Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/c6b1455d-52f4-3505-9642-1afdc4655865.roa
File:                     c6b1455d-52f4-3505-9642-1afdc4655865.roa (raw, json)
Hash identifier:          s0r352x70cSnU6JkPLIZl9aXDOoRU1P9grDsszESavY=
Subject key identifier:   7C:F4:41:10:F9:68:56:1B:BE:05:E0:9E:A4:EA:B8:B3:90:77:24:2C
Certificate issuer:       /CN=bf895287-fee6-4682-8ac4-732f64947fe4
Certificate serial:       010D0C9F4328584EF87CB2E7AB0F25CB578FD180
Authority key identifier: 75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/c6b1455d-52f4-3505-9642-1afdc4655865.roa
Signing time:             Thu 27 Aug 2026 01:00:12 +0000
ROA not before:           Thu 27 Aug 2026 01:00:12 +0000
ROA not after:            Wed 25 Nov 2026 02:00:12 +0000
asID:                     397740
IP address blocks:        67.215.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 29 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f8:7c:b2:e7:ab:0f:25:cb:57:8f:d1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf895287-fee6-4682-8ac4-732f64947fe4
        Validity
            Not Before: Aug 27 01:00:12 2026 GMT
            Not After : Nov 25 02:00:12 2026 GMT
        Subject: CN=76eb0502-04d2-44fc-89e5-87915778c5fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:58:39:a3:ee:e3:04:a0:20:8f:b5:5b:d7:
                    ff:2c:9b:af:ba:70:b7:7d:de:16:f7:1a:0b:44:a2:
                    bb:f8:c1:74:90:db:b3:14:80:d3:02:a6:9a:4d:05:
                    0e:6a:7a:b5:81:99:61:10:5f:7c:41:f0:e1:ec:d3:
                    28:3f:27:42:52:61:e2:2b:78:0b:56:fc:57:13:6d:
                    69:3a:7c:f2:ae:ad:26:01:ed:2a:19:9c:cc:d6:28:
                    a2:2e:8e:06:9e:6c:c1:42:16:79:68:22:f1:ff:85:
                    65:f7:b3:7d:90:f7:f0:48:18:4f:e0:7f:ca:d0:cc:
                    23:47:ea:27:e8:2e:ed:c3:88:b2:f2:bd:21:b9:68:
                    2d:7b:e3:91:ea:86:bc:b9:e5:f1:1e:d1:4f:ea:64:
                    4c:f2:d1:f5:4d:42:98:79:e1:2b:eb:27:02:60:3f:
                    82:cc:00:42:c6:d0:03:b7:be:c4:ce:f5:83:ba:35:
                    99:4b:b0:1b:e7:6c:db:22:0d:da:e6:2d:0c:7f:11:
                    33:2d:5c:7a:a0:27:94:61:95:08:a2:f0:ee:17:b3:
                    ba:66:e3:1c:c7:b1:93:41:43:05:78:27:c6:15:60:
                    6e:4e:ca:07:8d:9d:e2:98:d3:b1:39:ac:30:16:60:
                    29:63:22:5a:59:69:2d:46:8b:c2:8b:97:23:15:02:
                    bf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F4:41:10:F9:68:56:1B:BE:05:E0:9E:A4:EA:B8:B3:90:77:24:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/c6b1455d-52f4-3505-9642-1afdc4655865.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4/bf895287-fee6-4682-8ac4-732f64947fe4.crl

            X509v3 Authority Key Identifier:
                keyid:75:F4:0E:37:07:76:94:83:A1:09:3D:3C:9A:77:C1:DE:97:F7:66:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bf895287-fee6-4682-8ac4-732f64947fe4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:e9:62:db:03:ad:a0:82:b3:d2:2f:84:31:ed:17:ab:e1:b4:
         ff:ae:4b:fc:61:54:47:42:01:4a:d7:c7:7c:49:a7:e7:a5:0b:
         4c:30:91:e0:e8:4d:0d:85:33:d3:1e:85:3d:ee:21:dc:db:e1:
         15:a8:7f:dd:c4:aa:0d:2c:1f:d3:4b:2f:e1:f8:60:7a:0e:fb:
         5e:be:c4:5c:89:2b:db:01:dc:f7:20:62:1f:da:bc:06:a6:05:
         da:82:28:39:2a:05:f0:1e:81:0f:3b:67:05:35:df:1d:31:85:
         94:5a:74:f0:2a:83:d6:91:19:0c:fc:61:52:d2:3c:27:d8:e3:
         5d:8f:77:cb:10:bd:51:ed:6a:d3:e0:c8:a0:de:c8:82:e5:7b:
         56:db:62:02:e5:07:0b:bc:3a:8e:20:6e:2d:26:a1:85:15:d3:
         93:60:04:8d:d9:a3:8f:eb:cd:c9:86:7b:54:7f:34:c2:87:e8:
         8e:37:8d:9b:26:3c:7c:8a:a7:fb:93:99:07:ef:8d:bf:d3:f4:
         9c:89:e1:80:39:68:91:99:31:e1:c5:05:3d:60:32:ab:23:8c:
         0b:ba:d3:1e:18:cd:4c:50:ed:63:31:bb:cb:f3:8f:c4:f1:8d:
         fd:d6:b2:fe:c2:c4:90:9a:dc:aa:25:b0:eb:35:a4:4a:a3:d5:
         30:7f:97:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:23:42 2026 by rpki-client