Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/1e927ac7-4b4c-3692-bca9-0fcde90a5965.roa
File:                     1e927ac7-4b4c-3692-bca9-0fcde90a5965.roa (raw, json)
Hash identifier:          MXidcFqDBNRGZkPsQh1cGFTryF0Pu86bgjX8yNptgbQ=
Subject key identifier:   BE:A9:FF:97:B8:F2:86:D5:A4:8A:CC:2B:41:0F:34:17:67:DC:08:ED
Certificate issuer:       /CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
Certificate serial:       010D0C9F4328584F506D45EDB3B8CB193564BB00
Authority key identifier: BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/1e927ac7-4b4c-3692-bca9-0fcde90a5965.roa
Signing time:             Sun 27 Sep 2026 13:00:12 +0000
ROA not before:           Sun 27 Sep 2026 13:00:12 +0000
ROA not after:            Sat 26 Dec 2026 14:00:12 +0000
asID:                     46208
IP address blocks:        67.214.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:50:6d:45:ed:b3:b8:cb:19:35:64:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7504c4b-7514-464e-a79e-1f4b462c7e7c
        Validity
            Not Before: Sep 27 13:00:12 2026 GMT
            Not After : Dec 26 14:00:12 2026 GMT
        Subject: CN=6fa043b6-a10f-456d-b4f8-d6b35d85e4dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:59:ad:57:54:2c:cb:f4:b1:1b:22:78:5a:39:
                    c1:8d:bd:2f:71:09:e1:2a:06:93:ea:3c:a5:52:ea:
                    f2:f1:2f:60:49:39:6d:92:08:4f:91:c6:89:c2:b5:
                    2c:bf:e7:69:c8:59:e8:7d:3e:28:3f:ab:82:91:0a:
                    69:7e:aa:fc:a7:0c:9d:6a:03:ac:88:08:d7:08:3d:
                    d5:dc:4e:30:22:1d:3c:1b:9e:04:2c:21:11:53:97:
                    66:17:5d:0a:84:e8:9c:63:f5:05:3c:b1:3c:b9:69:
                    b2:f5:75:42:e6:89:7f:5d:45:00:1a:7e:70:e6:8e:
                    49:73:f1:17:95:0d:b0:5e:93:74:1e:4d:fc:9c:0c:
                    1e:68:58:04:de:19:6b:67:d3:a6:e6:a1:ec:9b:ff:
                    c4:87:a4:d0:cf:80:86:fa:c6:1b:1a:bd:95:57:c8:
                    1c:c2:24:38:43:e7:7d:fc:7c:cb:01:3e:6c:41:a8:
                    82:eb:0f:c7:9a:5c:ea:d5:31:29:75:de:41:63:47:
                    3d:5b:b6:ca:2d:39:36:d1:9c:29:1d:f1:d4:56:ed:
                    1d:10:69:5b:0e:2f:3c:0e:de:a5:58:46:35:48:4f:
                    71:81:97:47:5a:c7:55:ec:eb:7c:f6:cf:9b:c3:d8:
                    11:f7:23:de:dd:4f:c0:1e:6e:47:44:e5:a5:a5:78:
                    27:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A9:FF:97:B8:F2:86:D5:A4:8A:CC:2B:41:0F:34:17:67:DC:08:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/1e927ac7-4b4c-3692-bca9-0fcde90a5965.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c/c7504c4b-7514-464e-a79e-1f4b462c7e7c.crl

            X509v3 Authority Key Identifier:
                keyid:BD:B1:CF:BB:D1:DE:D3:95:B4:EF:EB:D8:1F:97:D9:B9:D7:DF:45:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c7504c4b-7514-464e-a79e-1f4b462c7e7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:c1:68:08:57:00:b1:36:2b:90:c2:e6:85:fb:4a:f8:7d:62:
         b7:fd:4d:9e:33:d6:b6:f8:fe:a3:d0:95:96:37:86:b5:ba:5f:
         73:bd:3a:7a:84:93:ae:88:45:1e:6b:49:70:18:3a:f9:ef:a0:
         96:21:b4:ff:a8:63:54:c2:c1:bd:99:56:d6:8c:db:18:ef:9d:
         13:b7:87:ac:a5:9d:a5:c0:9f:4d:03:0e:70:d9:af:02:c0:df:
         88:e2:f5:bd:45:9e:14:c5:66:e4:67:39:eb:65:92:4b:db:70:
         66:2a:65:3e:03:c9:a6:a9:57:b3:62:24:f7:33:27:4b:51:85:
         63:c8:14:24:45:a7:7f:7a:05:bf:86:9f:a3:bb:40:09:10:42:
         54:b6:d3:af:ad:80:df:22:fc:0c:d1:dd:fc:9b:9a:1f:43:69:
         1f:d3:d0:d8:4a:3b:9f:dc:e5:5f:58:dd:40:d9:8e:54:1a:8e:
         1b:7a:a2:4a:7a:c9:5d:b0:f3:01:e8:c4:2d:0a:92:c6:87:fe:
         d4:d7:88:d2:d8:82:70:2d:72:d5:a4:5e:bc:4e:b3:c3:ba:c8:
         70:c5:b1:7f:1f:60:39:ce:13:c8:7b:a9:f3:49:15:7d:8e:52:
         e0:95:47:8b:3e:f4:db:45:2c:da:0d:1a:a6:41:42:c5:dd:3d:
         b5:14:f8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:41:16 2026 by rpki-client