Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9a747c3b-3fd9-3e48-a4c5-c02174460043.roa
File:                     9a747c3b-3fd9-3e48-a4c5-c02174460043.roa (raw, json)
Hash identifier:          mrxry/ZgVeav8FZGTtYas+KyPWXUtHeKsNJgkrjR/ZQ=
Subject key identifier:   66:98:84:C4:B9:D0:A8:07:CE:F6:F4:BF:72:D0:05:EF:09:53:C8:27
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584EB84719753DD57B5674D66C40
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9a747c3b-3fd9-3e48-a4c5-c02174460043.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     31898
IP address blocks:        67.217.64.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 30 Aug 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:19:75:3d:d5:7b:56:74:d6:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=f71dd2b1-1137-472a-9996-171db7922788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f6:b8:ab:49:f1:76:9e:63:63:25:66:87:57:
                    1d:78:93:9c:d0:54:40:78:25:b0:6f:92:87:db:30:
                    e1:8c:65:ba:0d:78:bd:37:60:6f:e3:c4:7f:96:ca:
                    88:68:32:a2:6a:47:ab:ff:be:18:0c:84:e1:f2:95:
                    3c:45:49:7d:90:1b:00:f2:16:98:59:a8:ff:be:cd:
                    7f:07:5a:ad:d0:ba:ad:a2:ca:13:34:60:cf:69:f6:
                    30:9e:73:87:4d:49:0f:a1:fd:27:84:ee:0d:32:f3:
                    a5:46:ac:3f:b5:f0:b0:cf:51:8b:c8:b5:75:df:0a:
                    94:9c:93:2b:5d:4c:9f:1b:0e:b3:39:19:08:25:31:
                    30:b4:a2:70:d3:0c:7c:d8:6f:b7:06:17:ce:69:a5:
                    bc:e7:b9:cf:a9:e5:11:1c:ab:d8:d1:24:9e:10:f8:
                    ff:77:6b:7b:e4:2f:1a:70:07:6b:3f:00:e6:b7:05:
                    83:96:c3:35:dc:bd:21:30:fe:12:c8:bb:5f:4c:a6:
                    38:cd:ac:04:a8:a1:db:b3:47:5c:cd:62:a0:2e:8e:
                    04:e1:2b:fc:64:eb:4d:31:a1:c7:d1:1b:2c:62:70:
                    d5:12:e2:16:f6:2f:27:a0:ef:19:f5:26:f0:d6:33:
                    00:17:8c:70:bb:1f:24:7a:95:fe:3e:57:f9:95:26:
                    fd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:98:84:C4:B9:D0:A8:07:CE:F6:F4:BF:72:D0:05:EF:09:53:C8:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/9a747c3b-3fd9-3e48-a4c5-c02174460043.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:e8:16:cd:7c:1a:2e:65:7d:cb:b6:61:7c:4d:70:74:71:02:
         cc:17:53:b7:58:7b:03:c8:e9:3a:5f:78:a3:ec:d5:d9:db:a6:
         b4:f3:d2:7a:d1:9f:72:28:ff:33:9d:f0:fd:f3:a8:ba:fe:03:
         27:d2:9f:b3:81:1a:96:54:5c:dc:52:01:07:f0:45:3f:b4:88:
         b5:9e:12:ec:41:5a:c3:60:0c:7a:d6:c7:09:66:36:2e:30:c8:
         6a:dc:04:11:ae:fd:fa:1b:a1:a4:23:0c:fd:77:87:86:69:4a:
         00:59:12:73:5d:0d:ba:80:6e:1c:ce:9b:70:ee:cc:d3:5e:56:
         0d:60:8a:db:24:cc:7f:f9:b1:07:01:4f:55:30:47:b8:b6:a6:
         e0:43:6d:bd:d7:71:d4:29:2c:43:2b:6c:93:88:4a:03:97:3f:
         1b:34:89:00:e4:50:95:3d:dd:7c:3f:f0:2e:ab:b1:cc:b9:ab:
         5f:d4:50:38:e8:31:86:64:b6:b7:ef:56:f0:61:5d:3f:4c:36:
         b5:03:7e:ca:76:7c:c6:d9:72:3f:90:1b:a9:67:6b:95:1c:d8:
         ff:75:c5:52:1e:5a:19:b0:d8:fe:d6:d6:7a:ee:19:c3:e9:8d:
         cc:b9:01:06:5d:bf:e6:b0:7c:dc:d9:0e:2d:71:62:46:06:25:
         b1:d3:f6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 09:06:56 2026 by rpki-client