Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/4a108f35-82bb-39d1-b596-07e09b3af80f.roa
File:                     4a108f35-82bb-39d1-b596-07e09b3af80f.roa (raw, json)
Hash identifier:          ET/ntXGUDO7/U3Bk59iuLqD4Jejyl40Yi7jpvNiNCn4=
Subject key identifier:   4D:53:B2:84:D0:04:B0:9B:CB:85:C8:7D:63:45:45:0D:C0:0D:6F:DA
Certificate issuer:       /CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
Certificate serial:       010D0C9F4328584F9E98822ED9D03CBE9B5AB1C0
Authority key identifier: 34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/4a108f35-82bb-39d1-b596-07e09b3af80f.roa
Signing time:             Sun 25 Oct 2026 13:00:13 +0000
ROA not before:           Sun 25 Oct 2026 13:00:13 +0000
ROA not after:            Sat 23 Jan 2027 14:00:13 +0000
asID:                     36666
IP address blocks:        67.43.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Nov 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:9e:98:82:2e:d9:d0:3c:be:9b:5a:b1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0e338b9-2a63-4dff-9371-c8a8e9350eeb
        Validity
            Not Before: Oct 25 13:00:13 2026 GMT
            Not After : Jan 23 14:00:13 2027 GMT
        Subject: CN=74c651cf-8318-40a9-ad48-534b0065e15f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e9:b0:99:4a:61:a8:6e:c8:f0:80:53:eb:14:
                    51:cf:d9:82:3b:4d:95:7e:8a:73:e2:6c:83:e9:78:
                    e7:a2:eb:a7:a7:63:7b:a4:84:93:fb:5a:21:26:52:
                    33:a3:1c:b3:49:34:05:0f:88:f5:27:9d:40:12:4f:
                    53:54:74:e0:e0:a5:81:d5:fa:bb:28:f8:33:ca:8a:
                    c1:0c:aa:d3:06:cf:0e:8a:c5:95:78:85:5a:fe:a4:
                    47:60:c0:e3:6f:74:1f:8d:3e:8e:48:33:7c:37:e6:
                    81:b5:ea:c7:be:4c:5e:f0:20:0d:40:d4:f2:63:7b:
                    95:48:44:1a:68:c0:b9:60:78:b3:ba:d1:57:e4:54:
                    40:93:f7:2a:a1:6a:0b:25:c5:f6:b5:d8:1d:99:27:
                    a5:8f:01:21:3f:b0:93:01:7c:4d:8d:3d:28:b6:72:
                    fd:4c:d8:15:c3:01:62:33:69:5d:67:60:24:06:5e:
                    f4:f9:78:c8:87:97:8a:d8:75:1b:6d:70:55:9b:99:
                    af:76:25:5b:be:5b:b9:a1:8a:1e:7f:28:14:3f:b9:
                    f1:50:cc:f7:13:a8:99:56:83:c2:c7:ab:28:2e:ae:
                    7f:86:09:2c:54:ce:5d:28:fa:c1:c4:a4:1e:45:31:
                    f2:fa:c3:8a:4e:b0:6a:2a:7e:17:58:38:cd:a9:88:
                    19:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:53:B2:84:D0:04:B0:9B:CB:85:C8:7D:63:45:45:0D:C0:0D:6F:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/4a108f35-82bb-39d1-b596-07e09b3af80f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.crl

            X509v3 Authority Key Identifier:
                keyid:34:35:16:E9:FA:5C:21:AB:CF:F0:1F:65:B0:31:67:71:91:11:3F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e0e338b9-2a63-4dff-9371-c8a8e9350eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:90:fa:81:39:d6:dd:07:a0:a8:9d:f3:c3:be:47:33:09:ae:
         09:b1:f2:90:84:4b:95:1e:d2:08:23:af:bd:36:36:68:68:82:
         d1:99:08:9f:32:dd:5c:8d:9c:89:17:2e:1d:e9:c6:87:2b:58:
         94:1f:d5:96:e2:fb:e6:89:b5:34:26:67:bf:32:4e:69:6c:13:
         90:27:d3:89:c3:6c:ce:f8:2f:86:ad:e5:b0:a2:a4:e2:ed:3f:
         fa:71:3e:1b:57:7c:04:31:a4:24:cf:7e:a0:8d:23:93:31:82:
         6d:4a:1d:c9:1f:59:76:80:27:12:eb:6f:c4:09:d6:43:22:4c:
         f9:75:2e:dc:00:84:c3:c0:fc:ea:6f:af:d3:31:a6:20:f6:cf:
         85:0b:35:9d:7d:c9:92:7d:04:0d:2b:e5:4d:5f:68:9a:95:3c:
         2f:43:64:fe:01:ad:74:b5:41:fd:21:92:29:7d:f2:11:54:10:
         05:d7:8f:0e:b9:3f:10:41:7e:29:97:50:96:e2:f1:6a:79:23:
         f7:c8:a0:cf:45:59:99:0c:d2:c4:10:4b:6d:db:64:d0:ee:95:
         8e:5d:68:bc:d3:2d:78:ac:58:51:30:ed:db:d2:be:62:f1:dd:
         73:e1:dc:12:5c:a4:0e:33:22:2d:d4:03:c7:89:b6:f1:86:70:
         37:0b:a4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:38:27 2026 by rpki-client