Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/a22684ea-e0a5-3058-9856-e12bf764ea54.roa
File:                     a22684ea-e0a5-3058-9856-e12bf764ea54.roa (raw, json)
Hash identifier:          YQ8FS1Jj88OgeytoL8mdw0eG9yVsHetzCAB1L+CIwE4=
Subject key identifier:   60:39:6F:0E:00:08:E2:EC:26:C9:76:7E:F2:35:68:3F:33:63:B8:56
Certificate issuer:       /CN=e0d54f0d-8151-4500-80b5-008165b77555
Certificate serial:       010D0C9F4328584E3A2F1AEC4030241BD009DE00
Authority key identifier: 6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/a22684ea-e0a5-3058-9856-e12bf764ea54.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     36068
IP address blocks:        173.241.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 07 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:1a:ec:40:30:24:1b:d0:09:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0d54f0d-8151-4500-80b5-008165b77555
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=67d4ebc4-a715-44fc-a6fb-e019a3a2de2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:77:56:09:01:e3:0b:f4:21:bc:e9:b9:75:3f:
                    a7:df:d7:2e:e3:b7:cd:48:13:a7:1e:fd:cd:11:c1:
                    ea:0d:5b:c6:48:1d:55:e7:3b:b6:4a:82:b3:0d:7c:
                    3f:8b:32:4a:fb:e6:9d:3b:41:8f:19:66:7d:91:75:
                    ba:e6:9e:41:b0:88:52:7e:70:ba:6a:bb:42:b5:77:
                    b7:4a:b2:0f:0c:0a:4d:93:07:70:51:3a:64:f8:cf:
                    03:b0:eb:11:24:ef:2b:4a:29:b5:7b:ea:1e:d7:d1:
                    e2:53:4b:50:30:5e:47:77:e8:f8:76:cb:c4:15:c6:
                    36:7f:cf:33:28:14:29:9b:50:4e:b2:f6:7b:d4:4e:
                    fb:b7:8a:c4:d0:38:7b:7f:bd:83:56:c7:36:a7:7a:
                    68:88:a0:99:ed:aa:0d:50:7b:4e:7b:39:24:0e:4c:
                    00:c8:30:44:1f:7f:49:14:db:a5:e7:81:4e:aa:9b:
                    6e:26:66:53:be:55:bd:c3:17:9c:4b:1d:03:06:55:
                    e9:47:4f:71:0a:52:8c:39:d5:35:b0:f5:77:db:4d:
                    af:13:e8:bf:c0:28:1c:23:9d:7a:ee:d3:02:88:78:
                    b9:95:6d:20:e6:dc:ad:87:d8:43:ff:92:f1:fc:19:
                    1f:b6:97:51:67:19:76:ec:01:90:93:bd:ab:3a:2a:
                    5a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:39:6F:0E:00:08:E2:EC:26:C9:76:7E:F2:35:68:3F:33:63:B8:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/a22684ea-e0a5-3058-9856-e12bf764ea54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555/e0d54f0d-8151-4500-80b5-008165b77555.crl

            X509v3 Authority Key Identifier:
                keyid:6B:B9:BD:D7:6B:68:7E:9E:5C:BA:4D:67:75:AD:68:AC:53:97:10:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e0d54f0d-8151-4500-80b5-008165b77555.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:c5:03:b8:d3:44:d8:a5:ef:3b:1e:3a:ce:1a:fd:7b:da:86:
         8b:7d:f1:75:79:80:11:e3:d1:b4:99:1f:c6:f8:fa:20:18:40:
         8a:41:77:da:b5:b6:1e:68:80:b2:9f:a5:aa:a8:aa:ba:01:da:
         d3:2a:7b:20:63:19:2f:20:29:56:82:e5:92:87:2f:0b:fc:51:
         de:8a:3f:ec:07:23:d3:e6:39:11:06:2e:5f:bb:90:08:28:57:
         ee:02:77:bb:2d:97:fa:60:22:90:37:92:a2:48:2a:75:d7:84:
         91:c0:d4:ab:9f:04:58:21:31:01:bc:79:79:b3:5e:4b:ba:cc:
         6a:c2:49:61:24:b9:cb:3e:f8:29:4c:68:5a:67:9f:d0:b5:07:
         7c:77:84:72:5a:e3:59:be:9e:c7:2d:4a:ba:9f:90:66:25:b7:
         cc:96:fa:7c:c6:14:39:f8:7a:2e:72:f9:b7:3e:f9:31:2a:8d:
         fc:23:a5:a5:4c:19:f0:5e:d4:af:44:57:f6:28:6f:c9:64:63:
         08:57:4b:2f:a2:e6:51:ca:08:ff:a2:79:fe:6e:cf:41:67:7a:
         ca:5c:8b:e8:c9:25:9a:37:d6:31:b6:fb:87:92:eb:ea:49:5d:
         43:a7:d8:0c:77:9d:e3:e9:8d:08:89:6f:84:5e:bb:ee:65:ef:
         d4:5f:8b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 20:32:20 2026 by rpki-client