Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa
File:                     af6da1df-6310-375d-ba7f-a2f60512f77a.roa (raw, json)
Hash identifier:          WdpC996buhFkq9G9jPZETSJZU5i580H0/gLGdFF62jI=
Subject key identifier:   06:80:12:C9:BB:A3:87:6E:FB:F7:33:0E:70:44:F2:37:E3:6E:26:DA
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584CDF32413A5336A363040A9880
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     31898
IP address blocks:        67.217.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:41:3a:53:36:a3:63:04:0a:98:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=bb604476-7b3b-49df-81c3-55491a758878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:9e:c7:bc:bc:ed:a0:04:c5:2a:36:a0:d2:
                    6e:b5:d3:d9:bb:8a:68:53:c8:bd:d8:29:bd:fe:89:
                    48:9e:f3:69:e0:ed:0a:3f:f1:fc:50:c1:e9:0f:71:
                    80:b9:0d:ca:9c:df:04:82:65:38:02:2c:37:77:81:
                    a7:de:18:ba:da:ef:2b:ef:1f:cd:b4:b5:59:93:6d:
                    de:d9:f6:dc:4b:e0:ed:0f:d8:3c:49:07:37:5d:87:
                    88:47:36:80:25:0c:3a:95:8a:02:66:e0:cb:c0:e4:
                    63:fd:1b:01:68:83:ea:cc:6c:7d:8d:dc:e3:31:32:
                    3f:cb:70:4a:17:c3:3b:3a:52:61:1e:20:0e:62:f8:
                    62:a8:ad:48:d7:58:4c:f1:7b:5f:5f:13:02:34:fa:
                    6d:16:ae:a6:8b:72:4a:24:d4:f3:15:16:47:32:c0:
                    6c:8c:f6:80:10:a6:2b:8c:2b:d9:ab:84:b9:35:b3:
                    8b:66:0d:7b:91:15:a1:71:2a:3b:89:ae:f3:94:e1:
                    b3:a9:93:9f:47:f4:52:3e:55:e0:2d:80:b6:51:dc:
                    88:9e:0d:7c:37:1e:9c:92:1d:08:3a:6a:77:9c:eb:
                    b0:e8:87:ba:fd:35:84:29:5d:07:62:6f:d2:0a:46:
                    55:ad:2c:0c:54:10:16:25:c0:f2:d8:ff:89:51:47:
                    db:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:80:12:C9:BB:A3:87:6E:FB:F7:33:0E:70:44:F2:37:E3:6E:26:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/af6da1df-6310-375d-ba7f-a2f60512f77a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c8:a2:ae:89:f4:b2:cf:c5:91:37:be:4b:44:1d:2c:3d:22:ae:
         ea:b9:df:0a:c0:52:f9:8a:3e:72:85:7b:ab:dc:7f:38:c9:04:
         1c:ba:26:cf:f0:16:6f:01:4d:d2:a1:7e:30:2f:a8:3a:6e:51:
         52:82:3d:fe:74:76:e0:eb:91:14:0e:07:28:54:79:71:fc:3a:
         0b:1d:cf:8e:e3:24:bd:9c:c0:56:d3:69:9f:fd:5a:26:c4:58:
         b2:8d:2b:90:7d:2e:bb:c9:8e:a3:bd:9b:55:8a:c3:6f:e5:ce:
         21:ef:02:92:d3:22:9c:c5:c1:62:f1:b2:83:fa:b8:06:20:f2:
         7b:e1:82:cc:2d:5b:84:37:68:8c:ef:e4:4a:fd:e9:d3:ac:65:
         bb:80:06:53:92:ed:7c:1b:95:68:19:5b:3b:05:74:e6:e6:df:
         b5:4c:92:e9:e4:7c:86:d4:58:a6:ee:24:a9:a3:00:ea:b8:3b:
         fd:94:eb:10:f7:81:3e:8f:4b:07:ea:75:c9:1b:d0:9e:66:00:
         9f:5b:17:63:ed:f5:44:46:a5:74:bd:5b:5c:6f:16:4d:a1:8d:
         82:dd:20:df:b8:e5:9e:50:db:d9:15:a8:65:b3:c0:6a:29:aa:
         48:f0:62:ed:0c:e2:87:05:8a:df:7f:22:77:8c:1e:13:b1:0e:
         06:0b:4d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:31:43 2026 by rpki-client