Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7f3d6ce6-6f8a-391e-b91e-cc98f6659794.roa
File:                     7f3d6ce6-6f8a-391e-b91e-cc98f6659794.roa (raw, json)
Hash identifier:          i0/RMDhEzTE/LnxSdlltJRXyCbsdco+upZnHQDbwqTk=
Subject key identifier:   24:EA:B3:27:58:BF:37:03:3F:85:91:E4:E2:C7:02:06:58:37:66:B5
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F94DDB7C7CA3465A710E79340
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7f3d6ce6-6f8a-391e-b91e-cc98f6659794.roa
Signing time:             Thu 22 Oct 2026 01:21:49 +0000
ROA not before:           Thu 22 Oct 2026 01:21:49 +0000
ROA not after:            Wed 20 Jan 2027 02:21:49 +0000
asID:                     21769
IP address blocks:        67.203.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 28 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:dd:b7:c7:ca:34:65:a7:10:e7:93:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Oct 22 01:21:49 2026 GMT
            Not After : Jan 20 02:21:49 2027 GMT
        Subject: CN=f981d3be-ff9d-4674-89f2-0aeb95843966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:84:91:35:6a:7b:04:47:0c:dc:4b:a7:c1:54:
                    86:93:76:e0:62:3a:0b:c5:3d:15:78:8e:cd:03:f9:
                    d6:7f:bb:54:c8:2d:a3:bc:b1:67:c2:00:aa:3c:09:
                    7a:8c:81:8d:bb:28:50:f2:f3:77:fe:c4:e3:f0:ff:
                    70:9a:a3:7a:6d:5c:c5:1b:b8:ae:6d:0f:16:b6:9a:
                    e8:60:7d:88:66:53:c7:44:b5:2c:16:7b:0a:72:4a:
                    d7:27:cf:75:d3:e3:ab:9b:8a:33:f9:b3:3d:28:12:
                    91:9b:d8:be:37:4b:94:5d:4b:22:68:74:5d:dc:62:
                    cf:c2:5f:79:22:54:7c:66:45:a0:de:90:71:db:46:
                    2e:14:3c:b3:ed:6f:16:09:d3:46:5b:da:5a:b0:24:
                    93:2d:74:61:d8:17:67:1f:8e:49:4b:2e:ee:c0:03:
                    1a:b0:29:85:7d:d7:cb:d8:70:30:5d:6d:a8:d2:f9:
                    5c:1a:73:8a:03:2c:34:1a:90:92:30:3e:83:71:75:
                    fa:2c:0f:e4:37:71:36:6c:51:c2:8d:7d:02:27:62:
                    b6:2f:e7:cd:c4:ca:4b:60:a3:02:f1:17:ad:7b:f5:
                    de:2f:8a:a9:63:f0:4f:e2:ff:1a:65:cd:66:4f:09:
                    5b:9f:a5:47:d2:34:af:bc:6c:59:ad:95:4c:05:7f:
                    d4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EA:B3:27:58:BF:37:03:3F:85:91:E4:E2:C7:02:06:58:37:66:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/7f3d6ce6-6f8a-391e-b91e-cc98f6659794.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.203.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:74:7d:c3:3b:20:3f:6d:cc:0f:05:c8:3e:60:8a:f7:49:da:
         9a:3d:64:10:dd:42:69:1c:0b:47:f5:a8:62:c0:89:0b:f1:51:
         d3:ee:94:b4:61:73:65:08:c9:af:e3:0d:a9:03:be:5c:14:75:
         cd:33:74:b7:0a:7d:06:a2:11:65:ea:1f:4c:12:cb:64:d7:c3:
         3c:fc:08:d0:23:68:f4:38:b6:15:e2:cf:ab:ec:75:f6:46:d6:
         16:fd:39:2c:e4:3b:57:8e:f8:f8:64:95:03:a1:2f:7e:76:e4:
         a6:b6:9b:81:a6:7c:6d:1f:3f:15:8e:8b:9d:0c:9c:e3:98:62:
         76:47:1a:0c:7a:cf:90:6a:88:8c:79:e4:ec:0c:88:22:e2:cf:
         e7:57:c9:28:d7:c5:1f:6c:0d:81:8a:ca:07:e6:10:48:6c:6b:
         f1:38:fb:21:dd:3c:c9:42:d6:f9:ea:aa:4b:45:20:78:4c:09:
         4f:a6:de:9c:6d:70:5b:99:4b:f4:24:0a:73:08:e9:91:6e:50:
         88:86:99:e8:7d:d0:c9:18:5e:c3:e1:55:f0:f3:b3:35:37:a4:
         0d:bf:5a:8a:61:bb:05:7f:d5:21:44:f0:47:46:20:09:23:85:
         a7:0a:c2:a5:8f:d1:85:86:bd:c4:61:6d:d8:13:fc:07:4a:04:
         0a:d2:bc:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 02:54:10 2026 by rpki-client