Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/01d18b8d-28a6-39a0-a287-f14a09a25466.roa
File:                     01d18b8d-28a6-39a0-a287-f14a09a25466.roa (raw, json)
Hash identifier:          LCnCjiwXDxoYaEgps7WWwZBB9zLdlNIb2BSbQqVKSH0=
Subject key identifier:   5C:9A:43:9F:C9:72:1A:06:1D:A4:84:23:A2:35:FD:CF:E9:3A:56:B3
Certificate issuer:       /CN=e4bd0e94-6557-4459-b9ca-7bbf8fe73f58
Certificate serial:       010D0C9F4328584F2957B4EA596717321F953D60
Authority key identifier: C2:63:D8:50:63:80:22:7D:EC:2E:61:BB:35:1C:1F:AD:33:94:16:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/01d18b8d-28a6-39a0-a287-f14a09a25466.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     36103
IP address blocks:        67.207.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:b4:ea:59:67:17:32:1f:95:3d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bd0e94-6557-4459-b9ca-7bbf8fe73f58
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=c9ad88f7-1e5a-4c79-8c66-5b5176590d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ec:31:e9:41:f9:f7:f8:c6:38:92:61:ee:30:
                    f8:07:ff:7e:63:61:48:ed:90:11:36:08:58:2b:fe:
                    5d:5e:80:a1:14:c7:6f:96:3f:fd:f2:3e:34:40:7b:
                    c7:8f:d2:d8:11:9f:04:61:37:92:af:cf:3c:14:98:
                    bd:65:1f:95:4a:b3:45:7a:5c:d8:33:e7:60:b3:c3:
                    89:eb:b6:e1:3b:5a:42:9e:c2:ff:46:66:de:e7:47:
                    fc:24:17:9a:cb:66:c2:63:e2:b6:fd:5d:03:ef:15:
                    a4:fc:be:6a:ad:28:67:07:60:6a:92:3b:5f:48:5c:
                    8c:43:90:a0:19:09:b5:bc:83:34:79:92:6d:ba:81:
                    8b:79:40:36:83:48:6d:91:19:cb:03:20:cb:6c:36:
                    37:40:39:61:d2:69:94:15:1e:5b:f7:64:a9:30:27:
                    f2:50:a6:71:a8:2c:ec:e2:46:ce:22:a4:25:7f:1c:
                    12:24:57:bc:c6:f8:66:4a:8e:31:cb:e8:3a:c5:cb:
                    e4:a4:85:ec:66:20:f9:50:9e:af:8c:f3:a7:9c:19:
                    60:4d:e3:50:9a:78:d4:2a:0d:8e:d2:8e:01:de:a7:
                    57:17:b0:f1:a0:64:2b:26:bd:87:ec:85:12:5b:b3:
                    1e:0a:2e:4f:42:ca:ca:96:61:af:02:7e:97:51:78:
                    f2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:9A:43:9F:C9:72:1A:06:1D:A4:84:23:A2:35:FD:CF:E9:3A:56:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/01d18b8d-28a6-39a0-a287-f14a09a25466.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.crl

            X509v3 Authority Key Identifier:
                keyid:C2:63:D8:50:63:80:22:7D:EC:2E:61:BB:35:1C:1F:AD:33:94:16:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.207.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:e7:b8:f0:22:61:52:cc:eb:e6:8e:1a:df:32:64:d1:c3:46:
         40:8e:3b:79:41:b7:b6:81:3d:41:e6:b9:eb:a2:02:cb:71:34:
         45:b9:bd:f5:2f:fb:87:7c:cc:b7:4c:fe:b5:56:94:55:03:0f:
         c4:11:b8:90:91:ae:9c:cd:48:c0:29:c7:22:46:b5:bb:eb:db:
         13:49:50:56:13:23:c4:1a:de:12:b1:e9:fa:5a:37:c0:db:05:
         12:6e:d0:ba:69:b2:ca:2f:c4:be:eb:82:ab:a9:66:6f:74:a5:
         51:ff:13:6a:7b:b6:f1:e2:d7:af:ed:d6:25:da:01:a5:7d:e1:
         57:84:44:99:4f:10:3e:db:ae:63:ff:d2:61:1b:1d:21:47:bd:
         59:1d:36:bc:25:54:1e:86:0c:10:1c:d9:5f:c3:f9:ca:7e:1c:
         4e:8d:95:20:b3:24:f1:cf:cd:7d:a7:52:4b:1e:1d:aa:d3:e4:
         05:25:ca:55:79:07:b0:b1:a5:b7:40:09:40:41:e5:76:c0:d1:
         be:4d:c6:61:a9:26:80:e7:16:8f:20:5c:d7:91:1c:0a:64:47:
         28:70:46:c6:78:34:ec:e0:7b:fe:17:7f:b8:99:13:31:84:47:
         73:30:ae:64:08:41:1e:24:11:ca:f4:24:ef:e0:92:55:79:b9:
         50:cc:bf:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 11:40:14 2026 by rpki-client