Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/b3e21819-3ce8-3bb5-8b06-9eeddc9f6531.roa
File:                     b3e21819-3ce8-3bb5-8b06-9eeddc9f6531.roa (raw, json)
Hash identifier:          IUlAwm26nOiaDe1WiHAFFsfmmoHLvDpTDpjyWiKE/64=
Subject key identifier:   8C:8F:35:E7:5A:1F:EE:3B:C2:DF:50:C4:03:D4:62:73:51:70:25:90
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F4328584E58E49614604ED79B5A100FD3
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/b3e21819-3ce8-3bb5-8b06-9eeddc9f6531.roa
Signing time:             Tue 30 Jun 2026 21:00:12 +0000
ROA not before:           Tue 30 Jun 2026 21:00:12 +0000
ROA not after:            Mon 28 Sep 2026 21:00:12 +0000
asID:                     13737
IP address blocks:        67.214.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:58:e4:96:14:60:4e:d7:9b:5a:10:0f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: Jun 30 21:00:12 2026 GMT
            Not After : Sep 28 21:00:12 2026 GMT
        Subject: CN=cb9f25f5-1769-4b7d-9e89-4724f530194f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:91:f3:9a:be:d4:85:f5:58:f6:d1:83:21:17:
                    ad:35:ad:3e:ec:cd:2c:07:67:24:5e:62:58:29:72:
                    d2:c3:cc:ff:4a:03:82:31:fc:fd:03:1d:ea:a2:2b:
                    e3:7d:02:ac:e2:d0:67:fc:19:5f:04:d7:4a:3e:01:
                    94:c2:a7:2b:a6:da:c0:cc:93:1c:c6:0d:0e:5c:4d:
                    33:76:b5:91:77:3a:b5:4b:bd:39:41:bb:e8:c8:b6:
                    94:56:43:7d:e0:42:8a:04:8e:b2:32:66:4a:66:3d:
                    4f:19:b4:67:f4:f3:bf:9d:5a:f6:a1:12:71:72:81:
                    44:8e:6d:3e:98:0e:d8:7d:cf:15:64:aa:c0:77:35:
                    3d:d7:61:85:08:62:e8:1d:43:41:fa:b8:e5:75:c3:
                    8e:66:4c:02:85:79:11:ef:39:f1:06:dd:63:c4:4b:
                    9d:ec:85:02:55:77:00:b5:0f:7f:22:18:b9:2d:f4:
                    e5:ae:53:2d:7e:48:7c:ca:04:42:61:57:b5:ab:c3:
                    3f:67:ca:f2:6c:f4:db:14:a1:a1:19:9f:f6:ee:02:
                    d3:12:ed:29:76:19:ad:a9:e8:8b:6a:21:de:b3:b0:
                    05:f5:6c:46:47:88:21:4f:6c:79:5e:7d:87:3e:57:
                    76:f1:01:59:7e:7a:4c:e4:f8:71:75:49:70:e8:c1:
                    ee:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8F:35:E7:5A:1F:EE:3B:C2:DF:50:C4:03:D4:62:73:51:70:25:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/b3e21819-3ce8-3bb5-8b06-9eeddc9f6531.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:53:28:ce:da:ec:48:09:07:a7:e9:b4:47:f4:6c:ad:69:a6:
         04:c3:83:20:cd:c5:66:94:91:14:08:60:d2:dd:76:44:ea:3f:
         08:36:ff:29:4e:ca:8e:89:cc:1a:ba:49:f5:5f:07:77:85:df:
         f8:28:85:ae:c8:61:0d:60:ee:92:84:74:bf:85:07:30:c7:b1:
         88:59:07:45:7d:84:4d:a8:a4:a9:fb:2c:ef:67:61:60:1e:0a:
         dd:5b:2d:20:59:fd:a2:09:5f:ab:06:8b:16:aa:ad:82:d1:89:
         91:a6:3f:fc:b7:f8:5e:0c:ab:ee:86:a6:6d:b2:63:66:c0:a1:
         81:06:25:8a:51:69:a0:bb:b4:66:5e:fd:23:b4:54:c9:15:7b:
         d6:d3:59:58:20:de:91:77:6d:f3:da:39:bc:8e:e0:a2:6f:bc:
         6a:59:c6:6b:2b:62:b8:d6:56:12:fe:d6:e9:0b:e9:75:df:a7:
         59:87:c3:4f:10:39:f0:aa:a1:15:4c:0a:61:ea:b6:09:b6:ee:
         49:6e:d7:d8:68:77:fe:a1:1a:58:ef:a7:67:0a:85:5e:50:ce:
         73:59:8d:fd:30:65:43:28:c4:08:17:4c:75:09:bc:8d:55:46:
         4f:03:27:9a:c1:f3:7d:9b:b4:1c:4d:f1:e0:31:3a:71:16:59:
         2f:b7:99:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 11:54:42 2026 by rpki-client