Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e7086ee2-313b-4593-ae44-3ec24e5a2a6b/8435ad67-f167-30b1-a261-d9aabc415baf.roa
File:                     8435ad67-f167-30b1-a261-d9aabc415baf.roa (raw, json)
Hash identifier:          DUb851m7LnEVuuiP2YrmmGA9Bcb3r84HXMkjk+zgE0Y=
Subject key identifier:   81:86:6D:F4:41:8D:73:5D:CC:13:52:29:AD:24:16:E1:AD:55:C8:A1
Certificate issuer:       /CN=e7086ee2-313b-4593-ae44-3ec24e5a2a6b
Certificate serial:       010D0C9F4328584D237A77CA43F0705123C3BBE0
Authority key identifier: D6:C9:61:F5:C4:4C:90:6F:12:A0:6C:98:D3:3E:08:22:C8:7B:46:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e7086ee2-313b-4593-ae44-3ec24e5a2a6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e7086ee2-313b-4593-ae44-3ec24e5a2a6b/8435ad67-f167-30b1-a261-d9aabc415baf.roa
Signing time:             Thu 12 Mar 2026 01:00:32 +0000
ROA not before:           Thu 12 Mar 2026 01:00:32 +0000
ROA not after:            Wed 10 Jun 2026 01:00:32 +0000
asID:                     30247
IP address blocks:        67.158.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e7086ee2-313b-4593-ae44-3ec24e5a2a6b/e7086ee2-313b-4593-ae44-3ec24e5a2a6b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e7086ee2-313b-4593-ae44-3ec24e5a2a6b/e7086ee2-313b-4593-ae44-3ec24e5a2a6b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e7086ee2-313b-4593-ae44-3ec24e5a2a6b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 14 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:23:7a:77:ca:43:f0:70:51:23:c3:bb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7086ee2-313b-4593-ae44-3ec24e5a2a6b
        Validity
            Not Before: Mar 12 01:00:32 2026 GMT
            Not After : Jun 10 01:00:32 2026 GMT
        Subject: CN=9c0e9d4d-710c-4a05-bd65-935fa795cc3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6a:35:49:2a:b5:f7:88:32:01:4b:42:09:f9:
                    41:26:77:5a:7c:11:7f:c9:1b:10:71:38:ad:2c:92:
                    77:b6:97:68:29:17:64:95:cc:a2:6a:66:2d:01:28:
                    5c:56:e8:77:42:de:21:64:b6:44:35:ec:09:61:8c:
                    59:c8:57:b2:40:d8:66:2c:ec:44:ba:92:03:94:1a:
                    27:a4:ea:a2:28:17:b3:4e:a6:b6:77:45:04:30:0c:
                    47:9f:58:55:0e:64:2f:99:f3:87:ab:82:67:f9:6c:
                    5a:d0:31:47:c8:ab:86:57:e5:c1:b7:7d:e2:0a:8d:
                    5c:ff:53:96:3e:2d:67:7e:96:63:12:60:9e:df:08:
                    00:53:e1:e5:bf:7f:2b:4f:fa:d7:c8:f3:b5:b5:48:
                    9d:1e:ce:0a:a8:f9:5a:a9:0f:ea:ea:9c:69:54:0a:
                    98:3b:7b:78:3f:1d:04:e8:9f:ab:c0:9e:53:58:49:
                    05:95:0b:55:1e:0b:ac:6b:92:ec:17:9a:5c:a8:98:
                    26:f7:dd:58:54:63:36:84:93:35:c4:5c:98:b4:d9:
                    6d:c8:ce:69:7e:79:44:0f:33:41:5c:14:ee:77:03:
                    cf:75:c0:19:5d:2f:8e:90:e9:a9:35:a3:f2:6f:7c:
                    dc:f1:53:e1:c4:85:51:5f:8a:fd:d3:a3:e9:54:c1:
                    8d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:86:6D:F4:41:8D:73:5D:CC:13:52:29:AD:24:16:E1:AD:55:C8:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e7086ee2-313b-4593-ae44-3ec24e5a2a6b/8435ad67-f167-30b1-a261-d9aabc415baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e7086ee2-313b-4593-ae44-3ec24e5a2a6b/e7086ee2-313b-4593-ae44-3ec24e5a2a6b.crl

            X509v3 Authority Key Identifier:
                keyid:D6:C9:61:F5:C4:4C:90:6F:12:A0:6C:98:D3:3E:08:22:C8:7B:46:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e7086ee2-313b-4593-ae44-3ec24e5a2a6b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.158.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:75:3b:af:75:31:6c:37:e3:d3:ba:31:80:2c:a7:77:5e:2d:
         ce:ed:f2:57:aa:ca:18:f5:03:d6:53:e5:6c:2a:86:db:03:8a:
         08:cd:9e:83:79:9d:e3:1d:89:28:59:50:cc:d0:7b:3e:4e:10:
         42:0d:41:4a:f1:97:af:61:b4:5b:aa:27:1f:e9:d9:72:46:f2:
         9d:0c:67:d9:0e:63:93:d7:e0:54:bf:65:76:bd:6e:20:c9:7e:
         90:dd:a9:0d:69:68:32:89:2c:68:b7:2f:30:22:f8:b3:34:e9:
         25:fb:3e:a9:4d:7c:7a:9f:40:2b:de:1d:ce:d1:74:a8:cd:2c:
         fc:47:f9:85:21:30:ac:de:64:56:ae:1f:a3:57:f4:1a:27:3f:
         4f:92:c8:6a:45:3d:1e:2d:a6:3f:ec:8e:f4:45:6d:dd:d4:16:
         4e:2a:5c:1d:29:78:68:62:c5:72:63:e6:f8:2b:8f:e4:11:a3:
         36:c9:0f:ac:ca:f7:04:31:40:d8:68:f2:da:62:85:af:30:ed:
         85:f9:35:ee:76:48:34:0a:52:4b:7c:7a:a5:7c:e6:90:e9:f1:
         26:d3:cd:3e:64:ac:33:c4:cf:47:8c:3e:08:98:c3:c8:47:5b:
         40:35:f3:f7:00:ff:a0:d5:14:f0:0d:84:26:48:a2:05:31:4e:
         9a:f8:9a:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:47:03 2026 by rpki-client