Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa
File:                     ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa (raw, json)
Hash identifier:          /JyVNmM+gELZJoQzvOW7s8JyP6KCpYAbIIfmI7pem34=
Subject key identifier:   46:BE:88:61:BA:60:C6:A9:6D:AB:B8:FD:48:D2:95:2B:BE:13:7C:9E
Certificate issuer:       /CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
Certificate serial:       010D0C9F4328584EEA875D26FA870FFB7A1B3180
Authority key identifier: C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa
Signing time:             Sat 22 Aug 2026 01:00:12 +0000
ROA not before:           Sat 22 Aug 2026 01:00:12 +0000
ROA not after:            Fri 20 Nov 2026 02:00:12 +0000
asID:                     399629
IP address blocks:        67.217.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:ea:87:5d:26:fa:87:0f:fb:7a:1b:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f3dde1-43dd-4ffd-ae24-0c38ce8cf103
        Validity
            Not Before: Aug 22 01:00:12 2026 GMT
            Not After : Nov 20 02:00:12 2026 GMT
        Subject: CN=d7dda31b-fb12-4652-ae9c-7eaa1354c01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:b6:4c:c9:4d:d8:f3:56:28:ca:5c:53:8f:
                    93:0e:97:20:c1:c6:48:36:42:a2:43:5c:43:a6:fb:
                    81:6a:15:f7:43:27:11:0d:f0:18:6a:cc:d7:f9:d2:
                    f3:01:da:6b:0c:d5:0f:61:19:96:ca:b7:43:0f:81:
                    a6:32:03:45:da:4e:67:bf:55:eb:31:7a:08:85:78:
                    6f:c4:de:58:a0:2f:84:11:36:23:ac:53:a7:44:a8:
                    fa:a4:06:cb:18:2e:78:3e:8a:05:36:a9:3b:48:28:
                    8a:14:5c:5e:bd:e6:64:ed:be:85:ba:f5:00:00:19:
                    ce:b4:62:1d:4f:b9:dc:a3:53:19:78:74:0f:e0:90:
                    73:0a:18:a1:ec:74:aa:8d:fc:66:30:ec:94:6f:24:
                    92:ad:bd:b4:77:6c:01:3a:b8:64:16:fb:aa:e4:d8:
                    bb:83:92:44:ef:f8:b2:5c:2c:76:70:3c:70:20:1a:
                    da:9d:7e:1d:9b:f7:a0:09:4e:92:bf:4d:15:ad:30:
                    7b:f6:2a:ad:0a:bc:64:4b:06:9f:ec:27:da:45:ce:
                    ea:60:66:f6:94:a5:18:75:29:94:5c:f2:68:07:a3:
                    23:31:a5:a5:a6:23:a1:85:fb:76:45:d3:a4:dc:f5:
                    eb:ea:1f:01:94:f9:e8:1d:1f:36:fe:b0:ee:cb:65:
                    cc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BE:88:61:BA:60:C6:A9:6D:AB:B8:FD:48:D2:95:2B:BE:13:7C:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/ed566562-1c7b-3c6e-9cb1-87bf9c43d37f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.crl

            X509v3 Authority Key Identifier:
                keyid:C2:6D:D3:24:CA:1D:6E:0B:5E:BD:93:B5:6F:06:7C:33:71:55:09:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/32f3dde1-43dd-4ffd-ae24-0c38ce8cf103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.228.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:10:b5:ac:28:ff:46:d8:ba:1b:91:c6:84:f7:30:13:a6:87:
         08:ca:d8:0f:98:23:8a:bf:26:68:4b:68:11:d1:8d:5a:36:b2:
         c0:e5:89:c8:47:02:1b:4d:d7:2d:ab:a3:78:d5:cd:17:f4:78:
         ae:22:64:8d:4b:41:e1:d6:6d:5f:05:17:f7:f6:72:9d:21:75:
         56:cc:52:c4:fb:ee:cb:7b:da:fd:89:71:22:b6:d3:79:ca:b0:
         3a:2a:94:84:0e:6a:bf:17:84:02:5d:70:1b:e6:4d:1c:a4:38:
         df:34:36:93:ae:a4:cf:0a:1a:69:ef:ea:4a:59:5a:88:48:b4:
         d9:2d:b6:37:b4:44:fb:3a:b0:c8:c3:58:94:fe:de:47:8b:97:
         7a:98:33:36:6c:94:7d:e4:df:49:ba:39:2d:94:ac:0a:c5:24:
         49:1d:aa:50:e7:fd:5b:3f:62:ca:2d:aa:42:3d:89:f5:82:14:
         66:6e:26:58:a5:da:ca:41:45:42:7e:46:ac:95:a1:73:12:94:
         0c:92:63:2c:b7:d7:c8:c0:f7:65:76:b2:e4:91:5e:18:72:7b:
         61:cd:eb:5c:a0:34:06:02:f8:ef:2c:9d:20:56:21:a1:1b:f4:
         6d:5f:13:b6:da:65:c5:2f:2c:14:e3:98:be:82:3f:f9:86:14:
         5e:7e:a0:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 13:40:35 2026 by rpki-client