Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa
File:                     f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa (raw, json)
Hash identifier:          RQwo+nbg3OWo3Z8KoQKz7lqpx8ENIyRjzBdP2eS7omo=
Subject key identifier:   23:66:9E:EC:D8:37:92:15:32:61:D5:3E:D8:96:10:C1:F0:AF:A3:50
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584E86F4FDED4E5506790E5E0700
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa
Signing time:             Fri 17 Jul 2026 09:00:14 +0000
ROA not before:           Fri 17 Jul 2026 09:00:14 +0000
ROA not after:            Thu 15 Oct 2026 09:00:14 +0000
asID:                     62563
IP address blocks:        67.220.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:86:f4:fd:ed:4e:55:06:79:0e:5e:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Jul 17 09:00:14 2026 GMT
            Not After : Oct 15 09:00:14 2026 GMT
        Subject: CN=6c79a608-7183-4aa2-8983-d2ecf5ed3ea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:81:4e:92:99:15:1b:df:f5:e4:ab:ef:5f:9e:
                    72:ce:95:70:46:92:1b:c4:60:ae:1d:ae:48:68:dc:
                    3b:02:5f:4f:b0:73:b2:5b:28:4c:b7:eb:57:33:b2:
                    23:ae:c0:63:54:d1:9a:4d:bc:25:1d:30:7c:29:58:
                    32:d1:08:ed:b6:8f:90:67:a6:e3:fe:d0:96:5e:f1:
                    95:31:ff:d8:3a:38:28:3c:2e:ed:c3:6a:1c:fa:2b:
                    84:b9:49:0a:2c:83:de:3a:cd:fd:aa:8e:c8:0b:85:
                    c4:6b:42:08:5e:ea:b2:a7:6e:97:9b:e7:db:eb:f5:
                    dd:79:cd:31:e9:15:b0:2f:99:12:5b:16:b9:88:d5:
                    f6:e6:c4:58:7d:56:1d:0a:d0:55:8d:b6:7f:9a:d4:
                    02:de:36:6a:79:b5:53:fc:a4:13:48:19:e0:1c:a8:
                    aa:31:e5:99:d5:73:90:f2:a0:eb:86:e9:59:42:be:
                    40:9a:c3:51:a3:9e:ad:92:da:0f:02:bb:b1:e4:45:
                    9d:29:19:88:c2:f0:96:3a:d4:03:5a:61:7d:e3:86:
                    e3:dc:58:29:07:9d:23:28:76:dc:4b:f6:87:66:42:
                    1b:d2:9d:2b:c9:f3:90:e6:c3:5e:64:64:f0:ee:85:
                    73:ce:13:0a:9a:f2:2b:98:5d:3b:09:6c:0c:0c:3f:
                    a3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:66:9E:EC:D8:37:92:15:32:61:D5:3E:D8:96:10:C1:F0:AF:A3:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/f85dcb0a-3f9e-3aaa-9818-ef0cff74b75d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e1:86:3a:2e:8a:db:60:40:f2:47:c9:2b:1e:c5:14:3e:a7:b4:
         39:d0:f8:d7:bc:f5:fa:20:01:27:aa:04:5a:4b:92:d4:d5:a4:
         f6:6e:85:a0:d4:09:1f:45:9d:e2:c7:ca:43:41:7d:bf:a4:94:
         02:79:b8:21:7d:d3:92:43:61:48:91:5f:b4:7c:45:a4:32:69:
         5f:10:51:67:f8:30:cd:2e:5a:09:b6:bd:14:18:ca:59:f8:cd:
         e7:36:c0:e6:07:bf:93:06:af:90:cb:08:5d:14:90:b6:35:1b:
         d9:73:db:72:95:5e:21:2e:0b:9a:9c:96:f1:85:96:62:d1:93:
         7a:d6:2c:c6:47:fc:cb:f6:95:3e:8e:85:3c:be:0d:7a:04:73:
         c3:40:8d:da:5d:2b:f9:7a:e0:12:8b:c4:59:f2:2f:8e:d0:10:
         3f:39:59:4b:b8:46:69:05:e5:58:67:f5:61:ea:21:88:7f:e2:
         63:61:c4:38:a8:86:34:19:d6:54:d7:91:a8:3c:da:ba:21:06:
         59:01:3f:36:b9:73:04:b2:b4:83:7c:e1:af:99:02:9f:fe:69:
         d1:aa:ff:0b:97:20:c5:94:b0:8d:ba:46:8d:e1:6c:b5:17:71:
         7a:37:34:53:33:c1:df:70:7a:6b:a3:44:47:12:cc:81:f6:c9:
         a6:47:53:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:03:02 2026 by rpki-client