Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/ad2c90a9-e608-36f7-9b4b-343c8e14f51a.roa
File:                     ad2c90a9-e608-36f7-9b4b-343c8e14f51a.roa (raw, json)
Hash identifier:          cdrxB3xuwGkOv+Q7z1C/Fx1irkmCLpASE12GMEWBpOQ=
Subject key identifier:   04:03:86:40:9A:84:DC:F1:F8:16:9C:E4:2E:6A:12:56:2B:F9:51:5C
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584EE7BCB4EE348DFF30346EB900
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/ad2c90a9-e608-36f7-9b4b-343c8e14f51a.roa
Signing time:             Fri 21 Aug 2026 01:00:12 +0000
ROA not before:           Fri 21 Aug 2026 01:00:12 +0000
ROA not after:            Thu 19 Nov 2026 02:00:12 +0000
asID:                     63062
IP address blocks:        67.44.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 Oct 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:e7:bc:b4:ee:34:8d:ff:30:34:6e:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Aug 21 01:00:12 2026 GMT
            Not After : Nov 19 02:00:12 2026 GMT
        Subject: CN=323a9fdd-9cb3-4eb7-a458-95a2cfcd54e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:67:e2:7a:98:63:f2:e0:18:c8:17:15:6f:45:
                    d7:10:60:91:b3:18:d5:da:60:94:37:84:b0:fb:4f:
                    05:e8:43:d4:26:a0:eb:be:2e:22:d9:63:78:08:40:
                    d3:ce:e1:7f:50:ba:44:47:44:df:5a:53:5b:5c:97:
                    63:05:d7:25:e8:7c:db:05:d8:a9:9f:b2:10:0c:3a:
                    20:5d:1c:90:d2:7e:68:00:f0:73:b1:06:3f:22:cc:
                    9a:fa:ed:a6:37:07:38:50:6f:61:c0:0a:91:e7:7c:
                    f8:eb:da:94:60:e8:10:d1:fd:28:35:d6:ce:66:80:
                    b1:5d:8c:58:32:ed:1a:74:61:91:8e:86:42:ca:bc:
                    59:57:19:26:c2:17:03:9c:58:c8:4e:d1:e1:01:ac:
                    59:2b:66:d4:c1:b4:4d:dc:20:51:1d:78:60:c0:99:
                    bb:7a:81:3f:43:2e:f5:b5:23:bd:7d:40:ce:4c:02:
                    d8:ac:3f:01:ad:17:4b:cb:08:e3:3f:a5:63:58:2b:
                    5c:91:d0:82:ef:e0:5c:d4:32:92:05:15:13:05:c6:
                    e3:4c:e6:2e:e0:ff:c8:8c:a1:59:33:fd:a0:a0:7c:
                    bc:4f:64:44:0c:9d:df:95:aa:e0:9b:7c:38:f7:78:
                    a3:27:0e:13:bf:be:be:7a:be:db:97:c2:11:ba:0b:
                    ad:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:03:86:40:9A:84:DC:F1:F8:16:9C:E4:2E:6A:12:56:2B:F9:51:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/ad2c90a9-e608-36f7-9b4b-343c8e14f51a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.44.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:91:e2:59:8a:40:b5:fe:92:32:99:77:82:d5:d6:b0:a9:d6:
         04:b4:b9:22:3c:c0:c3:49:31:09:79:fc:60:88:29:4b:bf:86:
         e7:96:dd:48:a1:8d:f5:1a:c6:b6:d6:49:e5:d1:60:08:a8:1e:
         c0:e8:ab:e3:fc:cc:5b:9d:c8:56:e7:8e:a1:5b:77:9b:63:fb:
         dc:88:bf:f7:34:88:53:93:1f:3f:bc:df:b6:91:20:f9:c7:c0:
         57:b1:cf:c1:cd:56:15:35:6b:07:d4:03:e2:5d:fd:df:73:d8:
         10:5b:1e:80:1d:a3:1c:08:fc:71:92:36:5d:41:be:d8:33:ce:
         2f:dc:12:bd:c7:11:87:84:84:ae:e3:32:3a:b2:3f:26:4a:03:
         d5:76:0e:c9:22:10:5f:3b:b5:7e:b6:ca:59:53:93:2d:f1:99:
         44:4e:e7:b7:5f:8a:d0:1a:16:1c:c5:21:9d:1e:35:82:1d:20:
         6e:eb:73:18:e5:a2:3b:8d:d6:70:e8:51:ec:e7:05:f1:be:a4:
         bb:66:80:0c:38:bc:e6:86:a9:b6:9a:05:79:87:c0:fc:36:42:
         98:de:7a:fb:f8:8c:c4:54:cb:22:b9:0f:d4:be:43:d9:ac:02:
         8c:22:46:b1:62:3b:64:93:dc:77:a8:de:97:2f:a5:a4:2c:2e:
         e0:16:86:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 10:44:03 2026 by rpki-client