Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa
File:                     68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa (raw, json)
Hash identifier:          YvKqPITMQKDWHhqMkrBbXylAEoIVZ9bj1gWByiONnng=
Subject key identifier:   D9:71:B8:D2:51:3A:A0:96:4B:23:9B:9E:CB:12:67:52:70:50:A4:84
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584E3E5F40B47502A341B3069ED0
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa
Signing time:             Sun 21 Jun 2026 09:00:12 +0000
ROA not before:           Sun 21 Jun 2026 09:00:12 +0000
ROA not after:            Sat 19 Sep 2026 09:00:12 +0000
asID:                     16696
IP address blocks:        67.221.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3e:5f:40:b4:75:02:a3:41:b3:06:9e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Jun 21 09:00:12 2026 GMT
            Not After : Sep 19 09:00:12 2026 GMT
        Subject: CN=72683f6a-ac04-4697-8a25-1f8d8c624f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:96:68:b2:48:7a:2f:04:78:3b:85:6d:f7:d3:
                    69:db:0e:ee:df:bd:84:fe:ae:06:3c:5c:02:2a:44:
                    b9:ce:19:5f:ff:b9:8e:5e:5a:ca:46:bc:56:92:dc:
                    5f:e8:30:3e:00:98:db:0c:fe:f7:82:42:15:ed:f7:
                    df:c1:2f:90:d0:75:74:12:ab:6e:a9:82:36:9a:37:
                    4a:f2:0d:c0:44:f6:35:c2:f4:31:57:b7:02:e7:2d:
                    a6:2c:d1:96:df:2e:ac:6a:75:3c:9d:76:56:cb:4e:
                    60:2c:7f:cb:4e:10:87:53:9f:79:5c:f7:d3:28:c2:
                    f9:3e:c7:cf:44:4c:79:aa:04:aa:ea:95:68:95:78:
                    7c:d7:fb:79:1c:48:05:e5:f2:ec:24:7b:7b:b6:fe:
                    4c:a6:6c:36:be:60:e1:f1:55:4c:4f:dc:7b:82:76:
                    7e:91:6f:07:b7:30:03:a8:35:67:58:3c:2f:07:17:
                    e4:3e:7e:f2:7c:4d:14:65:b0:0a:95:1d:1f:45:a8:
                    fe:ba:ef:b4:b4:43:d0:3f:9f:82:2c:0e:ac:6f:4a:
                    58:46:37:13:54:42:d6:ea:24:9f:f1:2e:c5:60:cd:
                    bb:65:c1:83:ae:97:11:52:f3:77:f7:39:58:d0:03:
                    7d:cf:ec:5a:ca:5d:8c:3d:b5:12:f0:f9:16:5a:8e:
                    97:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:71:B8:D2:51:3A:A0:96:4B:23:9B:9E:CB:12:67:52:70:50:A4:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:d5:39:55:44:76:24:16:ca:c2:6d:2a:7a:ef:4e:0f:ed:35:
         47:ac:41:15:6f:88:63:a9:79:66:dd:f7:b2:97:35:54:93:5e:
         78:cd:ee:8e:4b:9b:ca:3e:ee:49:5e:22:ed:c5:28:70:2c:f1:
         2e:a5:18:b7:a3:d2:a2:a1:c4:77:05:cf:96:59:4a:c0:a6:26:
         ac:bb:f3:d4:49:41:a2:6e:78:76:5a:6a:27:ab:f7:b0:78:a5:
         1f:60:4d:61:8d:0c:15:8e:72:ca:78:55:ef:9b:d7:9c:6f:0d:
         89:7a:c7:14:ec:87:20:0e:71:d0:8c:2a:73:f9:c6:6f:2d:0b:
         fd:50:ed:28:32:c8:ea:48:17:09:3d:38:2b:52:dd:5d:91:da:
         76:94:e7:98:6a:22:7f:5b:2a:08:2e:7d:de:ef:32:94:89:5b:
         34:16:08:32:fd:63:59:c4:a7:ba:4d:75:73:60:3d:91:6b:45:
         47:8f:c1:1d:08:3a:e1:9e:d6:aa:4f:52:a3:00:84:be:4d:14:
         a1:cf:98:15:01:c1:3e:a2:35:e8:19:88:94:5a:db:ca:9b:03:
         24:a7:48:b6:67:39:34:a5:54:4e:d1:4b:a1:b2:7d:be:29:32:
         bf:9c:01:a0:d2:5c:8d:32:c4:1f:67:5c:40:48:4e:9b:e5:75:
         57:20:69:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:06:26 2026 by rpki-client