Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/f14a4a41-a566-35dd-8a9e-a82124746a3b.roa
File:                     f14a4a41-a566-35dd-8a9e-a82124746a3b.roa (raw, json)
Hash identifier:          k47GQjTTbGO9kM9GNw0zqVAbmK0yDJDnzLW3m8YuW8U=
Subject key identifier:   41:85:03:E3:F4:B5:48:83:02:E4:62:45:D9:FE:B9:F8:65:17:FC:84
Certificate issuer:       /CN=beb73535-d0fb-4340-8d5e-4c26d6a59dc7
Certificate serial:       010D0C9F4328584F0D6CEDA19995F1ECE6758040
Authority key identifier: CC:F8:F7:81:D8:59:90:59:3F:D4:20:4D:A0:61:ED:65:26:1E:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/f14a4a41-a566-35dd-8a9e-a82124746a3b.roa
Signing time:             Thu 03 Sep 2026 13:00:12 +0000
ROA not before:           Thu 03 Sep 2026 13:00:12 +0000
ROA not after:            Wed 02 Dec 2026 14:00:12 +0000
asID:                     395511
IP address blocks:        67.22.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:0d:6c:ed:a1:99:95:f1:ec:e6:75:80:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb73535-d0fb-4340-8d5e-4c26d6a59dc7
        Validity
            Not Before: Sep  3 13:00:12 2026 GMT
            Not After : Dec  2 14:00:12 2026 GMT
        Subject: CN=c4447c30-7784-4508-8a03-2ecb0200ffea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2e:e8:e0:b1:a4:d3:de:1a:2d:a2:08:92:7f:
                    69:45:a5:48:35:28:13:1b:51:64:bf:ab:44:0b:66:
                    87:9e:59:1b:e7:b1:90:c9:12:44:60:ec:b3:7f:2d:
                    24:ba:ff:d0:67:6c:d7:9d:19:00:95:e0:1b:3a:97:
                    4e:32:1e:61:e4:e6:9b:00:6b:ef:c1:eb:6f:f6:5d:
                    8b:9a:2b:03:39:58:77:49:0c:86:2a:3b:ef:1b:cc:
                    50:8e:4e:e8:79:65:bb:d1:6d:06:bc:f7:52:22:1c:
                    ce:81:45:d4:6f:18:ea:6e:ba:bf:f8:62:c5:ab:92:
                    38:d6:64:b3:52:ff:e8:ff:77:43:d2:27:98:db:7a:
                    fa:87:38:67:a7:e2:e3:bb:07:7a:5f:93:d9:8d:04:
                    34:fb:10:48:b5:68:00:fd:43:7b:ed:51:0c:f8:ca:
                    37:6f:1c:99:09:98:92:2c:dd:a5:21:09:fe:7c:bd:
                    f6:f6:39:28:86:8d:af:bb:43:58:28:60:0f:8b:3d:
                    50:c5:78:74:62:f8:f4:83:12:74:ef:7e:1a:c2:a2:
                    ab:6b:b7:77:58:c1:ea:d9:b9:26:91:51:d4:05:38:
                    3d:70:4f:47:a9:31:34:91:21:8e:65:8e:7e:f0:90:
                    f5:c2:91:70:d8:7c:f7:19:f2:8b:64:99:8b:ea:28:
                    c9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:85:03:E3:F4:B5:48:83:02:E4:62:45:D9:FE:B9:F8:65:17:FC:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/f14a4a41-a566-35dd-8a9e-a82124746a3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.crl

            X509v3 Authority Key Identifier:
                keyid:CC:F8:F7:81:D8:59:90:59:3F:D4:20:4D:A0:61:ED:65:26:1E:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/beb73535-d0fb-4340-8d5e-4c26d6a59dc7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.22.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a5:a9:df:aa:93:47:ae:d3:4a:5c:49:37:d7:d5:cf:f7:76:
         a3:6a:84:95:22:b0:93:cb:81:c0:aa:64:ff:c5:ee:53:7d:7f:
         d5:3d:84:a0:24:2f:e2:c0:fd:9f:88:9d:ef:02:42:35:c2:54:
         a1:c0:ba:3a:65:48:b4:7c:3c:f8:87:7c:7f:43:79:77:94:f2:
         8e:0c:b6:3c:22:19:e3:7a:77:d3:12:13:82:01:09:26:63:2e:
         40:e6:18:c1:97:55:d9:09:44:de:87:b3:86:92:62:aa:41:1c:
         82:49:94:ff:e3:49:d4:71:dc:4b:d7:df:f1:50:c9:b0:ee:e1:
         af:d9:49:41:2e:44:e4:5d:98:76:b7:eb:bd:cf:77:81:25:30:
         ef:ec:b5:99:6d:b7:95:c6:e4:8b:39:bf:a9:36:0d:00:3d:f8:
         cc:a7:4b:e1:12:33:bf:b0:36:47:d1:45:9d:e8:bd:e4:12:10:
         d4:fa:48:15:35:88:e0:53:47:d8:3c:96:4e:72:d8:8a:2f:fc:
         a7:57:f1:83:af:da:86:c7:1d:96:61:b6:3b:9e:9a:e4:eb:8a:
         43:82:ed:38:1d:43:71:48:3e:bf:60:63:03:ec:ec:7c:a8:c3:
         0a:74:b9:ba:6a:49:8e:07:a4:80:59:5b:20:df:f2:3a:8b:13:
         89:75:33:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:23:05 2026 by rpki-client