Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/1b734f6a-de21-3d44-9503-5bc9ecbf1c09.roa
File:                     1b734f6a-de21-3d44-9503-5bc9ecbf1c09.roa (raw, json)
Hash identifier:          Zyle7PtCDoqGZ/8wL8E8y8FW1JtvT4hXKfyRhUsSMJM=
Subject key identifier:   4C:0F:21:DF:5C:D7:C7:BF:39:4B:CB:B8:C2:19:28:65:FD:E6:12:2E
Certificate issuer:       /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
Certificate serial:       010D0C9F4328584D1F4A47C9D649A718DA6F01E0
Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/1b734f6a-de21-3d44-9503-5bc9ecbf1c09.roa
Signing time:             Tue 10 Mar 2026 13:00:41 +0000
ROA not before:           Tue 10 Mar 2026 13:00:41 +0000
ROA not after:            Mon 08 Jun 2026 13:00:41 +0000
asID:                     198949
IP address blocks:        67.218.80.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1f:4a:47:c9:d6:49:a7:18:da:6f:01:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4
        Validity
            Not Before: Mar 10 13:00:41 2026 GMT
            Not After : Jun  8 13:00:41 2026 GMT
        Subject: CN=4c46c736-a43c-47b8-aa7e-6d57e7190aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d0:10:70:3a:5f:ba:4e:99:78:78:54:53:61:
                    98:1b:cc:ef:3c:7f:c1:f8:47:93:4c:b6:15:c8:f7:
                    ab:46:43:ae:52:04:bb:93:77:2c:44:6a:fd:61:e0:
                    b8:7f:5e:98:5a:28:24:cf:22:c5:14:79:71:76:b6:
                    64:e4:0f:03:31:de:ff:4c:39:1b:b1:e0:d0:22:fd:
                    ce:64:5d:5d:d7:68:7c:d5:3e:e8:97:6d:33:ef:47:
                    3c:11:ae:4e:b3:c3:a8:9d:c1:7d:ad:c2:2a:ab:16:
                    56:01:65:21:28:22:da:64:47:f9:33:61:dc:ff:f2:
                    c2:4c:94:29:50:52:b1:0d:c2:b8:29:47:f4:d1:32:
                    19:d7:29:e4:9e:c7:82:50:c6:bd:0e:78:5d:97:fb:
                    88:4b:06:46:17:28:6c:ab:24:76:5b:90:c4:6c:7b:
                    7e:11:0f:3f:53:12:88:1f:70:a7:8a:f2:4b:a4:ca:
                    aa:de:e2:a4:b6:ef:cd:ff:8d:cc:3e:cb:23:96:0b:
                    3d:a3:87:79:f0:5c:49:c3:d8:93:e0:b6:30:c3:92:
                    ff:ad:58:59:15:a2:ef:7f:85:43:26:50:36:31:7d:
                    19:93:85:c8:ef:53:14:91:65:8d:90:ef:72:42:a4:
                    75:5a:06:2f:c9:72:45:37:7a:32:4a:73:94:46:02:
                    3f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:0F:21:DF:5C:D7:C7:BF:39:4B:CB:B8:C2:19:28:65:FD:E6:12:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/1b734f6a-de21-3d44-9503-5bc9ecbf1c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.218.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c7:dc:55:81:52:ba:6a:bc:58:84:43:b3:98:96:37:10:97:
         e3:67:0e:ed:9d:7e:e6:08:be:07:be:b8:c2:10:81:60:cd:c1:
         30:39:65:51:1b:26:45:45:7a:d1:31:49:a8:0b:43:ee:5e:4c:
         95:c5:cb:7d:e5:ed:04:ee:06:5c:54:c6:8f:7c:4d:2f:6d:19:
         bf:6a:7f:15:5a:d4:1b:1a:a8:2b:38:2b:57:f1:86:89:fe:e8:
         57:4a:05:a1:13:12:da:61:14:4e:a7:31:3e:2a:77:10:0c:5e:
         bb:da:ab:59:25:bf:32:ff:71:c6:9d:e8:7e:b1:7c:9c:ef:a6:
         87:00:8a:17:b4:ae:fe:e5:3c:6f:77:36:b8:bf:ed:39:ed:62:
         56:03:39:ba:00:26:47:cb:16:ee:ea:49:a3:37:6a:17:5c:1c:
         18:f7:b9:2c:f2:9b:17:e8:d2:89:8b:45:7b:e8:7a:57:61:25:
         04:29:f4:66:e2:3c:46:74:d1:c5:59:3f:a7:de:a5:4e:05:61:
         2a:ce:aa:9f:ef:6b:46:9b:21:4f:6f:08:ad:4d:24:40:0e:a1:
         d4:54:0a:b3:7d:96:53:2b:19:e0:72:0a:e5:ca:94:54:b1:e6:
         c4:f6:c2:b7:90:d4:8f:df:79:24:3c:6a:b9:3c:53:0b:1a:77:
         aa:5e:c4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 03:33:30 2026 by rpki-client