Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dd732f92-179e-33d5-9832-59f3b948cc7c.roa
File:                     dd732f92-179e-33d5-9832-59f3b948cc7c.roa (raw, json)
Hash identifier:          JmuOgeMaVMh+g80wAOUHi0PeeggOsANwhpfDSrr95Bs=
Subject key identifier:   FE:DC:0B:25:0A:6B:C0:B2:B0:26:2B:AC:8F:27:22:A7:0E:E6:D0:16
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584DC135BCA878FB5762FD427C40
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dd732f92-179e-33d5-9832-59f3b948cc7c.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     31898
IP address blocks:        67.20.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:bc:a8:78:fb:57:62:fd:42:7c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=ebe59acb-3bce-450b-a3c5-d75cf01e4684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c7:3e:dc:0e:f7:c5:d7:6a:85:bb:37:70:23:
                    9b:ef:de:6f:86:3f:10:1d:7c:0e:4c:14:cb:93:93:
                    a6:ab:a5:99:5e:90:60:d5:23:a2:d3:19:12:7e:1e:
                    8a:0c:f1:40:46:67:49:f7:2b:fb:b4:51:ea:2f:c8:
                    8e:9b:0b:18:43:45:00:fe:1d:08:ea:e5:ee:26:f2:
                    3a:48:14:81:5e:2e:c5:16:3b:a1:e6:dd:18:0c:3a:
                    bc:05:6a:45:4b:45:56:29:75:54:30:52:13:4b:87:
                    35:6b:ec:1e:67:4a:a4:db:c6:3e:74:dc:ee:41:96:
                    f3:a1:33:3b:c1:9e:28:64:db:75:92:1a:b1:f5:33:
                    75:04:03:6d:a1:d3:92:25:38:a1:16:23:ab:03:23:
                    3b:78:bd:43:aa:66:e8:f2:64:9a:02:da:30:44:dd:
                    41:77:14:6e:25:0c:e4:2c:c4:f1:ab:9e:3d:e4:c5:
                    d6:9b:1d:13:1e:76:77:31:b2:d3:f2:89:e3:a3:a9:
                    aa:69:f5:df:9d:4e:ee:93:e3:df:5e:d5:52:2a:a7:
                    27:10:e8:c3:4f:fa:a3:b6:43:c7:4f:92:f2:8b:be:
                    a3:bf:fd:63:fe:24:c2:2d:05:88:ba:5f:e7:97:4e:
                    8e:9b:00:54:58:6b:01:dc:15:f9:f5:97:37:87:e6:
                    07:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DC:0B:25:0A:6B:C0:B2:B0:26:2B:AC:8F:27:22:A7:0E:E6:D0:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/dd732f92-179e-33d5-9832-59f3b948cc7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.20.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:46:46:e5:dd:80:18:28:ef:18:56:d8:4b:85:92:b2:c4:b1:
         0b:19:ac:63:8b:d8:f7:82:a7:12:de:5b:52:24:0b:29:32:65:
         a2:cf:d7:df:40:ee:a8:b1:6f:cd:ee:f8:78:2d:91:f5:fb:9a:
         55:c9:03:b8:51:ce:59:8b:ce:70:f4:c9:84:aa:2b:07:b3:19:
         f7:de:bf:ec:d4:23:94:9f:8e:40:42:08:2e:f1:d4:ce:d2:44:
         76:83:cf:5f:a1:ad:fc:bc:10:0e:03:8c:1a:1a:6d:a4:c3:45:
         7f:c9:6d:b8:9c:57:ac:48:b7:9d:31:d4:0d:b8:b3:77:96:e0:
         55:b5:c4:bc:6e:de:ee:a5:ca:80:e3:ca:28:5a:97:07:79:e7:
         17:64:22:ee:fe:fd:bb:43:4b:5d:0e:16:83:11:52:59:87:b7:
         24:f6:72:e1:f7:20:a0:2e:3a:d8:16:f4:05:fc:d1:e6:3c:f2:
         38:d0:0c:35:23:09:27:53:bc:7a:b9:36:b9:d7:69:6d:b2:71:
         d0:9c:60:77:8c:0a:a7:e7:26:25:ad:6e:12:d2:01:4c:13:4a:
         b2:71:f4:96:25:b7:6f:34:53:3e:c1:8b:ff:cb:a8:c1:32:33:
         f8:47:56:d9:44:e3:f1:47:4e:21:1f:a6:37:e8:7a:04:fd:25:
         f6:84:bd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:28:19 2026 by rpki-client