Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa
File:                     7957af23-cbb4-36ed-805f-7806f26e4b02.roa (raw, json)
Hash identifier:          AKQQde/v/mfPSzOs7jw2kZbmrPoXrUgs6CTGke8UUjU=
Subject key identifier:   C6:D0:66:8A:40:50:A0:7E:64:BC:A7:8C:85:D1:AD:E3:1E:0E:B1:13
Certificate issuer:       /CN=65a28276-f493-4a9f-9824-c9717c1cf6fd
Certificate serial:       010D0C9F4328584B821CBA038C22DD89442B6940
Authority key identifier: 0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     16385
IP address blocks:        67.43.86.0/24 maxlen: 24
                          67.43.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1c:ba:03:8c:22:dd:89:44:2b:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65a28276-f493-4a9f-9824-c9717c1cf6fd
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=8600382a-92b9-4167-93a3-18edd121d8d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:56:c7:de:2d:68:63:57:90:b5:4a:21:de:7f:
                    e5:23:47:19:28:1e:e5:ec:48:5c:71:50:84:5c:fa:
                    7b:26:15:de:a1:6b:75:ee:54:15:f7:54:ed:81:28:
                    ba:f0:fa:3d:db:0e:09:b5:92:93:02:5c:87:81:70:
                    8f:ce:ff:95:9c:d7:e4:0e:30:72:ca:a8:97:88:a5:
                    96:64:e8:94:a9:1a:d4:5f:99:ab:49:ee:5d:03:42:
                    cd:59:04:53:15:05:34:42:26:e9:11:05:5e:ff:84:
                    8e:cd:79:49:7f:36:54:83:94:69:c1:39:b5:05:a4:
                    92:9f:f3:a8:36:8a:40:98:fa:c2:f4:ff:c1:ab:d0:
                    2d:7a:4d:fd:ec:c6:1b:44:96:65:7e:df:f6:8f:73:
                    90:b3:69:f3:05:59:78:a1:5b:72:28:d7:12:9b:17:
                    e6:d8:ce:4d:2e:56:79:42:9e:24:d4:d1:3a:82:fc:
                    9f:1e:30:87:bc:be:86:28:e9:03:9c:6d:62:ce:fa:
                    a8:5a:0b:4a:78:72:b3:76:5c:f4:4d:08:ca:cd:3f:
                    9d:e2:b0:9f:a9:8e:49:5b:3e:d1:4f:fe:63:dd:49:
                    2a:da:ca:1e:d1:3d:23:29:e5:4c:09:bf:86:ec:75:
                    ee:bb:3e:85:ab:3b:7b:7f:4f:31:aa:60:e0:06:96:
                    d9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D0:66:8A:40:50:A0:7E:64:BC:A7:8C:85:D1:AD:E3:1E:0E:B1:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/7957af23-cbb4-36ed-805f-7806f26e4b02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd/65a28276-f493-4a9f-9824-c9717c1cf6fd.crl

            X509v3 Authority Key Identifier:
                keyid:0F:67:D8:D8:7F:C2:74:27:1F:92:6D:B5:2E:78:A1:DA:97:03:35:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/65a28276-f493-4a9f-9824-c9717c1cf6fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:81:6f:8e:08:57:7e:51:30:fd:af:8d:58:c4:9c:93:43:9e:
         6c:79:f2:18:32:48:5c:21:2b:da:9f:72:07:b2:c0:4f:0c:bf:
         eb:4d:11:69:1a:10:2d:1e:41:f4:06:28:ee:50:db:9c:df:94:
         6a:c7:19:19:38:9e:a3:c0:72:4a:a7:c7:0b:2b:5b:3f:b0:3b:
         7a:09:88:c1:ed:3f:ae:cc:f3:f0:c6:92:b5:07:9a:ad:d6:c4:
         19:a7:ed:5c:f5:f7:0c:01:9e:be:2c:c6:f7:57:22:fc:5e:d6:
         07:d9:e8:32:8d:03:4a:14:b0:85:67:9a:82:42:2c:f2:4e:9e:
         8a:92:b0:32:5a:42:1e:bf:d4:9a:6c:f9:75:31:74:55:7d:df:
         13:99:5f:c8:c3:08:ad:50:06:82:9b:92:da:69:15:2e:a7:31:
         23:2a:0b:52:c6:89:d6:d7:7a:5c:82:0f:77:b0:ff:e2:fc:b5:
         b1:4c:b5:6e:9a:f8:38:16:67:54:12:b6:91:78:41:56:a0:d0:
         29:bb:6f:7a:ec:08:6f:5b:bf:dd:45:e8:e3:f6:6f:17:16:46:
         3b:af:0f:53:b6:63:bc:0c:08:6a:ed:7d:75:b4:b4:d8:3a:53:
         c2:52:c5:c0:1a:71:48:d8:f1:a8:34:21:a4:7d:0d:67:e6:e1:
         f4:07:67:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:14 2025 by rpki-client