Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d83fa997-305c-3126-ba23-d3ee6d99bd2d.roa
File:                     d83fa997-305c-3126-ba23-d3ee6d99bd2d.roa (raw, json)
Hash identifier:          eP2Rkyeq3rw/7TeWtT/Aedq68i1IAIhbvB6FObo8JfE=
Subject key identifier:   04:E0:52:AE:04:0E:CE:9E:DE:1E:85:7A:45:13:86:45:A1:FE:E9:B6
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F4328584DC135BCFF3665E0ECFC96DCC0
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d83fa997-305c-3126-ba23-d3ee6d99bd2d.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     21782
IP address blocks:        67.209.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:bc:ff:36:65:e0:ec:fc:96:dc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=2e8fe160-52da-4123-8cfb-b84245f2e7dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:41:e4:6b:8d:bc:5b:ee:39:be:c5:0f:32:66:
                    32:20:41:05:6d:f8:c1:5f:f7:66:25:32:6b:27:45:
                    82:0f:be:63:53:f6:2f:81:8e:3c:bd:af:57:86:a1:
                    c4:76:8c:2b:aa:8f:c4:0c:fb:08:ea:1d:08:83:4d:
                    e2:3c:dd:12:90:85:ec:d6:aa:3f:f1:c6:77:73:db:
                    aa:92:a8:b8:88:ee:60:bb:12:7b:a7:b0:b6:2b:c6:
                    8c:1d:5a:34:39:7b:21:73:cd:90:67:0c:e4:31:79:
                    56:03:b8:0e:ec:8c:50:b2:ed:28:c6:72:fd:2b:2a:
                    c1:d8:ab:11:ef:32:51:13:1e:81:98:df:0f:c9:e6:
                    86:4e:cf:9f:fe:4b:26:f1:c6:8a:42:8f:90:b3:02:
                    56:e4:1a:13:d6:9b:25:4e:f2:20:c9:25:3a:13:d6:
                    37:a2:fe:4f:d9:e5:1a:97:44:16:fb:61:89:a6:12:
                    82:d4:26:40:af:e8:73:a2:84:37:d1:2c:5e:26:ff:
                    7d:71:ae:d2:f4:80:ab:b8:6c:55:d4:99:a9:f1:8d:
                    83:b7:62:3e:53:f5:c0:f9:eb:a4:96:b5:d2:8c:1e:
                    ad:90:01:65:0a:f6:fa:82:fe:c5:ed:ac:64:51:c0:
                    00:fb:b0:4d:90:64:fb:39:30:12:ba:fd:fe:7b:6b:
                    27:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E0:52:AE:04:0E:CE:9E:DE:1E:85:7A:45:13:86:45:A1:FE:E9:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/d83fa997-305c-3126-ba23-d3ee6d99bd2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.209.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:18:18:65:6d:83:c7:14:4f:fa:5f:40:56:52:ae:ed:9e:24:
         24:03:7c:17:dc:de:a5:9d:2a:bd:ed:d5:4f:32:24:3b:af:03:
         3b:8e:2a:1b:12:57:ee:89:b0:74:3b:45:0b:d0:27:4f:af:ee:
         b2:f4:85:ff:d7:47:a2:d1:c6:06:c7:79:b8:ca:a4:4a:36:b6:
         81:da:b1:5d:be:6f:1b:61:b8:e1:e7:34:a9:55:a0:b1:4c:df:
         3d:eb:5e:94:5d:3c:7d:5c:62:d5:0f:e8:55:91:61:65:37:97:
         6c:65:4c:06:74:5a:ae:09:21:8c:62:87:73:ad:5b:57:38:23:
         64:e0:15:59:b0:32:33:8a:f8:61:00:7e:d8:8e:30:b6:2a:13:
         30:d2:f6:11:3e:b4:4c:01:95:bc:98:52:3f:de:11:73:6d:f7:
         60:0a:0b:5b:6f:1e:f4:11:47:95:8d:95:4f:eb:73:d6:91:12:
         16:68:65:08:9e:09:93:19:35:d6:46:cb:59:4a:de:99:16:bf:
         89:2e:4e:1b:63:fa:df:a1:ea:b6:0d:78:99:fd:3e:da:65:32:
         10:88:74:dc:d0:31:55:6f:35:8f:4a:79:e1:e0:d1:41:ca:9d:
         2e:e8:ef:b0:c8:9d:bc:db:96:2c:e4:6a:fe:3e:8a:2a:9c:c2:
         ad:af:ca:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:22:17 2026 by rpki-client