Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b9ea5810-ef2c-3626-93cf-8e7c15c9758c.roa
File:                     b9ea5810-ef2c-3626-93cf-8e7c15c9758c.roa (raw, json)
Hash identifier:          lBzIsFRpEA6JEWyZ3fwaGPavDUHqC6lYw8WcSKtLSaw=
Subject key identifier:   3B:21:50:2A:FB:7D:AF:20:FC:9E:64:D8:1C:33:95:5B:D3:72:4A:AE
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584ECBD1DA14FA39C27E3C3E3080
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b9ea5810-ef2c-3626-93cf-8e7c15c9758c.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     16509
IP address blocks:        67.215.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:da:14:fa:39:c2:7e:3c:3e:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=b99b3717-f16b-4e81-b31e-d5e891447845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d4:03:06:fd:b3:ab:79:a6:22:33:66:f6:74:
                    c4:6e:22:f5:b1:3b:11:17:14:41:6b:c6:25:23:07:
                    44:dd:d8:16:25:12:94:3e:20:32:ec:04:22:18:da:
                    33:b2:2a:4e:a9:0a:af:c1:58:6e:2c:c5:53:12:c5:
                    a7:d7:1b:97:6c:be:4b:3b:20:ca:8e:21:17:c3:79:
                    2b:2e:ee:50:50:b9:9d:7e:0a:6b:40:97:12:f2:2a:
                    7d:34:9e:6d:c0:08:ed:04:d4:14:85:b6:89:ef:fd:
                    f6:9b:a6:e8:16:f2:55:09:b1:8f:a3:8b:b6:ae:61:
                    50:8a:37:60:cc:3d:1c:62:fd:f6:7c:2b:e8:12:90:
                    9c:a4:5a:08:65:2d:68:c3:c5:e3:0a:9b:bb:ea:e0:
                    bd:f3:99:77:b2:78:ff:f7:b9:83:0a:7c:4a:1c:ee:
                    87:a0:26:b1:30:58:7f:b7:fd:0c:c9:c1:eb:41:78:
                    91:df:ae:dc:7e:5e:35:c7:c5:c9:36:5e:f9:63:34:
                    3a:68:ae:97:02:87:c5:f8:55:41:85:1f:48:75:ac:
                    03:08:68:b2:c9:5e:f6:af:71:b2:04:ec:bc:a7:64:
                    0e:cb:6e:0e:0e:51:1e:4a:f2:e6:4a:40:78:f9:d5:
                    5e:c0:06:92:03:71:58:a1:24:af:82:6e:85:6c:18:
                    3d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:21:50:2A:FB:7D:AF:20:FC:9E:64:D8:1C:33:95:5B:D3:72:4A:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/b9ea5810-ef2c-3626-93cf-8e7c15c9758c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:1e:c5:c6:f8:a4:8d:03:9b:2c:23:d2:ab:65:4f:0b:97:83:
         9e:22:ae:bd:a0:f1:8f:a7:19:03:ee:47:9c:c5:c6:13:04:40:
         98:0a:92:a7:c3:db:c2:2c:9f:b2:0f:fe:4b:b2:77:14:60:8f:
         3b:6c:47:8b:4e:2b:2f:e6:63:23:02:b0:82:0c:63:c3:39:aa:
         56:af:24:77:a8:92:04:b4:bd:5e:f5:92:3c:53:db:ba:67:c9:
         a4:b5:4a:7c:8c:e3:15:0b:e5:21:60:2d:40:e9:72:63:cf:14:
         ff:61:b2:32:c8:b7:9c:27:04:b5:d6:7f:2a:ce:71:b0:35:c7:
         b8:14:22:7e:55:98:d8:56:6a:7f:9f:4f:03:c7:90:0a:34:40:
         c1:6e:3c:fa:d0:4a:e8:d0:f3:23:8a:15:6a:da:b7:18:35:53:
         66:05:65:b1:47:47:65:83:e6:22:7f:aa:9e:69:f0:37:d9:a1:
         bf:7a:9b:e0:a0:ec:77:f8:46:0a:aa:09:37:1b:f1:43:b2:96:
         8d:ba:34:fe:b1:3e:95:7e:bf:c9:8f:3a:47:7e:f3:be:c1:cc:
         ad:f4:bf:46:1b:74:87:d1:9d:31:12:a2:f1:72:ad:d3:c4:31:
         d7:e4:f9:bb:2f:d2:97:09:38:bc:96:a5:b2:8a:2d:31:c0:41:
         d2:1f:f0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:13:11 2026 by rpki-client