Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4f60b07-acbb-3892-b7d0-ea904d0a28e4.roa
File:                     d4f60b07-acbb-3892-b7d0-ea904d0a28e4.roa (raw, json)
Hash identifier:          3nl7RidT2QYg/MzLp6s1Q7taS+td8Z1wPU1McQz5y8M=
Subject key identifier:   B7:39:E9:22:2F:00:D7:F5:0C:90:2E:51:9A:8B:36:00:F1:36:5F:64
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F5E62F6AB6C11D89C637B2910
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4f60b07-acbb-3892-b7d0-ea904d0a28e4.roa
Signing time:             Fri 02 Oct 2026 13:00:13 +0000
ROA not before:           Fri 02 Oct 2026 13:00:13 +0000
ROA not after:            Thu 31 Dec 2026 14:00:13 +0000
asID:                     32688
IP address blocks:        67.91.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5e:62:f6:ab:6c:11:d8:9c:63:7b:29:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  2 13:00:13 2026 GMT
            Not After : Dec 31 14:00:13 2026 GMT
        Subject: CN=9f241307-8894-4782-904e-7cd59018178d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:15:10:1a:b8:85:82:3c:2c:ef:e7:27:9d:a9:
                    d6:99:eb:a8:a8:dc:76:e0:82:fe:3d:30:ad:94:01:
                    79:ba:99:e4:a5:8a:b8:1b:6b:8d:0d:71:96:8f:c4:
                    fe:53:75:03:31:ed:63:f5:9b:b7:3d:80:d3:0f:e1:
                    34:15:55:fa:cc:5e:b3:46:ce:e7:8d:96:d4:ee:9b:
                    ca:02:0e:14:8e:e6:a1:c3:a1:7c:ee:e8:cb:c8:f3:
                    64:26:d7:77:78:6d:68:d5:b1:2f:c2:99:9f:8f:ce:
                    af:dd:3a:95:bd:5c:a8:73:19:a9:94:88:d1:7c:87:
                    df:50:2f:73:6c:c1:28:37:c3:f3:68:05:8c:68:c2:
                    7b:24:d7:7f:c7:aa:fe:01:4e:36:35:5f:bd:31:a3:
                    a9:a3:91:c7:68:fb:db:fc:11:c7:64:28:18:41:02:
                    fe:b3:8a:0f:87:08:11:6c:c8:5a:99:ff:12:ab:75:
                    3c:11:a4:67:fa:7e:9a:a4:10:66:e6:9c:40:f9:ae:
                    89:99:c8:c0:74:cc:0e:83:ec:0c:34:9f:8f:73:d2:
                    99:80:da:be:28:6b:48:35:11:44:81:4b:ab:c0:41:
                    23:70:c2:28:87:c9:9a:d9:8e:d9:17:64:8f:ed:d3:
                    fd:69:73:10:5f:e6:df:b2:ba:ad:ee:00:3f:13:5a:
                    86:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:39:E9:22:2F:00:D7:F5:0C:90:2E:51:9A:8B:36:00:F1:36:5F:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4f60b07-acbb-3892-b7d0-ea904d0a28e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.91.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:eb:02:9f:3e:10:04:ff:bc:d6:93:8d:3a:f7:84:1d:76:63:
         4e:fc:f9:72:d2:79:e6:62:d2:56:3d:ed:5f:60:df:a6:ae:90:
         ef:68:0e:36:53:d1:56:1c:41:b6:18:c0:23:a2:e5:e4:a3:cc:
         04:03:bc:51:44:8e:52:fd:08:63:10:32:82:03:c2:62:c8:d1:
         13:21:0a:13:8d:01:12:c3:01:ef:55:3c:f5:eb:40:9e:ec:96:
         10:49:fe:b2:4d:20:29:d8:d7:fe:71:35:09:4f:e0:09:a3:92:
         ac:47:d5:75:30:e4:fc:6a:55:41:57:ae:d6:9e:29:d8:97:3a:
         a9:36:aa:0b:fc:16:f0:db:59:15:a9:bb:62:2f:28:e2:ab:25:
         89:a1:3a:9a:fa:b5:49:54:48:59:74:d3:8e:5a:c3:05:9e:87:
         98:8e:8e:f9:c7:f5:5b:0b:dc:e0:87:f5:bc:4f:2e:94:13:3a:
         92:b3:31:cd:1e:4e:3f:d3:98:19:3c:d7:f5:93:c3:f0:13:dd:
         ea:85:23:a5:ee:5f:0f:c9:56:5b:0f:51:03:4f:33:3b:5d:3b:
         6b:72:a7:2f:d4:e7:46:50:ba:69:87:18:05:3d:65:22:c2:54:
         d0:b4:7e:44:99:9b:c1:5e:73:95:29:e2:05:71:9b:c3:68:51:
         3e:19:dd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:01:30 2026 by rpki-client