Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a91c0ced-1c2a-3aa9-a3cf-674f5fdf3242.roa
File:                     a91c0ced-1c2a-3aa9-a3cf-674f5fdf3242.roa (raw, json)
Hash identifier:          yju6AKJ8q4p43+An7ZDQTLBqC/pWO44ZmVhgeqeuBHo=
Subject key identifier:   55:55:EE:AB:D3:31:D7:00:BE:E5:76:22:AA:32:0B:C9:90:CD:0A:EC
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584EA7884B6953B36A6B34BA0498
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a91c0ced-1c2a-3aa9-a3cf-674f5fdf3242.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     401783
IP address blocks:        67.102.4.0/23 maxlen: 24
                          67.102.8.0/23 maxlen: 24
                          67.102.10.0/23 maxlen: 24
                          67.102.12.0/23 maxlen: 24
                          67.102.14.0/23 maxlen: 24
                          67.102.240.0/23 maxlen: 24
                          67.102.244.0/23 maxlen: 24
                          67.102.246.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:88:4b:69:53:b3:6a:6b:34:ba:04:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=296c3e7b-0d6e-4794-8a42-249ca0728d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:89:db:20:00:d1:2f:c1:46:8f:fa:3e:2c:46:
                    4a:27:b1:3d:b1:1e:9d:73:87:d9:bd:dc:a8:dc:76:
                    08:d8:14:b4:7e:81:f0:a5:1e:be:2c:1f:b9:90:fd:
                    03:2c:0a:f8:19:0e:b4:e1:9f:c3:22:a5:6f:e6:c2:
                    31:83:b9:81:e4:7e:57:f4:97:18:4e:76:b8:99:24:
                    c5:14:30:20:5a:6a:5f:40:be:2a:10:5a:fe:db:26:
                    a1:2d:c0:e3:ef:a1:31:6c:fd:24:ac:2f:f2:4a:1f:
                    63:94:5b:b3:5b:aa:04:6a:86:f2:d4:3b:b3:48:56:
                    bb:ec:61:2d:fd:62:a1:d1:69:42:97:c1:b9:4b:c3:
                    df:fc:24:1a:62:fe:11:e6:ee:c5:cd:0b:86:e4:ff:
                    27:ab:96:25:9a:d8:37:2f:3c:34:5e:b2:21:5c:bd:
                    04:bf:4c:7e:9c:fb:55:0a:ac:92:ac:c2:04:5e:7d:
                    2d:35:9b:42:64:98:38:0d:b2:b7:ae:02:47:40:ea:
                    2a:61:3d:08:19:c2:36:a0:1e:92:ed:a2:2a:5e:56:
                    4e:87:9e:e3:c9:67:9b:42:23:e7:d7:33:6b:2d:7a:
                    d0:97:18:2b:23:f1:11:f8:7d:76:3d:51:31:58:7c:
                    00:dc:cd:e7:12:c5:ea:70:55:19:11:68:79:54:dc:
                    e6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:55:EE:AB:D3:31:D7:00:BE:E5:76:22:AA:32:0B:C9:90:CD:0A:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/a91c0ced-1c2a-3aa9-a3cf-674f5fdf3242.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.102.4.0/23
                  67.102.8.0/21
                  67.102.240.0/23
                  67.102.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:8c:7f:64:6f:41:b8:60:e9:a4:26:a3:19:8a:4d:74:b1:18:
         5f:26:5d:ae:c8:31:6f:a4:65:59:d7:ae:35:ca:88:57:9c:a8:
         b5:b5:c2:5a:e5:03:74:bf:ed:61:cd:e5:6c:22:51:df:e8:05:
         b3:c2:d0:e3:36:b6:c5:ba:04:b0:0a:04:57:23:14:95:ca:f9:
         41:3f:c9:4f:68:92:77:65:94:5c:a5:a4:00:ea:65:e1:8f:2e:
         eb:06:82:dc:c9:b4:ec:bc:78:09:5c:48:8a:4e:d3:85:9f:ab:
         48:3b:67:71:b4:6e:56:62:bc:c7:d0:c8:45:91:62:a9:9a:25:
         fe:b5:d8:ed:d1:78:37:bd:84:e5:9e:53:ed:07:fc:8e:50:e8:
         29:7b:73:d5:35:ed:ad:7d:95:cc:c3:1c:7b:01:c1:70:1e:79:
         d3:98:c3:ba:9e:fe:8a:46:3f:1b:6b:30:a4:c4:ab:1e:23:3e:
         c2:34:e1:7b:52:0a:ba:3f:f2:de:07:05:c8:ac:a2:0a:a1:b5:
         3e:ab:b2:b7:8f:f8:97:0f:a6:a8:9b:3a:5c:e0:e9:5e:ce:0a:
         60:9a:dc:0f:bf:ca:13:ea:7f:2e:da:ab:e6:17:aa:a8:0c:cb:
         b4:96:ae:d7:6c:7a:26:64:61:16:08:56:ce:31:55:67:93:e2:
         ff:8e:83:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:45:50 2026 by rpki-client