Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb/5343e360-9e7f-3bae-8786-00e93799533d.roa
File:                     5343e360-9e7f-3bae-8786-00e93799533d.roa (raw, json)
Hash identifier:          QxQQ0KtwiNOCwi3wh50GOp6bgqf2H+/HVxQULE0A+tI=
Subject key identifier:   82:A5:43:18:B1:36:F1:79:3A:77:AC:E9:D9:60:49:0F:B4:83:BA:61
Certificate issuer:       /CN=0ab7127f-56a7-4a7a-95af-3764330074eb
Certificate serial:       010D0C9F4328584D6944FE97B3F51806B6597C40
Authority key identifier: 3B:31:34:F0:FD:01:C5:23:DC:DE:12:B9:BB:1D:5C:B6:C5:CC:98:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb/5343e360-9e7f-3bae-8786-00e93799533d.roa
Signing time:             Mon 06 Apr 2026 01:00:24 +0000
ROA not before:           Mon 06 Apr 2026 01:00:24 +0000
ROA not after:            Sun 05 Jul 2026 01:00:24 +0000
asID:                     395188
IP address blocks:        67.199.250.0/24 maxlen: 24
                          67.199.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb/0ab7127f-56a7-4a7a-95af-3764330074eb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb/0ab7127f-56a7-4a7a-95af-3764330074eb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Apr 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:69:44:fe:97:b3:f5:18:06:b6:59:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab7127f-56a7-4a7a-95af-3764330074eb
        Validity
            Not Before: Apr  6 01:00:24 2026 GMT
            Not After : Jul  5 01:00:24 2026 GMT
        Subject: CN=c41f2e35-2fb9-4a5e-afea-7f0a32e34fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:02:0c:64:61:0a:81:23:f6:69:d4:5c:26:6f:
                    6d:16:98:26:a0:bd:80:6c:8b:a0:df:3b:93:f8:31:
                    26:86:67:a9:03:a9:ec:3e:43:85:e7:67:fc:a5:03:
                    78:4c:bb:9e:aa:c6:18:b3:99:60:f1:5d:4e:d5:e3:
                    1d:2f:b6:1d:1b:e8:b8:8f:80:bb:cf:31:74:3a:da:
                    ec:55:c8:a8:00:aa:21:f6:08:84:9b:d5:63:35:38:
                    95:c3:87:9a:42:db:44:65:34:81:d3:e6:10:ba:5c:
                    3b:89:2d:0a:db:43:66:02:ea:bb:c3:43:e9:58:9e:
                    82:8d:22:4f:69:37:e2:28:3b:6f:f7:4b:49:cf:21:
                    05:b7:b8:13:4c:f8:2e:50:f1:83:ba:52:f4:fe:a6:
                    38:71:55:c1:11:d9:29:bf:2b:36:00:2b:72:45:73:
                    55:88:28:26:ae:79:51:a2:0b:3d:21:64:bb:a5:b7:
                    a2:d1:5c:b6:81:94:b3:62:af:8d:70:b6:88:9c:ad:
                    70:e9:20:2b:65:3a:55:21:1d:dc:55:d2:bf:09:ff:
                    f7:ae:f9:f0:07:b6:85:9d:61:4f:45:f1:23:f8:5c:
                    63:3f:65:67:bb:ef:48:6a:2e:a2:95:0b:18:fa:df:
                    09:a2:25:7d:b9:30:f0:6b:a2:37:dd:82:52:7f:7a:
                    65:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A5:43:18:B1:36:F1:79:3A:77:AC:E9:D9:60:49:0F:B4:83:BA:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb/5343e360-9e7f-3bae-8786-00e93799533d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb/0ab7127f-56a7-4a7a-95af-3764330074eb.crl

            X509v3 Authority Key Identifier:
                keyid:3B:31:34:F0:FD:01:C5:23:DC:DE:12:B9:BB:1D:5C:B6:C5:CC:98:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0ab7127f-56a7-4a7a-95af-3764330074eb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.199.250.0/24
                  67.199.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:0f:48:c8:60:4b:10:7d:61:96:3f:1e:39:e1:c8:db:bc:b8:
         dc:24:a1:09:8f:a5:7b:42:83:89:3f:56:fa:0b:25:f4:74:5a:
         3b:05:2d:12:fd:48:77:1d:f5:fd:8e:1d:b6:bf:d2:b6:7a:a0:
         bc:ab:26:1c:af:07:16:71:65:ac:59:0d:be:f7:6a:79:e8:ff:
         2f:84:38:0f:3e:25:35:63:79:cd:a2:d9:55:aa:6b:41:95:1e:
         07:62:95:e1:cf:7e:08:d0:f0:c5:1e:a1:11:ae:78:8c:3b:0d:
         44:84:e7:c9:08:eb:5d:13:9d:29:ec:72:09:e3:cb:93:68:92:
         b1:9a:70:b5:f4:64:c2:50:57:92:f1:1b:51:09:0e:44:e2:17:
         55:09:76:c2:e3:58:25:73:0d:3c:92:63:2f:65:4f:04:69:ff:
         bc:3c:8e:cb:f4:66:88:f9:df:4b:d2:81:39:e2:d0:77:00:51:
         77:bb:6a:c7:3b:28:45:ff:7f:c7:e5:c9:ed:45:3a:39:6e:36:
         b9:40:ee:c0:17:3a:f7:a2:4f:65:96:a5:4e:c2:6e:8a:57:a5:
         03:e3:94:4c:d1:42:29:05:8f:cd:22:4b:76:50:1d:22:14:8f:
         ad:ff:04:f3:ce:66:7a:25:f0:95:03:48:ab:40:53:29:7d:ce:
         09:5a:ba:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:11:01 2026 by rpki-client