Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/65f8f2d1-911f-3670-9f37-75756c4dc257.roa
File:                     65f8f2d1-911f-3670-9f37-75756c4dc257.roa (raw, json)
Hash identifier:          oTeLn21C9VQaXqkhnWuvUAIXRfjr4TVNKxY6VUre4RU=
Subject key identifier:   5C:64:46:2C:34:B3:CF:CF:5E:FA:0A:1B:BF:BC:29:DF:16:A0:3F:B1
Certificate issuer:       /CN=3c1b9e2d-457a-403f-9256-27f272ed993d
Certificate serial:       010D0C9F4328584F9603D2DB91AE7F4D3E91A9A0
Authority key identifier: EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/65f8f2d1-911f-3670-9f37-75756c4dc257.roa
Signing time:             Thu 22 Oct 2026 11:14:24 +0000
ROA not before:           Thu 22 Oct 2026 11:14:24 +0000
ROA not after:            Wed 20 Jan 2027 12:14:24 +0000
asID:                     214585
IP address blocks:        67.214.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:96:03:d2:db:91:ae:7f:4d:3e:91:a9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c1b9e2d-457a-403f-9256-27f272ed993d
        Validity
            Not Before: Oct 22 11:14:24 2026 GMT
            Not After : Jan 20 12:14:24 2027 GMT
        Subject: CN=8139474e-e110-4771-832f-035acf9d0c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0c:e9:e6:fe:a2:39:84:fc:88:67:3c:1d:43:
                    15:78:ad:fc:bd:8e:71:de:8e:b2:01:70:ce:4b:73:
                    9d:04:b8:86:8e:4b:a7:f8:9f:00:2d:e0:09:a8:18:
                    fe:3a:dc:a4:82:b1:1d:84:42:57:57:62:0f:0d:c0:
                    79:e5:b5:c6:bb:a5:02:44:92:37:05:46:c4:81:cc:
                    c8:bc:7c:d2:cc:b2:65:87:99:19:e4:d2:46:0a:82:
                    84:e8:43:45:62:0c:13:fb:6f:e7:76:8b:e8:c3:81:
                    06:a5:fb:0f:4c:4c:dd:21:ef:0a:1e:f0:13:92:78:
                    cd:b6:f9:5d:91:57:2f:8d:06:0d:ab:5d:8f:9a:57:
                    e4:85:4c:6e:96:42:da:c7:d8:5c:b8:4c:24:46:11:
                    b0:41:e4:da:e1:c4:cd:d1:4c:a3:ae:1d:d3:73:1c:
                    dc:88:97:58:63:ad:3a:be:56:c0:f3:c7:c3:db:00:
                    20:d2:fe:0a:f0:8d:86:bc:66:3a:0d:32:e5:48:c6:
                    08:7f:7d:e5:bf:d8:10:98:99:94:bf:40:e6:a3:92:
                    39:0c:18:61:06:2e:df:bd:3a:e2:b4:c4:84:17:5d:
                    45:16:61:3c:0c:70:a6:67:5b:5a:de:15:55:93:61:
                    f8:45:96:0d:ab:3c:7b:1f:c3:6d:fb:f4:a0:70:08:
                    6c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:64:46:2C:34:B3:CF:CF:5E:FA:0A:1B:BF:BC:29:DF:16:A0:3F:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/65f8f2d1-911f-3670-9f37-75756c4dc257.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d/3c1b9e2d-457a-403f-9256-27f272ed993d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:DF:25:D2:42:4C:99:1F:D5:04:B3:D0:D3:64:9E:B5:B5:6A:72:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3c1b9e2d-457a-403f-9256-27f272ed993d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:0b:91:69:7f:d0:f8:5a:b9:ca:5f:4e:cc:32:9d:fb:c8:a2:
         13:57:32:61:10:10:15:36:06:a1:4e:e8:17:50:67:68:09:5a:
         cf:ed:fc:6a:10:2f:46:df:9e:49:7c:2c:1b:4f:7d:7d:d4:22:
         93:f3:c4:b6:e7:6e:a1:4b:59:30:f3:8e:a8:44:5e:c1:aa:5e:
         49:37:ca:3f:c0:64:4a:05:2e:dc:f7:71:61:0d:5c:43:89:7a:
         63:32:de:45:70:ba:a7:a8:ec:e3:d2:3a:e7:12:37:28:f3:50:
         2c:c5:1b:b3:db:d1:35:8f:c0:7e:6a:42:65:8e:03:72:03:18:
         23:59:b3:06:2f:83:cd:ac:de:06:c0:db:f3:bb:7e:c0:80:d3:
         8a:a3:50:b9:11:73:ff:c1:8f:cc:9c:a6:10:70:85:a2:19:81:
         ce:da:c2:c0:98:65:ec:e0:c0:c1:55:c6:e1:b2:6a:53:2b:b9:
         b8:58:26:f9:30:4e:21:85:3b:25:72:65:5d:5e:45:e5:33:37:
         57:1d:fe:1c:25:77:80:6f:b7:d6:0c:7b:82:12:05:f2:18:f1:
         5e:b1:bb:c4:80:7f:71:8a:20:06:fb:cd:dc:da:ec:b6:f2:c8:
         70:f4:ea:0d:eb:7d:f5:41:e1:b8:8d:b5:e0:66:2c:7a:cd:02:
         69:3e:08:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:53:19 2026 by rpki-client