Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/67fc149a-eb9f-318c-ba3b-8790e3682297.roa
File:                     67fc149a-eb9f-318c-ba3b-8790e3682297.roa (raw, json)
Hash identifier:          +earKiGfsMcQRyQTg8mlYMIAH2tCs4Rd6ChA6ouCBwU=
Subject key identifier:   F0:5F:BE:F0:06:8E:E0:9F:63:1A:5B:5A:AE:05:F9:8B:2A:0F:3A:78
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584F2957C3D5FF933D88558BE100
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/67fc149a-eb9f-318c-ba3b-8790e3682297.roa
Signing time:             Sun 13 Sep 2026 13:00:11 +0000
ROA not before:           Sun 13 Sep 2026 13:00:11 +0000
ROA not after:            Sat 12 Dec 2026 14:00:11 +0000
asID:                     64267
IP address blocks:        208.89.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:29:57:c3:d5:ff:93:3d:88:55:8b:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Sep 13 13:00:11 2026 GMT
            Not After : Dec 12 14:00:11 2026 GMT
        Subject: CN=44d65ba1-03ed-4958-9723-12bddeab4d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:c6:48:26:d0:12:75:f1:3b:00:13:2d:53:
                    58:a1:5f:aa:e0:1a:0e:22:56:6f:6c:14:03:c1:c2:
                    8c:ae:4c:a9:e2:02:bb:88:ed:17:1c:96:82:24:4a:
                    b4:fc:71:4a:58:d3:de:6a:50:96:d0:7b:d9:5f:2a:
                    cb:40:04:6d:8d:bc:82:a6:3c:57:f5:ba:39:00:e2:
                    a2:33:53:3b:90:5f:43:77:d8:df:a5:98:52:35:ce:
                    46:75:68:c8:eb:0c:e8:ae:dd:b1:6d:cd:59:47:d3:
                    d7:4b:85:a3:99:b1:34:87:72:52:da:01:07:1e:25:
                    34:f1:8d:74:c4:29:40:19:a3:29:aa:24:2a:bc:92:
                    2f:cf:bf:a4:e1:db:35:f4:8b:1a:a3:3f:ca:88:78:
                    cc:d6:84:ec:c2:0f:cf:90:3f:56:f4:64:89:8d:b8:
                    84:e3:96:20:e4:23:fe:99:e5:22:2f:36:86:75:9d:
                    32:b1:a6:27:f8:66:1b:49:04:06:a6:30:57:5e:ce:
                    c8:ef:95:93:9c:0f:f1:f8:05:d7:f4:90:43:16:7a:
                    32:33:6f:30:78:0e:cc:48:4c:dd:84:34:ad:b3:a0:
                    39:d5:c4:1c:84:4e:57:19:ab:19:55:4d:6c:97:b9:
                    0e:56:cd:79:61:cf:34:57:d9:1c:c2:2e:ca:f7:0c:
                    4c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5F:BE:F0:06:8E:E0:9F:63:1A:5B:5A:AE:05:F9:8B:2A:0F:3A:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/67fc149a-eb9f-318c-ba3b-8790e3682297.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:77:4d:3a:fc:73:0a:ce:9d:5c:bc:1a:3e:b4:98:95:64:d5:
         07:f4:b1:72:45:5e:60:ba:34:86:06:7c:d0:18:05:4d:d5:25:
         64:87:31:71:cb:0a:66:56:d7:63:0d:76:64:39:92:b4:e7:2a:
         07:1b:39:aa:41:43:a7:3d:d8:82:c6:6e:ca:2b:75:af:74:fa:
         e0:d2:72:e3:7d:4c:c0:d7:8f:c4:b9:d7:12:bf:91:a3:4b:79:
         eb:99:71:bd:d3:84:85:46:06:a6:3a:69:db:19:27:bd:7f:e1:
         ef:7b:4a:51:9c:78:6e:b8:6c:75:46:38:ab:9a:bd:3f:35:3a:
         8a:e7:36:d2:31:fb:d5:11:b0:71:ea:06:23:20:d4:9d:8b:cd:
         03:79:a6:e2:45:fc:73:28:80:c0:3d:cd:23:86:ff:aa:d1:e5:
         f6:32:17:a0:ea:31:4d:b2:bc:d2:5b:8d:37:8c:b5:3a:bc:4f:
         60:60:0d:04:19:b8:b3:a5:9d:24:4a:fe:80:ac:1f:b6:7e:5a:
         e8:00:6e:71:87:2a:60:67:e0:dc:23:7f:96:d8:40:5a:74:5b:
         1b:75:13:83:90:ff:6b:ca:3f:67:26:13:3e:21:c7:ed:37:12:
         6c:e2:fa:33:54:fd:19:d8:4d:f6:24:4c:99:26:26:a4:1d:9a:
         37:87:89:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:38:25 2026 by rpki-client