Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/ca191294-761d-388d-9257-29564c01713d.roa
File:                     ca191294-761d-388d-9257-29564c01713d.roa (raw, json)
Hash identifier:          2iZKeW5eCNNr/SiMf7sHI/BbOBJFik4jvYiHAv5qFFk=
Subject key identifier:   84:DF:6F:FF:47:07:78:5C:DE:DD:B4:56:E8:EC:3C:CD:A2:BE:CA:D7
Certificate issuer:       /CN=e4bd0e94-6557-4459-b9ca-7bbf8fe73f58
Certificate serial:       010D0C9F4328584EA7876D2F147600DDB94FCF00
Authority key identifier: C2:63:D8:50:63:80:22:7D:EC:2E:61:BB:35:1C:1F:AD:33:94:16:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/ca191294-761d-388d-9257-29564c01713d.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     36103
IP address blocks:        67.207.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 03 Aug 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:6d:2f:14:76:00:dd:b9:4f:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bd0e94-6557-4459-b9ca-7bbf8fe73f58
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=2052b994-494a-41e6-ad22-d9c23df45b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a1:5d:30:fc:78:66:17:4e:e6:7d:e7:f5:56:
                    f4:4c:44:55:a5:7a:10:2e:83:20:29:49:5b:d4:5c:
                    3e:14:d2:7a:d7:5c:60:e3:6a:20:e5:60:60:7c:74:
                    e7:73:ec:d9:aa:fe:11:8a:6f:b9:56:93:76:e0:98:
                    32:e4:36:25:10:ea:b5:5d:53:af:0f:44:f6:1e:b2:
                    61:b4:1b:da:d4:89:e8:09:cd:8a:c4:97:9b:ab:70:
                    76:e9:17:66:e1:80:db:9b:78:3a:0e:ae:fb:fa:4a:
                    38:d3:d6:79:d3:74:50:ec:09:26:0d:05:cd:42:32:
                    54:4f:cc:69:71:49:af:b9:20:32:cb:f9:ee:dd:88:
                    3f:a3:a5:3e:e6:9b:bc:17:bf:8e:66:37:52:01:a0:
                    00:de:3c:27:fa:25:b0:c4:de:b7:0b:b4:0a:77:54:
                    17:3f:4f:08:8c:36:a2:52:ba:28:b8:fd:1d:c6:31:
                    25:36:4d:5c:85:c2:9a:3b:68:20:9d:13:0b:70:44:
                    c5:49:1b:59:db:35:a9:b6:db:71:e8:6c:7c:cf:01:
                    fe:7d:17:e7:46:4a:da:a3:2b:de:06:16:f8:d6:2f:
                    02:87:c5:6c:66:ad:30:6f:43:66:11:04:75:0d:2a:
                    35:ce:e8:45:c5:b6:c8:9c:15:5b:ba:d8:56:f3:df:
                    3c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DF:6F:FF:47:07:78:5C:DE:DD:B4:56:E8:EC:3C:CD:A2:BE:CA:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/ca191294-761d-388d-9257-29564c01713d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.crl

            X509v3 Authority Key Identifier:
                keyid:C2:63:D8:50:63:80:22:7D:EC:2E:61:BB:35:1C:1F:AD:33:94:16:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bd0e94-6557-4459-b9ca-7bbf8fe73f58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.207.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:b0:3a:ec:e1:a3:c3:db:ae:9c:b6:e6:b4:72:67:56:01:5e:
         00:23:ea:f8:c6:60:ba:1d:2a:4a:d3:10:de:a9:4a:89:06:6c:
         f2:1e:56:f0:09:6b:74:86:0e:4f:7e:1e:bc:e5:a9:34:5a:39:
         62:47:24:98:d7:7c:bf:a1:86:15:03:a0:bc:9e:be:eb:4b:d5:
         f5:d3:c2:9a:f3:14:46:67:33:87:e4:b1:aa:e5:a3:f0:d1:11:
         d9:c0:87:bb:02:71:68:37:3a:8e:bf:e8:d2:6a:05:e4:a3:92:
         c0:a3:ff:a2:ba:13:6b:02:dd:31:0d:6c:ba:fc:e1:91:1b:0d:
         e7:42:55:e9:0f:b1:9a:77:7e:93:f0:90:25:5b:a6:f2:08:50:
         e5:39:df:9c:1e:d5:aa:b8:38:e4:0d:04:11:21:7e:46:cc:c6:
         5b:be:51:d1:88:71:c9:e6:c9:30:4b:03:d0:1c:24:fe:9a:c2:
         41:cc:cb:f1:62:8f:b7:0b:17:3d:90:6a:62:f6:b2:fb:60:e5:
         5e:37:c6:ab:e5:74:7c:cf:c7:63:aa:09:51:e1:b6:73:91:a5:
         32:79:68:4b:6d:15:05:04:e1:42:4c:97:cb:4c:43:2f:30:c7:
         f6:d2:ba:a6:d8:7e:e3:0d:4f:d6:25:78:76:d1:30:44:5e:c1:
         2f:60:3c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 1 04:34:13 2026 by rpki-client