Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/a20c63b2-85c8-3149-b71f-5a57dcb9c030.roa
File:                     a20c63b2-85c8-3149-b71f-5a57dcb9c030.roa (raw, json)
Hash identifier:          aFBVkgrS4ro7tBAsAS0qrDdKzBvSklK3uB8y3ORUWgI=
Subject key identifier:   E1:AA:8A:2A:9E:37:A1:CD:A3:0E:D6:75:DF:69:F9:D0:7F:24:9A:0D
Certificate issuer:       /CN=03e58790-8887-4eae-9965-80e3a70bdf97
Certificate serial:       010D0C9F4328584F5C22F91FDCA6A6739B78D280
Authority key identifier: 53:2A:11:46:00:F2:3F:42:AA:EB:3E:C3:B2:29:F5:02:F1:97:F5:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/a20c63b2-85c8-3149-b71f-5a57dcb9c030.roa
Signing time:             Thu 01 Oct 2026 17:40:17 +0000
ROA not before:           Thu 01 Oct 2026 17:40:17 +0000
ROA not after:            Mon 28 Dec 2026 20:32:00 +0000
asID:                     46293
IP address blocks:        67.199.208.0/20 maxlen: 20
                          67.199.208.0/22 maxlen: 22
                          67.199.212.0/22 maxlen: 22
                          67.199.216.0/22 maxlen: 22
                          67.199.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5c:22:f9:1f:dc:a6:a6:73:9b:78:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03e58790-8887-4eae-9965-80e3a70bdf97
        Validity
            Not Before: Oct  1 17:40:17 2026 GMT
            Not After : Dec 28 20:32:00 2026 GMT
        Subject: CN=efa67b9f-3a69-46ec-b4e3-972f3f7dc487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d8:3f:ec:f0:cd:9f:73:b7:69:81:de:4c:22:
                    6a:e4:c0:5c:fb:64:f9:bb:0e:f9:b9:ae:7d:80:c9:
                    64:16:38:a7:d6:a1:f2:bd:91:14:1f:e5:5d:4b:df:
                    e7:74:fa:2a:5b:43:bf:db:31:33:d1:47:59:83:39:
                    f9:d0:97:94:c5:40:70:14:c2:81:d0:4e:71:21:e1:
                    51:2a:c2:50:3f:1c:55:c5:d6:9e:6c:0a:c5:80:10:
                    8d:62:5a:eb:f5:a1:bb:4e:13:ec:5f:2e:80:4c:d0:
                    66:e3:e3:e2:09:20:51:31:ca:40:ad:1e:f4:34:79:
                    a7:54:9d:fe:2a:d9:f7:fd:e9:52:eb:41:af:20:1e:
                    ad:a6:25:74:f0:35:04:e9:f8:19:27:f8:ea:b6:6f:
                    0e:db:0a:d9:5f:62:c6:23:dd:e7:d7:0e:f9:c9:ef:
                    b0:9d:6b:5c:73:e3:58:5e:92:61:6d:15:38:4d:17:
                    c4:06:ea:af:5d:af:39:75:d5:26:5e:ba:92:16:61:
                    60:53:c7:bc:c9:42:bf:24:a4:7a:23:c5:6f:42:98:
                    4c:24:2e:ff:6d:5c:95:4c:6e:68:5d:bb:1e:36:35:
                    a4:7e:11:da:65:2d:8b:b9:b5:01:5f:51:70:64:f9:
                    dd:32:18:75:49:44:49:8e:af:03:cb:82:ec:4c:fc:
                    48:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AA:8A:2A:9E:37:A1:CD:A3:0E:D6:75:DF:69:F9:D0:7F:24:9A:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/a20c63b2-85c8-3149-b71f-5a57dcb9c030.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97/03e58790-8887-4eae-9965-80e3a70bdf97.crl

            X509v3 Authority Key Identifier:
                keyid:53:2A:11:46:00:F2:3F:42:AA:EB:3E:C3:B2:29:F5:02:F1:97:F5:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/03e58790-8887-4eae-9965-80e3a70bdf97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.199.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:17:08:3a:71:c4:7b:82:e6:8e:90:b8:7c:7e:9f:98:e8:9e:
         b4:39:5c:5f:de:ca:b3:78:e0:36:2a:80:b9:0d:2b:bc:59:ae:
         bf:40:9d:75:82:d5:0c:68:1f:c5:84:7a:e3:ca:7e:f6:bc:97:
         0a:14:bb:67:0d:68:80:7d:09:65:f1:e1:7a:6e:17:a0:4c:ee:
         0c:fe:94:b3:3c:6f:39:03:41:71:7e:4c:a5:5c:22:9a:34:92:
         5f:74:6a:08:cc:37:91:e1:68:be:fa:08:ad:31:9e:15:32:60:
         39:78:77:a5:97:98:99:26:49:09:e5:9d:0b:b5:85:eb:66:44:
         a3:01:c5:e3:8b:97:91:67:38:49:c2:93:5f:ef:04:a9:a0:f0:
         0e:b2:12:c2:e0:c9:d4:57:c2:b9:1e:11:d3:3f:ad:2d:d2:22:
         56:a9:3d:47:b7:90:e7:58:b3:7f:e7:96:4f:ea:70:54:b1:93:
         8a:5d:07:4d:ad:19:bd:5b:f5:a3:99:36:03:47:c1:1d:50:40:
         58:57:47:ff:f5:44:e1:80:09:e5:6a:ad:17:48:a3:d6:37:f8:
         50:4b:c6:3b:64:aa:43:0e:5c:8b:d9:de:6b:b3:06:5f:b7:11:
         8e:5b:c9:25:2d:51:55:66:55:5b:18:3b:f8:8b:e0:e2:2d:34:
         f6:d0:b1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 19:02:31 2026 by rpki-client