Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/49e2e41a-94df-3320-b9c4-d6de1ffea59f.roa
File:                     49e2e41a-94df-3320-b9c4-d6de1ffea59f.roa (raw, json)
Hash identifier:          GbwFPBP1FDIRAl4ckg2mA8jHPC18DzHm4ngS7cx9JMg=
Subject key identifier:   19:78:BB:9E:B5:60:D6:4A:2C:20:F3:F3:13:E1:3A:0B:44:39:71:37
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584DF91CFC57EE77C43D51C75200
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/49e2e41a-94df-3320-b9c4-d6de1ffea59f.roa
Signing time:             Wed 27 May 2026 13:36:15 +0000
ROA not before:           Wed 27 May 2026 13:36:15 +0000
ROA not after:            Tue 25 Aug 2026 13:36:15 +0000
asID:                     401881
IP address blocks:        67.43.40.0/24 maxlen: 24
                          67.43.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 03 Jun 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f9:1c:fc:57:ee:77:c4:3d:51:c7:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: May 27 13:36:15 2026 GMT
            Not After : Aug 25 13:36:15 2026 GMT
        Subject: CN=8e1f8f72-ead0-4c6b-ab53-1582be478774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:62:94:16:37:74:a3:27:42:65:3e:5e:e6:bf:
                    85:9e:0f:8b:66:2a:0e:aa:0d:a9:a7:0f:16:2f:21:
                    a4:00:ca:da:d2:05:fb:20:b9:89:75:29:b8:ce:e2:
                    d9:fb:36:75:f1:60:ea:c3:c8:5d:45:6e:ba:81:18:
                    ae:03:71:68:24:50:e7:6a:ef:6d:e3:ac:c5:7e:61:
                    1f:fb:ba:39:4f:f2:04:13:06:31:18:4c:01:4f:0a:
                    18:1b:cf:cb:13:0f:c2:90:1e:4c:70:eb:22:38:fb:
                    83:85:7f:71:e2:8e:26:4e:df:56:4b:f1:f4:31:19:
                    92:74:16:5f:92:93:75:c9:56:ba:c5:28:7c:df:81:
                    51:30:88:21:96:1e:d7:78:b8:13:9e:31:4b:c8:a8:
                    be:59:0b:69:9a:3b:1a:b3:5d:0c:9c:db:73:3e:12:
                    3a:84:85:32:a2:ac:26:8c:21:31:57:1c:83:c5:f5:
                    76:7c:7c:a3:85:df:35:da:43:c3:fb:46:61:53:74:
                    2f:5c:9a:08:f3:31:a2:66:f9:98:3f:c9:ad:04:23:
                    3a:56:b0:98:4a:e4:80:0d:3a:1b:c9:fe:23:c7:6c:
                    48:ff:2a:59:37:68:da:57:ad:17:6f:06:dc:a8:88:
                    3f:14:63:a6:f8:93:10:6b:54:fe:3a:be:c3:79:6f:
                    38:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:78:BB:9E:B5:60:D6:4A:2C:20:F3:F3:13:E1:3A:0B:44:39:71:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/49e2e41a-94df-3320-b9c4-d6de1ffea59f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:9e:ef:8d:ab:35:9e:0e:36:2a:23:97:7b:4b:dd:dc:0a:9c:
         83:64:ee:fe:71:a4:f2:bd:ea:49:6f:4f:71:36:c6:d9:5f:bc:
         64:c1:e9:38:4d:29:0a:45:bd:40:9f:5b:11:80:f0:fd:52:b3:
         84:8f:9f:50:03:b8:91:17:87:1a:93:33:f0:b9:78:ed:46:a7:
         24:2c:0c:72:8d:e3:dd:0b:c1:0c:de:1e:07:8d:da:6e:0d:df:
         57:1b:12:aa:be:f8:cb:1b:1b:1c:61:3d:8d:ce:55:b9:98:eb:
         7f:d2:3b:b9:77:04:b8:60:05:b7:16:a5:ef:cf:4e:57:19:50:
         bb:67:9a:a4:b4:9f:81:83:f7:b4:d5:f4:11:4b:8e:48:e2:27:
         d4:7e:92:fd:4a:ee:71:de:93:89:6a:f6:c4:2c:cc:69:91:d6:
         6c:97:7a:63:17:16:48:e1:d1:c9:b3:bb:cb:38:3d:ea:cd:1e:
         6a:c3:4b:1d:8d:90:88:4e:26:b8:fc:48:5e:9f:c6:33:f8:9d:
         2b:9e:d0:88:e5:31:b8:44:16:6b:4c:05:11:d7:6f:b9:aa:31:
         19:ce:fd:89:59:c8:00:10:24:f2:31:e8:21:fa:f2:e5:71:fb:
         11:36:66:b5:af:d0:59:a1:80:64:ae:6b:3f:c5:33:9a:7c:d4:
         cb:ab:12:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:32:15 2026 by rpki-client