Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2dc48c37-9e72-3fe8-b575-dd121af8515d.roa
File:                     2dc48c37-9e72-3fe8-b575-dd121af8515d.roa (raw, json)
Hash identifier:          qkFipFghjI4rVL+jJMeE7fbb7bYJ5CKR+XVHLy9UgUg=
Subject key identifier:   80:8C:08:D6:40:4A:E9:1E:2C:BC:36:2E:D5:E1:97:23:CE:08:65:1B
Certificate issuer:       /CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
Certificate serial:       010D0C9F4328584EC20C7CB6E893E7757E138B80
Authority key identifier: AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2dc48c37-9e72-3fe8-b575-dd121af8515d.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     62943
IP address blocks:        67.221.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 11 Aug 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:7c:b6:e8:93:e7:75:7e:13:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7e4357e-170f-4fb9-8849-3c84257f2ad2
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=64e0c24f-b656-4e3f-9b37-d0e6ae255e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:49:79:48:06:51:73:0c:95:fe:b2:1d:24:
                    42:e5:c6:e6:1f:84:b9:b9:c4:87:de:36:13:80:07:
                    f5:a4:01:b1:11:5e:b4:6d:1c:d9:d3:03:9a:f2:c8:
                    15:a8:44:b6:bf:1a:fa:7b:9f:e4:8b:2a:85:27:e8:
                    b3:bd:f5:b7:b5:0f:2c:52:e7:8f:54:8f:5c:4d:cf:
                    f9:69:bf:d7:55:27:f7:86:f1:84:b8:88:85:dc:5e:
                    3a:d8:99:eb:e4:7e:a5:af:88:06:63:2e:e6:a8:a3:
                    b5:14:81:f2:c8:fc:5a:14:23:28:5d:71:2c:75:33:
                    2e:53:d8:30:46:5d:3a:dc:89:75:bd:1f:f9:12:1b:
                    23:a0:dc:16:00:c1:e2:92:b0:de:89:28:7b:b7:c8:
                    0e:4c:cb:6a:2f:e8:a8:ae:40:9c:4d:ae:7b:74:fb:
                    64:e4:10:2a:54:7a:2f:01:03:2e:d3:82:d1:16:55:
                    e6:a2:62:e0:5d:a6:47:9e:f1:0d:08:b4:a1:8d:53:
                    2c:fc:51:a4:50:37:34:ac:a9:68:99:24:0c:06:d0:
                    ce:64:39:85:c9:72:44:e9:db:91:f2:a8:66:46:61:
                    b3:a5:c3:aa:c7:36:bd:dc:58:9b:55:6d:bd:f5:d0:
                    01:ea:3b:5f:46:1a:e9:26:8d:7f:9c:73:18:90:91:
                    b6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8C:08:D6:40:4A:E9:1E:2C:BC:36:2E:D5:E1:97:23:CE:08:65:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/2dc48c37-9e72-3fe8-b575-dd121af8515d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2/b7e4357e-170f-4fb9-8849-3c84257f2ad2.crl

            X509v3 Authority Key Identifier:
                keyid:AA:F4:2F:5F:57:0A:02:A1:F6:60:2A:96:0E:7E:6D:91:94:FC:36:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b7e4357e-170f-4fb9-8849-3c84257f2ad2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:28:fe:b0:cf:d9:e8:90:0a:20:3c:81:76:b3:24:5c:cf:7a:
         e6:f5:6e:c2:e1:3a:94:c3:a3:51:6f:6d:7d:c7:5d:ce:b9:3a:
         c5:9e:63:af:ef:d3:ef:fa:70:c6:d7:7f:fa:76:ec:b5:02:08:
         f5:a8:7f:05:fa:1a:ac:87:93:e3:6a:15:e7:0e:6a:5d:c5:47:
         80:a7:38:ef:f4:00:73:28:c6:b5:92:68:a2:5f:9e:2d:09:fb:
         d6:d7:5f:8a:58:36:3d:a6:ab:1d:6b:e5:8e:9f:ba:4e:d8:8c:
         89:c4:d3:ea:6d:43:6b:9a:75:d4:f7:bc:42:68:64:a0:a8:fc:
         23:00:7d:ed:e7:31:02:e0:39:b2:0f:b5:f7:04:f0:e5:d1:14:
         58:5a:66:2e:9e:46:0c:56:f7:d0:51:05:27:9e:5b:1d:4d:79:
         20:0c:aa:e6:5b:a4:6b:51:7d:ed:38:8d:76:dd:81:64:63:85:
         9c:ba:09:fd:43:af:3f:39:ab:43:3f:3a:b4:23:a9:28:ef:c4:
         79:2c:54:e8:14:f8:16:03:dc:8d:37:5d:b6:a6:80:90:2a:dc:
         69:80:3c:c5:2b:76:65:16:28:ec:e0:b0:6b:e4:30:12:56:10:
         85:2e:42:54:da:35:01:28:e4:c9:20:17:cf:9d:46:ff:a5:75:
         8b:20:b1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 19:23:32 2026 by rpki-client