Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/419093a3-410c-3b99-857a-9596aab1928b.roa
File:                     419093a3-410c-3b99-857a-9596aab1928b.roa (raw, json)
Hash identifier:          L1pAYLtLuq0QKh30Zn3a2ifNHg1+0coNBlSYEX8aAXo=
Subject key identifier:   6B:9F:07:5C:6D:0E:1B:15:C3:10:1C:CB:BB:4D:AB:7C:EF:1C:36:5F
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584D24DFACC05F5AA19AFEF19400
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/419093a3-410c-3b99-857a-9596aab1928b.roa
Signing time:             Thu 12 Mar 2026 13:00:40 +0000
ROA not before:           Thu 12 Mar 2026 13:00:40 +0000
ROA not after:            Wed 10 Jun 2026 13:00:40 +0000
asID:                     7155
IP address blocks:        67.54.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:24:df:ac:c0:5f:5a:a1:9a:fe:f1:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Mar 12 13:00:40 2026 GMT
            Not After : Jun 10 13:00:40 2026 GMT
        Subject: CN=918a68a8-baec-4c2e-9a6d-83d7c153513e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:cc:91:6b:c1:cc:dd:e9:cd:60:51:7b:7c:
                    9b:ff:04:30:5b:b9:6c:9e:42:91:9b:35:a0:2e:bb:
                    c8:4d:c2:d7:4a:17:d8:b0:7e:88:cb:71:6f:ac:33:
                    87:76:e2:29:11:85:96:9a:b0:f0:b6:7a:a5:7a:31:
                    39:d0:df:fb:77:c4:73:06:df:c5:fd:6e:43:76:85:
                    3d:65:25:a9:54:8a:79:9f:a9:85:c8:9f:03:09:d6:
                    14:93:7d:7f:07:c4:77:d3:01:d9:05:f7:2c:b0:a5:
                    82:ef:30:01:80:07:f9:70:73:61:f0:46:ed:96:0b:
                    cb:95:d8:2e:b6:39:69:51:44:82:44:8c:57:72:e0:
                    ee:d1:ff:97:9a:41:fa:78:91:1b:35:e1:6f:0b:5b:
                    00:fb:e7:8a:8f:11:5a:06:c0:48:7c:5b:04:6d:3f:
                    1f:9f:c2:bc:e7:07:d8:e9:e1:a1:aa:a0:1f:6c:43:
                    c1:c5:d0:6c:84:55:20:a4:b4:6b:f2:33:8e:7e:3f:
                    c7:a7:dc:ff:a3:6a:38:18:8d:47:cf:2b:a4:a6:34:
                    5a:42:0b:ed:0d:c9:75:a2:35:b2:b9:70:73:ac:57:
                    2d:13:fc:35:1e:e8:47:46:55:ec:1c:02:8c:77:59:
                    b5:57:2b:da:c3:1b:1c:fa:34:e3:fa:85:f4:ac:f3:
                    1a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9F:07:5C:6D:0E:1B:15:C3:10:1C:CB:BB:4D:AB:7C:EF:1C:36:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/419093a3-410c-3b99-857a-9596aab1928b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.54.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c6:6f:f6:1c:14:ac:ef:9e:9e:dd:30:bb:18:96:5e:63:96:
         d2:f7:e7:63:78:45:20:b6:70:c4:8f:5a:e6:8d:d1:bf:d9:41:
         32:4b:ba:0b:64:d3:ec:ca:9b:8b:0f:98:73:c5:86:5e:81:1d:
         2d:91:90:be:1a:b0:17:dc:2f:c1:0d:b1:31:04:3f:e4:01:ee:
         77:5e:4b:cd:b4:05:99:e5:c4:0c:3b:e4:99:88:94:20:b3:37:
         3c:bf:d6:fe:11:02:2a:5d:26:af:93:6f:85:95:80:60:b5:ba:
         ba:19:4d:9a:09:77:4e:a8:59:b5:3e:22:57:b3:27:50:31:80:
         49:a1:90:50:c8:7c:a6:fd:8d:f9:08:d8:59:5a:bb:f3:43:a5:
         6a:60:7a:6b:45:ba:ab:f3:26:3b:4e:b5:57:7d:19:05:1e:9c:
         01:a8:b0:b8:00:ba:a2:68:eb:2b:cf:35:de:6c:6c:75:a5:6a:
         fb:21:38:d0:91:1a:fe:d9:9e:93:b9:98:60:47:e5:51:f3:d2:
         09:33:05:b9:91:56:71:f0:53:eb:19:1e:e8:f4:26:80:e7:bc:
         38:a8:3c:91:7c:90:d5:ec:d6:5e:41:bf:b1:6b:c1:e5:4a:f2:
         19:92:5a:e7:a6:62:c4:33:b3:1e:ae:ba:5e:e8:19:79:5c:e1:
         8b:8a:09:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:42:12 2026 by rpki-client