP address blocks:        67.218.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e0:c2:15:af:49:8e:ab:0a:68:a5:00:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Aug 18 13:00:12 2026 GMT
            Not After : Nov 16 14:00:12 2026 GMT
        Subject: CN=7b9525e9-328a-41d8-842b-81ede5b4599b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:1e:37:c7:14:15:dd:0c:61:3d:50:ef:80:
                    76:be:45:13:5e:ee:45:95:d4:9f:fe:32:98:b9:bb:
                    90:03:45:20:db:cf:cc:61:f2:d1:1e:50:56:dc:72:
                    bd:09:98:83:6b:c1:f9:c0:93:8e:91:dd:cf:bf:5c:
                    8c:fd:2b:ac:55:58:88:52:24:15:7a:b7:33:c7:f8:
                    59:a2:4d:51:3f:50:0e:3e:ab:39:f2:cf:f0:d0:e1:
                    15:84:58:56:05:4e:d0:1f:d9:94:02:c9:d6:08:d6:
                    02:31:0c:6f:25:8a:5f:c7:21:2a:f4:e0:b6:9f:c8:
                    a6:5f:1f:f8:32:05:ae:eb:d9:fa:a4:1e:e1:bd:8e:
                    e2:db:c3:2f:bc:6a:3a:0e:97:55:c8:6b:c9:d7:e3:
                    eb:02:2e:82:02:72:74:73:95:d5:3c:22:fb:f3:7b:
                    e0:81:39:60:fa:61:06:91:dc:05:55:fe:c7:e3:42:
                    80:f8:0b:21:26:02:6e:8d:21:8a:04:c2:d5:d1:6b:
                    1f:a8:45:fa:af:c8:18:c7:af:19:c0:26:3d:6b:82:
                    6c:94:c0:ca:76:d1:eb:e2:15:5e:7c:2c:45:15:e5:
                    21:53:a9:e9:6f:85:ea:57:bc:31:73:5a:89:23:5d:
                    cf:49:1d:a5:60:98:4e:a4:15:07:09:41:10:54:20:
                    eb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:6D:53:44:AD:5B:B9:A9:66:F8:22:16:AE:7C:70:8B:2B:A7:52:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/de68ba4b-0448-34a6-b157-10c801d3775e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.218.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:0a:91:2f:20:0f:49:cf:94:b4:3b:60:e5:7e:78:bf:b5:63:
         22:36:3a:ed:0e:a8:9d:40:33:c6:02:e9:f8:61:09:bd:fe:02:
         03:78:67:12:10:2f:a3:67:cb:a6:70:27:b5:f7:7e:1a:56:a7:
         28:96:99:8b:2d:0c:e9:7c:de:a7:03:6e:b4:1a:e8:93:24:8e:
         2d:81:d7:d8:21:92:a8:13:21:9e:72:9c:c5:3b:e4:bb:94:48:
         d9:fc:d9:7a:c0:dc:7a:07:3d:44:b4:a3:6e:32:e0:c3:a0:12:
         83:26:bb:b0:46:58:96:9a:97:23:7c:ad:96:3b:1e:fe:34:45:
         b5:2e:d1:7a:40:4e:62:e4:3e:f1:f1:09:ff:84:0c:d6:22:db:
         2b:2c:3b:c0:11:84:cb:19:5b:0e:1b:bd:5d:f4:e9:31:31:83:
         5a:d7:84:3b:41:61:8e:d0:e0:19:1f:10:4f:96:2c:d5:f6:3c:
         47:5f:74:ed:40:8a:ea:fb:c9:6a:a6:c5:b3:3b:fd:0c:aa:40:
         c2:6c:f1:49:be:1c:59:e6:a5:af:79:ee:c3:82:75:5f:87:25:
         5f:13:27:0c:ec:89:56:b0:1d:6c:a7:08:66:b7:f0:a4:99:25:
         0b:29:43:5a:ba:32:62:27:e5:84:ee:c4:a6:b3:a9:0b:4c:c4:
         fa:11:12:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:38:12 2026 by rpki-client