Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/cbc74d13-72d1-358c-98ad-e7b27ff4d84e.roa
File:                     cbc74d13-72d1-358c-98ad-e7b27ff4d84e.roa (raw, json)
Hash identifier:          WEZ2dh8ggyDXgX1Pvt+GH7YqcTDVCA/Bc8tQGvGu0ic=
Subject key identifier:   A7:4F:9C:BA:D5:D5:66:0F:A0:67:6C:4A:29:4E:85:63:E6:F4:D0:6C
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584ECBD1DA205CEB2AF3A765DD00
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/cbc74d13-72d1-358c-98ad-e7b27ff4d84e.roa
Signing time:             Tue 11 Aug 2026 01:00:11 +0000
ROA not before:           Tue 11 Aug 2026 01:00:11 +0000
ROA not after:            Mon 09 Nov 2026 02:00:11 +0000
asID:                     14618
IP address blocks:        67.215.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:cb:d1:da:20:5c:eb:2a:f3:a7:65:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Aug 11 01:00:11 2026 GMT
            Not After : Nov  9 02:00:11 2026 GMT
        Subject: CN=54c48930-b219-4cd4-8ae1-4cc7b148c726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:01:82:7a:29:55:9a:0f:57:31:b7:13:24:10:
                    2f:82:91:3c:59:8e:82:d1:95:d7:39:35:a4:94:43:
                    e8:9f:0a:85:14:e6:11:06:df:95:0a:da:bd:c0:d7:
                    94:ac:ca:83:64:94:92:25:5b:b2:c9:19:9a:10:a2:
                    0d:bb:37:fe:fd:10:bb:27:c4:2a:3c:f6:17:15:33:
                    cb:1d:48:e9:c8:34:67:9e:96:f9:12:a8:85:2a:81:
                    8b:72:45:de:ad:32:50:d1:f8:f1:2d:92:44:65:76:
                    09:47:e9:3f:aa:9f:db:a4:8c:57:a5:a0:03:18:a3:
                    e1:8a:38:41:66:be:d8:2c:23:65:55:4d:23:f3:e8:
                    8f:c5:fa:3d:ec:99:a2:4e:64:c9:24:f5:36:93:fa:
                    7c:0c:d2:da:0b:b7:34:4b:9a:38:16:45:65:af:e1:
                    8a:fb:67:56:cf:02:04:fc:10:c7:a6:ab:d2:fd:17:
                    18:ec:5a:f8:91:9d:85:ea:23:57:06:5d:57:be:fa:
                    0d:b8:6f:ce:c9:8c:3c:3e:10:52:aa:49:45:2c:d9:
                    99:c1:0c:d6:97:5e:11:ad:41:92:f6:ca:fc:b3:7f:
                    06:00:c0:b2:b3:01:1e:fb:5a:f6:42:d5:ba:5e:86:
                    9a:a6:b3:7f:ba:ca:07:2d:a1:d1:73:1c:6d:82:19:
                    58:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:4F:9C:BA:D5:D5:66:0F:A0:67:6C:4A:29:4E:85:63:E6:F4:D0:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/cbc74d13-72d1-358c-98ad-e7b27ff4d84e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:a9:3d:dd:b1:4a:30:29:b5:5c:9c:22:2b:8c:be:06:e9:af:
         4d:86:04:f7:6f:b4:dd:73:c9:24:07:ef:9d:e1:83:d6:ed:9a:
         46:7e:b8:82:63:d6:d3:59:53:98:73:40:2a:7a:59:ee:0c:60:
         ba:3d:d6:a8:99:50:01:bb:65:88:bf:c0:7d:5e:b8:14:28:85:
         42:bc:3f:88:96:22:73:d4:56:77:02:5d:9f:2b:f2:7a:33:bc:
         fd:11:b2:ee:71:6e:c5:23:20:f1:26:29:2e:c2:e4:c8:eb:4e:
         ca:c1:7d:1c:0a:17:19:77:f1:7e:57:d1:e1:83:5e:32:c1:60:
         ad:48:e7:db:75:65:f1:eb:c0:ab:87:83:ae:e7:be:60:a3:9d:
         cc:5d:1a:16:0f:42:32:e0:1c:cc:f8:06:ca:53:b8:6c:fb:06:
         2a:72:22:6d:59:71:a2:82:6a:39:d8:63:75:9b:d8:10:67:bb:
         a1:11:14:4e:20:1d:81:a5:14:af:dc:1a:55:03:19:c1:81:06:
         d1:cb:97:43:fd:b2:45:bb:e2:cc:44:05:e8:2e:33:f5:0c:a6:
         43:9e:cc:e7:da:5d:7e:82:79:fe:0e:7c:64:36:17:0b:8e:c3:
         75:db:a3:fa:07:39:d6:b5:4e:67:20:e2:48:62:5f:d6:26:a5:
         b0:5e:54:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:56:28 2026 by rpki-client