Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/7c364502-e447-317b-831e-e49c055f4b3d.roa
File:                     7c364502-e447-317b-831e-e49c055f4b3d.roa (raw, json)
Hash identifier:          ALH0rh8uScRsBE20fZQvhmSFTTYO9ZHAB8B2zCJ4VsU=
Subject key identifier:   FC:FD:72:69:CE:A2:00:23:32:9D:1E:4F:B3:21:EA:16:A9:4F:AC:F9
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584E81F1D12CEBCAEDEC3C573400
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/7c364502-e447-317b-831e-e49c055f4b3d.roa
Signing time:             Wed 15 Jul 2026 13:55:01 +0000
ROA not before:           Wed 15 Jul 2026 13:55:01 +0000
ROA not after:            Tue 13 Oct 2026 13:55:01 +0000
asID:                     215607
IP address blocks:        67.220.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:81:f1:d1:2c:eb:ca:ed:ec:3c:57:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Jul 15 13:55:01 2026 GMT
            Not After : Oct 13 13:55:01 2026 GMT
        Subject: CN=6e1c06a1-e5de-4e93-845d-536e894cb288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:67:bf:5f:58:8a:1d:28:f4:66:4c:f8:90:98:
                    5e:80:9d:90:9f:ab:5e:3f:1e:ae:f8:68:f3:44:68:
                    ab:28:eb:cf:23:4b:fc:88:ed:c7:93:36:66:a7:6b:
                    8a:64:b2:33:57:7a:7f:f5:fa:b0:f2:c0:cb:1b:6e:
                    25:44:32:a9:30:eb:5d:ce:9f:81:52:4c:a1:e6:43:
                    ac:86:fe:b0:90:cd:c1:45:5a:3f:4d:93:90:09:ac:
                    a6:c0:0d:02:54:48:66:f4:5e:5d:35:df:b0:d9:28:
                    3c:fb:0c:2e:c3:9f:6d:a3:cc:78:41:18:c7:3c:d0:
                    9a:d2:84:98:e3:65:66:bf:3f:34:23:c5:51:2c:2a:
                    af:2e:d1:0a:19:3c:3c:c6:e6:4d:20:aa:13:ba:bf:
                    45:d8:f5:fa:15:65:7a:e4:ab:6d:97:b4:cb:83:bc:
                    05:b0:44:c2:01:da:bf:d0:99:9e:00:10:ec:77:35:
                    b4:37:da:ae:5f:43:9e:ed:03:c0:8c:2e:3f:fb:5d:
                    bd:a6:10:d9:52:c3:13:0a:13:6d:7a:e0:92:43:69:
                    1f:87:99:ac:3d:a5:56:2c:3e:91:57:5c:01:19:e4:
                    66:9a:99:b4:c5:f1:94:3b:c0:6e:aa:88:d0:2e:33:
                    f2:92:e8:8b:89:e6:d6:b4:a1:e7:79:a6:3a:98:a1:
                    ae:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:FD:72:69:CE:A2:00:23:32:9D:1E:4F:B3:21:EA:16:A9:4F:AC:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/7c364502-e447-317b-831e-e49c055f4b3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:8c:39:02:37:93:18:32:9e:ae:d7:7c:98:f4:c6:1c:56:67:
         0c:82:14:b6:9c:b8:ee:a1:49:49:7c:6c:4b:a8:c7:34:0f:69:
         2c:c6:70:01:44:df:1c:7b:57:fc:5d:24:69:e0:69:f5:f9:6b:
         4c:b5:67:d6:38:23:f8:e8:eb:af:1d:e8:9a:70:24:8b:69:82:
         28:19:37:f1:83:4d:3f:df:8a:35:d2:47:9b:22:f0:4a:b9:f1:
         9b:7b:0b:49:e4:df:34:6e:26:10:67:28:7f:9c:fa:96:29:b5:
         3f:fc:43:54:fb:8b:0a:99:97:f4:0c:ae:69:29:38:6b:c1:f8:
         f8:1b:80:fc:be:fb:e9:19:84:b9:0e:20:3c:18:da:97:8a:60:
         99:1e:1f:25:16:b4:a0:17:f0:9d:3d:ea:e1:97:40:eb:39:31:
         12:af:a6:44:8f:a7:6e:3e:21:a1:f7:39:94:ca:da:ff:15:08:
         e8:39:b7:26:e8:21:65:62:43:cf:11:f5:44:15:1c:a4:20:6e:
         18:cb:97:12:33:98:ab:d8:d4:10:ec:fc:24:29:ff:5a:f1:ec:
         b4:3d:c2:a8:49:04:10:09:19:38:eb:0b:ca:f5:af:3e:cc:bb:
         45:be:26:4e:4f:77:1a:a7:44:0b:d4:b2:c3:97:9f:75:fc:4c:
         1e:ff:f2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:06 2026 by rpki-client