Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1def351d-8deb-31e5-9c7f-3749aa8fc6fe.roa
File:                     1def351d-8deb-31e5-9c7f-3749aa8fc6fe.roa (raw, json)
Hash identifier:          qWWE0YPPdn6IWqRhZsX3+RcU6YR2yDdVCaJKzEdjjD4=
Subject key identifier:   EC:A1:C3:75:CB:88:15:92:0B:75:EB:62:C0:44:27:29:8A:40:21:39
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584E6C6F63400FC20F0DA5BA7780
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1def351d-8deb-31e5-9c7f-3749aa8fc6fe.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     7843
IP address blocks:        67.103.32.0/19 maxlen: 24
                          67.103.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:63:40:0f:c2:0f:0d:a5:ba:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=11e5724f-df55-4856-9c11-7077bbc71408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2c:40:36:ea:97:77:bf:f0:ec:30:fb:63:6b:
                    eb:f2:9e:ea:f7:33:42:77:ae:8c:b5:f0:04:67:88:
                    73:b4:02:f7:5e:17:13:05:16:9a:20:c6:0d:2c:b4:
                    ef:57:71:34:30:71:d2:64:89:13:43:06:77:2d:a0:
                    5a:49:4e:4e:f1:ac:a8:38:5b:4e:79:8f:f8:be:9d:
                    f3:de:e1:05:55:b3:43:35:e0:84:ff:2c:83:81:a0:
                    87:1f:15:0e:68:ea:44:94:40:0b:cc:bf:1d:2b:1e:
                    df:81:c8:e3:03:9d:2b:53:c0:af:8f:1a:2c:87:37:
                    f1:4e:a0:d5:44:f2:88:dd:2d:f9:67:8f:45:d0:d3:
                    b9:24:7e:22:69:10:98:1c:0a:95:5a:d6:eb:85:4a:
                    d9:28:68:1b:fb:25:e7:19:35:b5:52:75:89:fe:77:
                    c6:0e:b1:d7:4d:71:1d:e8:65:b6:f9:b0:78:b3:5c:
                    80:7a:77:36:66:41:7c:11:82:8b:59:8a:58:ec:dd:
                    bf:ef:c6:a4:12:22:a7:db:30:6f:37:6f:23:49:8b:
                    00:c4:e5:1f:f8:5c:d8:ab:3a:0e:db:79:60:0f:6f:
                    5c:ae:60:4b:a5:5c:d0:31:fa:ba:36:8b:55:c0:ad:
                    1e:d5:13:11:8d:4e:ae:c7:00:3b:d6:03:54:db:d7:
                    2e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A1:C3:75:CB:88:15:92:0B:75:EB:62:C0:44:27:29:8A:40:21:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/1def351d-8deb-31e5-9c7f-3749aa8fc6fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.103.32.0/19
                  67.103.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:c0:12:c7:b0:46:bd:81:f4:71:ab:11:75:83:1f:06:1e:15:
         a3:c9:ef:4e:0f:3c:7f:fe:ac:ad:af:13:f1:07:97:a2:25:6c:
         7c:4e:33:d7:56:e5:e5:ac:08:ee:73:df:03:26:8b:0e:2d:40:
         e7:1a:f0:0b:d3:05:5e:7b:db:56:fe:3d:21:17:18:ce:50:2c:
         d0:dd:37:5a:b5:ea:93:00:b0:60:05:7b:f3:6d:b2:7f:bb:de:
         0a:ad:cb:c1:39:81:8e:45:ed:39:1e:b9:55:ed:5e:7a:f8:ae:
         1d:7d:4d:6f:c2:92:94:64:6c:c4:7c:f1:2d:36:d7:bf:55:cb:
         0d:c3:a3:68:35:60:c0:e6:6b:7e:d7:22:c6:0f:e4:d4:e2:28:
         c1:ce:72:81:78:a7:92:b7:0b:af:3e:a9:55:b2:99:91:dc:c9:
         c5:25:da:e4:28:0a:29:19:7d:c2:f4:8f:00:59:9e:0f:dd:15:
         55:42:b2:96:cf:0c:5a:91:0b:9a:5c:b0:fd:f3:6c:1c:1e:67:
         85:1e:70:b0:19:96:3c:ff:a3:36:bd:61:4b:4a:64:3a:16:bf:
         69:67:12:0e:d4:46:bc:81:d1:7c:c3:dd:1a:15:69:a5:20:7e:
         22:31:6f:cc:10:3a:ff:25:cd:02:dd:cd:6b:e9:0e:55:84:e7:
         cb:3e:b0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:53:07 2026 by rpki-client