Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/f6ef0da3-0ff2-3e4e-bb08-cf4d1bc9af9e.roa
File:                     f6ef0da3-0ff2-3e4e-bb08-cf4d1bc9af9e.roa (raw, json)
Hash identifier:          uEMUtYMCCTYToSE6+JS2ruwJvyo3GV9muzmP3iEr4HI=
Subject key identifier:   62:C1:EC:5D:4E:DF:76:96:06:8F:DD:F0:7F:E6:BA:98:00:35:B8:35
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584FA2C87C3D3DB9700AAF7B04C0
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/f6ef0da3-0ff2-3e4e-bb08-cf4d1bc9af9e.roa
Signing time:             Tue 27 Oct 2026 01:00:14 +0000
ROA not before:           Tue 27 Oct 2026 01:00:14 +0000
ROA not after:            Mon 25 Jan 2027 02:00:14 +0000
asID:                     23316
IP address blocks:        67.199.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:a2:c8:7c:3d:3d:b9:70:0a:af:7b:04:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Oct 27 01:00:14 2026 GMT
            Not After : Jan 25 02:00:14 2027 GMT
        Subject: CN=eef15b1d-9821-4ed6-b023-ac0eb5249559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:84:20:f5:6c:db:72:5d:12:9a:33:00:c9:72:
                    bd:f2:bf:09:b6:57:68:14:8a:5d:93:2e:10:19:5f:
                    44:bd:ef:ac:5b:e4:a9:c5:b0:11:a9:04:86:6b:2f:
                    95:cd:11:62:fe:d4:3e:9b:fe:ec:dd:2f:72:42:36:
                    b4:6f:0e:12:05:5a:5f:4e:9e:7c:45:d9:1e:36:49:
                    18:1a:95:d1:76:70:c3:46:f5:48:21:e2:c0:46:d2:
                    23:7e:c5:76:94:a4:58:1d:ac:4c:c1:45:3a:c3:7e:
                    7c:82:ce:92:b9:d9:cc:ef:59:fc:27:1f:43:76:3b:
                    03:e0:a2:bb:3d:66:6a:1a:49:7d:6b:41:fb:7b:16:
                    7b:d1:d7:bb:68:92:fd:ef:90:f8:28:60:cb:9e:27:
                    8c:96:89:17:8e:3f:67:ea:25:db:c9:98:63:cd:c5:
                    e8:47:65:18:1c:1c:61:00:29:1e:be:03:f7:3d:53:
                    9b:88:db:7f:33:ef:12:bd:a0:29:a3:51:e5:94:cc:
                    6a:38:1a:8e:c4:28:82:60:17:64:fc:10:84:a1:e1:
                    4e:7b:25:9d:06:15:6e:d9:98:bc:b6:46:8a:91:56:
                    c5:4b:a0:aa:30:69:32:46:b1:e3:41:b0:57:87:c8:
                    af:20:fa:d9:b9:f0:fc:8a:c1:91:42:56:9a:aa:ce:
                    ca:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:C1:EC:5D:4E:DF:76:96:06:8F:DD:F0:7F:E6:BA:98:00:35:B8:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/f6ef0da3-0ff2-3e4e-bb08-cf4d1bc9af9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.199.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:79:1c:1f:b7:43:d3:b3:f2:a3:b0:8c:48:d6:56:96:a7:7f:
         e6:84:2f:08:b9:21:8f:0c:5b:bf:c8:5d:26:5d:f3:e1:66:f6:
         a0:60:f1:44:50:c5:0a:21:9a:6c:0e:1b:c3:9e:47:2c:2b:fb:
         b8:4b:f4:32:42:bc:e8:b6:b3:8b:8e:5e:61:3a:b5:44:21:13:
         ec:d8:40:ce:26:92:42:a5:e7:94:25:26:37:57:0f:77:1b:d4:
         d5:e3:ee:6c:5b:0a:8a:52:a8:ae:d0:30:12:a7:f3:ac:f4:92:
         05:52:e3:aa:6c:e7:fb:5d:52:61:01:07:12:28:a3:b9:1a:84:
         50:d1:30:47:af:88:88:07:a2:89:96:ca:ed:59:4b:05:46:c6:
         45:f6:f3:02:1d:ff:a6:68:62:83:d4:06:0c:b0:17:4f:64:73:
         b9:ae:f0:2a:12:8f:89:9a:8b:dd:fa:9a:92:53:9d:ce:e8:05:
         ad:e9:ec:c9:c1:88:57:e5:31:9b:d3:7d:27:35:7f:20:cb:bb:
         d7:a5:17:c7:de:5a:49:44:56:cb:36:0c:bb:86:79:68:e9:86:
         57:45:33:d2:0e:77:5a:bd:08:84:54:7a:a6:4f:d2:fb:90:b5:
         43:2f:13:a1:46:38:3f:58:d0:f0:ca:b0:19:5e:b6:35:6d:25:
         d1:bb:3f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:30:22 2026 by rpki-client