Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/6105942a-8e10-3008-957f-e9a2aedabc91.roa
File:                     6105942a-8e10-3008-957f-e9a2aedabc91.roa (raw, json)
Hash identifier:          xhRMfUm/zHU8TX+M1CiNI+G/9jPqsAtlh8YUHww7eM4=
Subject key identifier:   14:66:2E:A9:71:CF:14:69:3D:F8:B8:81:B6:B4:B9:C4:31:1F:92:12
Certificate issuer:       /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial:       010D0C9F4328584E5619EF9BED0F8198678D0050
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/6105942a-8e10-3008-957f-e9a2aedabc91.roa
Signing time:             Mon 29 Jun 2026 21:00:12 +0000
ROA not before:           Mon 29 Jun 2026 21:00:12 +0000
ROA not after:            Sun 27 Sep 2026 21:00:12 +0000
asID:                     8038
IP address blocks:        67.221.252.0/24 maxlen: 24
                          67.221.253.0/24 maxlen: 24
                          67.221.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:56:19:ef:9b:ed:0f:81:98:67:8d:00:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
        Validity
            Not Before: Jun 29 21:00:12 2026 GMT
            Not After : Sep 27 21:00:12 2026 GMT
        Subject: CN=c4170a3c-32cc-400c-8e59-ecd4939652d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6b:98:f5:50:d0:c7:2c:d4:7d:56:a3:92:13:
                    02:f1:96:4d:5d:b7:73:60:d3:c8:cd:e1:75:25:5d:
                    0c:24:3e:9a:b3:0e:1e:ea:fe:c8:39:0a:13:00:52:
                    d4:4e:20:63:48:ce:09:48:87:35:30:76:41:3f:d4:
                    5e:d7:3a:98:e8:d6:eb:7f:09:f4:72:0f:f1:bd:e0:
                    73:7c:20:19:fd:3c:97:a6:c3:36:46:41:a1:55:da:
                    a5:3a:ba:cf:a5:01:12:30:b7:32:7b:ce:ca:1e:94:
                    86:43:ad:f0:5b:38:3a:90:dc:b2:e0:dd:ca:c0:d1:
                    6b:10:3f:63:cf:71:4b:a7:38:1e:5a:ac:f9:3b:4e:
                    54:36:51:84:fe:e4:69:56:19:ed:cf:9a:ca:8a:50:
                    e2:da:cd:63:6a:de:ae:3d:b8:41:7c:5c:9f:a1:2b:
                    c6:42:93:1a:71:a9:91:20:65:6d:b9:46:d7:dc:d7:
                    59:ab:7f:a4:95:16:bd:08:bd:7f:51:74:a4:09:d2:
                    8e:04:1d:e6:e1:7f:a1:4b:3c:d0:23:13:11:a1:1d:
                    77:f9:00:91:ad:13:ed:a6:33:96:31:b6:90:95:6c:
                    07:33:be:e6:a6:d9:bc:d9:3d:a1:ff:3f:46:88:fc:
                    87:5c:09:4c:5a:62:fe:c1:57:65:b5:a9:07:ef:88:
                    42:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:66:2E:A9:71:CF:14:69:3D:F8:B8:81:B6:B4:B9:C4:31:1F:92:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/6105942a-8e10-3008-957f-e9a2aedabc91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.252.0/23
                  67.221.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:50:a3:22:f1:8c:bd:13:d0:dd:6b:bb:69:83:84:56:37:50:
         a1:f4:e9:92:14:75:bc:fc:91:b8:b6:e5:aa:cb:1d:b0:03:21:
         78:c1:22:eb:2c:96:92:eb:1c:26:e4:5b:0c:2a:e6:6b:e7:37:
         21:56:1b:cf:cf:5d:34:69:0a:30:62:0f:ff:ef:d4:60:66:a1:
         37:c3:fd:6d:97:df:81:ad:07:8d:9e:5b:e4:d0:75:60:43:d5:
         10:66:84:cd:0c:af:97:63:0f:bc:62:4f:40:ce:da:0a:05:ab:
         51:d8:0f:ee:7d:70:84:6b:44:3c:02:72:dd:d9:da:d6:20:99:
         36:ac:bd:a3:a4:29:fa:56:c7:3a:ce:0a:ae:54:27:11:3b:b9:
         05:ae:b0:8a:56:cf:df:c0:ef:4f:de:ce:f6:4b:fe:ce:b7:b8:
         17:22:1d:60:80:c4:90:28:db:fa:c0:51:3e:04:72:22:f9:3c:
         b8:06:34:32:ae:b1:4b:e6:8f:64:1f:b8:5d:76:81:fd:d8:d0:
         14:5e:f7:61:22:a9:81:31:06:40:af:d6:14:60:91:27:29:53:
         88:07:cd:6d:24:01:b8:fd:c7:0c:ce:6a:ae:76:7f:eb:d7:c5:
         47:7d:4b:56:1a:b8:92:ae:4d:3a:5e:8b:2e:1a:e9:e7:89:b1:
         6b:d7:9d:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:49:22 2026 by rpki-client