Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/fe70053b-12a5-3548-80b7-9e1a15deca1a.roa
File:                     fe70053b-12a5-3548-80b7-9e1a15deca1a.roa (raw, json)
Hash identifier:          I07HYin+9YblPtuxDXyTsbQFsxRHlp5yDZBinvW2tis=
Subject key identifier:   0F:D7:42:7A:9A:55:72:4A:FC:00:93:85:81:46:9F:06:3A:5B:AE:DB
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F4328584ECD3730440B7CEEBE070F8C60
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/fe70053b-12a5-3548-80b7-9e1a15deca1a.roa
Signing time:             Tue 11 Aug 2026 13:00:11 +0000
ROA not before:           Tue 11 Aug 2026 13:00:11 +0000
ROA not after:            Mon 09 Nov 2026 14:00:11 +0000
asID:                     2734
IP address blocks:        67.212.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cd:37:30:44:0b:7c:ee:be:07:0f:8c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Aug 11 13:00:11 2026 GMT
            Not After : Nov  9 14:00:11 2026 GMT
        Subject: CN=53066761-04b8-4b7b-97b2-0a807e39d452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6c:ad:50:05:14:1d:c1:c3:7a:43:33:17:6c:
                    12:6f:70:e6:c7:1b:f0:b0:8b:12:b4:e8:16:d6:ec:
                    1b:9d:33:20:78:e6:cc:9f:c0:c6:a0:cc:81:3d:68:
                    14:52:38:7f:97:ff:89:bb:9b:22:06:3a:7e:0b:71:
                    53:10:83:cd:db:ed:2b:ce:86:5a:74:79:14:2d:3d:
                    89:21:95:37:44:d2:16:1c:15:1e:33:29:04:1e:b5:
                    77:21:89:d0:0d:84:87:d0:a1:3e:8b:a0:29:53:d5:
                    5f:89:ef:93:75:00:62:69:17:10:40:99:c7:af:b2:
                    5c:8a:a6:35:e0:f7:27:0d:a6:f8:b1:a8:9b:21:31:
                    4c:07:23:c8:ab:1b:65:cd:27:6c:7f:7a:26:1e:5e:
                    cf:97:61:5c:c8:89:89:cc:88:41:17:6a:33:5a:b4:
                    48:9a:ee:a8:09:f7:40:63:27:12:ce:00:d1:1b:58:
                    b2:2e:a1:96:bd:91:fa:fb:37:94:a3:95:a3:0a:74:
                    c6:aa:2a:6b:4d:75:fa:7f:ec:a1:85:b3:33:86:0a:
                    e0:b4:20:00:aa:00:d3:6d:67:87:94:cd:e5:75:a3:
                    07:96:93:2a:01:51:62:d7:ab:b5:8f:0f:a5:a2:62:
                    82:42:b8:17:7d:47:fb:94:e8:7c:07:9d:18:72:af:
                    d9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:D7:42:7A:9A:55:72:4A:FC:00:93:85:81:46:9F:06:3A:5B:AE:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/fe70053b-12a5-3548-80b7-9e1a15deca1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:85:9d:39:ac:23:5f:1a:39:64:6f:7d:17:39:74:58:5c:df:
         3c:36:33:1f:33:95:6c:02:90:9c:43:35:69:67:be:b4:4f:e9:
         91:66:57:43:f9:03:aa:36:2c:67:47:27:60:3e:ee:22:6e:84:
         67:dd:14:5f:3d:8c:3c:b5:3d:a7:fd:15:76:c1:36:19:06:3e:
         d2:fc:55:9e:d6:70:63:b8:39:f1:59:68:f7:30:02:66:8f:dc:
         5a:b0:4c:43:85:f3:42:48:00:4b:91:f3:bd:19:56:f5:d7:20:
         67:27:60:5c:c0:dc:b7:4d:6a:1f:f3:73:c7:6b:d8:55:e6:4b:
         f9:db:e9:8a:67:e1:db:8b:4e:28:09:5d:9c:04:fd:40:3b:04:
         56:f7:d5:48:c3:bd:a9:a7:98:73:4c:ae:68:16:01:04:d8:0d:
         47:d5:49:9b:4f:7d:26:0e:78:e3:98:0e:b3:f0:89:47:ff:d5:
         73:2b:3b:12:d6:56:01:f0:59:9a:f2:c7:21:80:9c:a8:80:5a:
         13:e2:9b:2d:58:19:bf:90:3e:8f:8f:51:b5:d0:88:8e:20:72:
         f1:fb:b7:b4:bc:24:eb:22:bf:22:f7:7d:4a:ad:d0:7c:77:0c:
         3b:e3:1e:e2:21:06:5e:70:a5:2a:16:e9:68:31:87:09:c9:69:
         31:65:c5:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 19:56:24 2026 by rpki-client