Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/de70ee01-1021-3517-96d6-be049283cbae.roa
File:                     de70ee01-1021-3517-96d6-be049283cbae.roa (raw, json)
Hash identifier:          1xXf++XjYgl4J9kY6hWGeocHjOdvYtsKX5vXMKh1s/c=
Subject key identifier:   3E:D2:FA:2E:CE:9D:A2:23:D8:35:FB:5B:8D:17:89:17:AA:9F:13:89
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584E9A7FDDD2C30DB944CBFEAA00
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/de70ee01-1021-3517-96d6-be049283cbae.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22516
IP address blocks:        67.216.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:dd:d2:c3:0d:b9:44:cb:fe:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=55ee5403-b91c-4c3e-8e1a-1bd408d20c50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:12:92:7a:57:09:a0:98:ad:47:d4:09:fb:
                    4b:45:87:7a:ae:a2:bc:d6:78:ed:d1:1b:08:34:af:
                    69:e5:70:cc:c1:3a:5a:93:c2:4d:cc:5e:c6:38:1c:
                    3e:d2:b7:19:9e:d3:4b:e9:ca:ce:64:57:2c:c7:c2:
                    13:2f:0f:07:ad:73:2c:d1:55:5e:74:6c:9b:a5:13:
                    f0:9b:3b:e5:ad:81:6f:5a:be:88:06:9e:71:77:65:
                    5d:27:cd:c8:4a:b6:84:14:08:16:86:30:54:ff:3b:
                    28:fd:aa:5a:50:71:a9:a4:38:f3:d4:11:45:d1:60:
                    98:96:73:c4:1e:1e:ff:20:b0:29:b6:53:5b:30:48:
                    03:a6:79:65:86:b2:8f:28:1d:d0:0b:00:9e:78:3d:
                    70:0c:01:b0:a1:ec:1c:ad:ca:6e:9e:98:06:60:f6:
                    dd:09:50:c3:55:b1:76:89:4f:3f:09:17:e7:9b:1f:
                    fe:48:00:1b:03:8a:f9:29:dd:e6:66:98:5a:5c:a3:
                    2b:f3:cb:2b:35:53:d2:cb:50:8c:67:53:a5:4a:bd:
                    41:6a:52:8e:8c:c9:de:ed:6f:ea:32:f1:c7:3d:22:
                    19:54:89:02:c2:23:25:1c:32:ef:98:80:e8:c0:c2:
                    89:e5:e3:c4:58:7c:f5:89:6f:ae:64:94:20:c4:df:
                    db:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D2:FA:2E:CE:9D:A2:23:D8:35:FB:5B:8D:17:89:17:AA:9F:13:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/de70ee01-1021-3517-96d6-be049283cbae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.216.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:33:7a:07:26:3d:e3:c8:ab:b9:10:29:f1:0b:88:45:ba:64:
         a7:54:f8:7f:5e:0c:7b:c1:2e:3e:e4:8d:24:1e:66:da:45:fd:
         75:3a:f1:9a:45:90:6d:7b:00:88:40:7f:75:b1:88:16:b2:9f:
         8f:87:aa:5b:88:4d:67:eb:d2:3c:e1:b2:db:be:64:a0:66:c2:
         5d:b5:14:24:4d:54:67:af:0e:f5:58:36:ad:61:d5:90:8d:1c:
         9b:ac:a6:8f:cc:11:3e:55:8d:f6:e9:21:79:4b:5c:eb:0c:d3:
         b1:0f:f3:01:b2:c4:19:4a:a7:bd:3d:ca:9b:ef:b0:f2:04:d3:
         66:87:5c:b3:ad:5c:dd:cd:04:00:17:96:77:09:ef:fa:2e:f2:
         b7:bd:15:32:1c:c0:c3:6a:27:22:49:67:cf:5a:f6:1c:97:3e:
         1c:0d:c2:67:c1:56:fa:f6:9f:f3:f8:04:8a:ca:94:86:54:ed:
         30:af:b0:61:9e:94:2b:69:12:18:77:20:9e:08:29:a5:31:cf:
         83:48:2a:7b:2f:9d:4b:48:a6:70:4e:a3:e3:d2:58:cc:44:0c:
         e0:cd:5c:e5:57:35:e8:d9:dd:f3:d3:7e:74:d8:9a:8d:db:34:
         36:71:77:c8:2a:c6:07:13:25:bb:2e:f0:a1:0d:9e:a5:43:98:
         8a:4f:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:30:36 2026 by rpki-client