Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/67d07e7a-448d-3198-97fa-62a123d6132f.roa
File:                     67d07e7a-448d-3198-97fa-62a123d6132f.roa (raw, json)
Hash identifier:          gB/bd7z8lhcImFkkacekOogM4jYWMignUcrulRq2sZk=
Subject key identifier:   FE:56:BA:0E:A5:AC:1B:0B:B7:5B:97:D8:46:E2:52:AF:B1:43:D2:0F
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F4328584E4989DA20AC390D01CF80E100
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/67d07e7a-448d-3198-97fa-62a123d6132f.roa
Signing time:             Thu 25 Jun 2026 09:00:13 +0000
ROA not before:           Thu 25 Jun 2026 09:00:13 +0000
ROA not after:            Wed 23 Sep 2026 09:00:13 +0000
asID:                     26042
IP address blocks:        216.180.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:49:89:da:20:ac:39:0d:01:cf:80:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Jun 25 09:00:13 2026 GMT
            Not After : Sep 23 09:00:13 2026 GMT
        Subject: CN=d032b7c2-fc7e-4deb-98d3-a9db05ee3798
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f4:49:3e:70:8d:29:d8:98:e5:8d:9e:fd:6b:
                    3d:f5:53:ed:7e:3e:11:b4:d3:f7:32:f3:81:c0:14:
                    fc:52:33:98:21:cf:41:d1:b4:13:95:85:a6:67:71:
                    b0:86:01:71:59:93:28:7a:81:0c:f0:ea:12:dc:83:
                    cb:d8:ba:a1:12:4a:f2:84:c8:a9:ef:54:1b:cf:49:
                    be:6b:a3:fb:bd:8a:af:11:e3:5b:4a:85:f2:d7:29:
                    74:e7:e4:25:7d:4d:68:db:60:5a:db:28:4d:6a:da:
                    19:ad:38:0c:44:11:73:40:be:dc:7f:7e:ec:02:4a:
                    f9:14:e3:dc:98:6b:cd:9b:d9:33:28:26:ed:3e:33:
                    50:20:67:4b:94:44:a3:1a:d4:fc:da:84:4e:e7:4b:
                    68:39:56:b1:5e:d2:ad:22:5f:da:6a:d9:1e:66:d8:
                    e1:2c:9e:e9:ce:88:0d:8a:04:fa:d6:47:44:fa:68:
                    b4:a1:a4:8d:35:e7:9d:75:fd:df:63:43:93:d2:b7:
                    e0:5f:46:6d:6c:e6:de:6f:cf:78:e7:0a:42:b4:16:
                    01:b3:5f:ef:b9:5f:22:5e:31:44:0d:3d:5f:5d:9d:
                    c9:a5:30:f8:bb:9e:3f:81:a7:49:ac:3a:bb:2a:af:
                    c7:d6:8c:09:3e:99:67:52:6e:a8:33:9a:6e:71:34:
                    94:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:56:BA:0E:A5:AC:1B:0B:B7:5B:97:D8:46:E2:52:AF:B1:43:D2:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/67d07e7a-448d-3198-97fa-62a123d6132f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.180.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:4a:21:64:13:d8:6e:36:d9:01:6c:5b:d5:3d:45:c6:69:ad:
         d6:23:9b:08:ca:dc:14:6a:19:d8:2f:25:16:bf:6a:74:5c:38:
         36:3e:13:70:e7:85:6d:f4:e9:1e:dd:52:35:bc:36:18:1f:a1:
         6d:27:af:03:dd:bd:8d:18:7d:a7:1b:76:35:ec:4f:b0:6c:e7:
         a6:5f:b2:64:4a:06:af:9e:d7:0b:33:dc:f4:3b:bc:e9:37:e0:
         c4:b1:fc:a7:72:10:51:ba:54:fb:98:9f:24:ba:43:85:d4:a5:
         d8:4c:c2:a7:03:29:f1:33:de:bd:87:03:12:95:d7:72:43:50:
         aa:36:8a:82:5b:85:ea:49:3f:12:51:52:4e:25:8f:69:9c:27:
         f0:1c:93:ae:13:5a:a6:af:fd:8c:64:17:01:f7:bd:0a:c5:94:
         e4:c9:c6:89:31:89:4c:ae:ca:77:d0:97:ed:dc:06:1e:dd:61:
         6c:f2:63:87:b0:e7:36:64:3e:9e:cd:e1:f7:e9:61:92:4c:63:
         ee:77:f9:65:04:da:95:11:dd:54:c3:42:1e:a5:a7:ed:e0:4c:
         18:be:6c:01:57:70:e2:91:ff:f9:bb:9c:32:3b:a3:fd:1c:d6:
         44:23:a4:99:09:ff:9f:56:be:47:6d:01:c8:20:31:65:68:e2:
         b1:2c:79:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 21:46:00 2026 by rpki-client