Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/6d2d53f2-9a1d-3364-a9c6-184ae5fc7c04.roa
File:                     6d2d53f2-9a1d-3364-a9c6-184ae5fc7c04.roa (raw, json)
Hash identifier:          zPv8FcbbCtD5Si6lQZ/mT+7RZKIBPJ+bbYJMOngVi3c=
Subject key identifier:   3A:86:74:4E:2F:D1:CA:15:FF:89:35:19:6D:FE:17:5A:5D:41:0A:D1
Certificate issuer:       /CN=65a28276-f493-4a9f-9824-c9717c1cf6fd
Certificate serial:       010D0C9F4328584EE38C9A5438F339DA0A9DD160
Authority key identifier: 0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/6d2d53f2-9a1d-3364-a9c6-184ae5fc7c04.roa
Signing time:             Wed 19 Aug 2026 13:00:11 +0000
ROA not before:           Wed 19 Aug 2026 13:00:11 +0000
ROA not after:            Tue 17 Nov 2026 14:00:11 +0000
asID:                     33359
IP address blocks:        67.43.80.0/24 maxlen: 24
                          67.43.81.0/24 maxlen: 24
                          67.43.82.0/24 maxlen: 24
                          67.43.83.0/24 maxlen: 24
                          67.43.84.0/24 maxlen: 24
                          67.43.85.0/24 maxlen: 24
                          67.43.88.0/24 maxlen: 24
                          67.43.89.0/24 maxlen: 24
                          67.43.90.0/24 maxlen: 24
                          67.43.91.0/24 maxlen: 24
                          67.43.93.0/24 maxlen: 24
                          67.43.94.0/24 maxlen: 24
                          67.43.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 24 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e3:8c:9a:54:38:f3:39:da:0a:9d:d1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a28276-f493-4a9f-9824-c9717c1cf6fd
        Validity
            Not Before: Aug 19 13:00:11 2026 GMT
            Not After : Nov 17 14:00:11 2026 GMT
        Subject: CN=9d930268-8246-4d11-a30b-e42be8bc1f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3c:b6:6a:5c:1f:dd:96:66:47:1c:ac:53:a6:
                    7a:6e:ef:e3:f9:e7:22:74:ea:0e:01:b1:76:aa:df:
                    67:31:49:20:7b:e1:38:b5:44:d6:66:8f:7a:2c:71:
                    21:c3:4f:d8:ff:a6:a9:c2:52:7e:79:34:23:99:c0:
                    ab:a8:9c:d1:c8:cb:f0:d7:d0:85:ac:06:41:69:bd:
                    73:5e:1d:bf:42:71:47:a8:91:50:49:e0:f4:66:db:
                    77:1d:b0:bf:df:f7:81:92:14:9d:64:e2:7b:9a:a2:
                    9d:69:88:40:17:a6:14:e5:c7:80:87:f3:04:3b:4a:
                    f9:97:57:84:ae:d8:fe:6e:ed:21:c2:dc:0b:1b:65:
                    1e:dc:a5:c7:0d:03:5c:45:2f:84:10:83:72:69:b7:
                    92:26:d7:76:b0:9d:6e:d2:df:5d:3b:35:16:60:c3:
                    0b:c1:a4:2e:96:ff:96:2b:c6:89:52:ac:6b:4f:fb:
                    85:49:96:c9:a5:03:a5:48:b1:08:39:7c:1c:20:3c:
                    b4:80:73:be:ef:51:8c:25:20:e4:9d:b7:9e:20:cb:
                    c4:77:dc:23:38:e0:40:27:49:75:ff:f2:6a:da:37:
                    70:16:ab:46:52:18:5c:6a:6d:ab:1d:80:75:81:c8:
                    b5:62:d4:8d:d4:30:e6:b6:60:e5:2c:69:78:40:3f:
                    34:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:86:74:4E:2F:D1:CA:15:FF:89:35:19:6D:FE:17:5A:5D:41:0A:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/6d2d53f2-9a1d-3364-a9c6-184ae5fc7c04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl

            X509v3 Authority Key Identifier:
                keyid:0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.80.0-67.43.85.255
                  67.43.88.0/22
                  67.43.93.0-67.43.95.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:b7:e5:1b:8b:56:8c:fe:86:f8:04:f3:1d:69:c5:1a:3a:9d:
         a4:b4:d7:6f:c5:8f:7c:4b:d4:be:48:f6:ef:1f:b3:69:43:73:
         b0:14:ca:1a:b2:84:86:af:14:67:01:f3:51:10:3e:d2:a2:21:
         f0:19:fb:62:52:0a:fe:c1:32:29:d1:59:0d:2d:6e:8d:2a:d3:
         83:e2:c9:d7:0d:9e:c2:ef:04:40:e9:a2:ce:7c:88:eb:5f:db:
         8d:29:54:fc:11:7d:95:09:3c:a1:76:93:37:ad:41:36:4a:57:
         f9:0f:9e:0a:67:e9:8f:70:ae:11:26:32:88:9e:88:b5:5c:9c:
         b0:20:8a:16:ec:04:bb:8e:92:a0:22:37:d3:94:24:7c:11:82:
         3c:d6:89:0f:d6:90:39:99:4c:19:48:85:49:4b:12:63:ed:06:
         6e:01:bb:88:cc:90:96:b3:a3:5c:a2:54:3a:43:ac:08:d8:62:
         1b:c4:70:a2:e3:28:81:ff:33:71:20:79:26:bc:93:7e:df:13:
         55:d5:90:d5:4d:8f:b8:c7:62:e1:c4:6b:25:1f:f7:8b:38:ec:
         62:c4:7f:a5:15:2f:44:43:b5:2b:cc:60:85:78:88:26:28:af:
         49:67:3f:6f:12:e3:f8:c1:e3:e2:8c:f6:be:f6:ec:00:a2:44:
         7b:4a:0e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 18:14:46 2026 by rpki-client