Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/665e3020-d1ef-3c4e-b7db-ec6157dfad80.roa
File:                     665e3020-d1ef-3c4e-b7db-ec6157dfad80.roa (raw, json)
Hash identifier:          x5V5AVkgXnAph8v7hDjAe+m1mk2ZHfp821iq8F5Lk0Y=
Subject key identifier:   18:AE:AF:8F:DB:FD:01:0A:F7:25:ED:83:CC:40:54:AE:2B:94:C5:97
Certificate issuer:       /CN=e7f205fa-32db-476e-9815-f418a58479c3
Certificate serial:       010D0C9F4328584DC995A1214DE74F1BFDFF5940
Authority key identifier: 2A:4D:D2:2E:FE:CD:53:2B:93:98:39:B2:5E:B6:95:5E:1D:23:C0:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/665e3020-d1ef-3c4e-b7db-ec6157dfad80.roa
Signing time:             Sun 10 May 2026 13:00:31 +0000
ROA not before:           Sun 10 May 2026 13:00:31 +0000
ROA not after:            Sat 08 Aug 2026 13:00:31 +0000
asID:                     398041
IP address blocks:        67.226.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c9:95:a1:21:4d:e7:4f:1b:fd:ff:59:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f205fa-32db-476e-9815-f418a58479c3
        Validity
            Not Before: May 10 13:00:31 2026 GMT
            Not After : Aug  8 13:00:31 2026 GMT
        Subject: CN=200b71f0-dfa5-4be1-abe5-b5e0780ee2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b6:83:d3:25:b1:15:64:69:4c:49:70:c8:98:
                    57:90:4b:59:30:f4:9d:3e:d3:e6:88:67:4a:c4:fb:
                    d3:fa:0e:76:dc:2e:2b:d6:e7:ae:27:92:52:bc:ba:
                    1f:04:16:e9:ca:bb:76:7f:83:d9:3e:1a:04:14:d4:
                    79:ee:e7:c1:27:db:8d:c6:b5:72:9a:05:d7:ec:f9:
                    d7:14:7f:ce:2b:41:1d:b7:ad:c8:f8:98:99:c4:de:
                    1a:7c:91:a7:da:a5:d0:65:78:b8:65:04:4e:c4:8d:
                    29:7b:34:44:8e:07:06:cd:5c:c4:db:ad:81:3f:53:
                    34:4b:f3:ac:39:b4:ba:ef:9d:85:99:77:21:40:af:
                    f3:b8:34:bc:38:92:44:a8:70:e3:11:60:ec:30:15:
                    fe:28:bf:6f:2c:0c:fe:7d:9f:7d:a5:2d:6b:5f:bd:
                    e1:dc:7c:ee:ba:6c:21:26:fa:46:31:8e:af:97:70:
                    7b:7f:36:72:c6:fd:c0:52:49:17:54:70:1b:61:7e:
                    6e:09:96:7e:81:30:61:8a:80:71:a9:f5:d5:97:1b:
                    53:c0:f1:0f:76:a7:49:5b:b8:89:cc:b6:76:52:77:
                    f3:cd:5a:0d:cf:77:d0:42:07:63:ff:4e:bd:35:04:
                    6c:eb:90:9f:a2:0c:f4:6c:83:11:cb:15:09:5c:82:
                    87:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:AE:AF:8F:DB:FD:01:0A:F7:25:ED:83:CC:40:54:AE:2B:94:C5:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/665e3020-d1ef-3c4e-b7db-ec6157dfad80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3/e7f205fa-32db-476e-9815-f418a58479c3.crl

            X509v3 Authority Key Identifier:
                keyid:2A:4D:D2:2E:FE:CD:53:2B:93:98:39:B2:5E:B6:95:5E:1D:23:C0:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e7f205fa-32db-476e-9815-f418a58479c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.226.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:3f:b7:ab:07:5c:ee:ed:b7:ee:e5:28:79:23:6f:a0:05:89:
         fb:55:86:39:4e:15:25:b4:c3:e9:25:fe:53:3e:39:99:d1:65:
         72:6a:68:d0:aa:9c:ca:1e:30:79:d4:18:95:f3:31:e9:5d:20:
         f0:17:42:15:be:fe:a5:59:80:ce:52:dc:1c:19:ac:75:52:b5:
         f7:24:7e:48:04:63:90:33:8a:0a:83:fc:d4:7c:26:74:e6:97:
         33:78:6d:60:50:56:3f:1d:02:8f:8f:b0:dc:a7:64:09:06:a5:
         59:3b:2e:ff:80:51:99:be:8f:3d:e8:98:8e:e5:32:fb:6a:af:
         31:58:24:dd:2c:19:a8:10:6f:16:7c:70:b2:90:38:53:7e:77:
         8f:ab:ee:3f:4d:18:5b:15:59:60:62:a0:f3:cb:02:ee:c6:86:
         44:5f:61:04:eb:6f:1b:11:ca:98:07:7e:f5:c4:24:74:1e:81:
         da:58:76:2c:26:36:a0:42:4d:f7:e1:cc:9b:23:41:e3:a9:aa:
         ab:ed:72:bb:84:63:60:53:21:85:70:05:de:c1:85:87:57:c4:
         74:fb:de:ff:0b:1d:85:86:22:28:08:84:c5:57:a5:a6:c9:a8:
         36:10:4c:8d:44:7b:4f:43:bf:a0:90:52:f6:b4:2b:17:7c:e8:
         6c:12:32:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:01:18 2026 by rpki-client