Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28986011-044d-3ddc-91d9-ea7ed00e5470.roa
File:                     28986011-044d-3ddc-91d9-ea7ed00e5470.roa (raw, json)
Hash identifier:          T3qq3OXpJK4u4irN9GS/54jfLEh6u53ycJfEewEovn0=
Subject key identifier:   34:4C:45:B1:D0:69:68:AF:77:D1:E8:84:B3:9A:9A:FA:DB:89:13:AD
Certificate issuer:       /CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
Certificate serial:       010D0C9F4328584E885A4D282EF26236B02BF400
Authority key identifier: 9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28986011-044d-3ddc-91d9-ea7ed00e5470.roa
Signing time:             Fri 17 Jul 2026 21:00:12 +0000
ROA not before:           Fri 17 Jul 2026 21:00:12 +0000
ROA not after:            Thu 15 Oct 2026 21:00:12 +0000
asID:                     36692
IP address blocks:        67.215.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:88:5a:4d:28:2e:f2:62:36:b0:2b:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891cc01a-37bd-41ca-8f2a-23c062bbdefc
        Validity
            Not Before: Jul 17 21:00:12 2026 GMT
            Not After : Oct 15 21:00:12 2026 GMT
        Subject: CN=f8de1a72-3477-4125-af40-80216cfee0a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f4:7f:69:cb:bb:9d:0b:c5:91:98:d2:fb:bd:
                    b1:2c:22:f7:2d:ef:26:8e:3b:22:09:a5:2b:c4:41:
                    9a:4c:24:ef:a0:c3:c5:92:cd:77:f5:19:69:1b:67:
                    db:6f:dc:55:9f:86:a7:ce:68:fc:50:e8:cc:07:47:
                    7c:88:12:08:bc:24:35:23:68:9f:a3:76:e7:ce:10:
                    5b:68:c3:c4:b2:70:fe:c5:07:ee:f1:a2:0a:aa:7e:
                    2d:a2:a0:b7:67:9e:31:db:ae:f4:a7:a1:f4:96:4c:
                    dc:71:a1:28:ff:63:4a:73:1b:8e:d8:aa:a4:49:c3:
                    6c:20:e5:31:26:c0:18:db:62:e2:c5:61:4f:dc:f9:
                    82:9c:ec:0a:d7:01:73:c9:55:45:89:2b:2a:20:80:
                    3c:e8:85:9d:16:d8:6f:c7:63:22:fc:0f:46:82:89:
                    41:aa:07:dd:04:3e:59:dd:85:2b:2d:3b:64:2b:72:
                    48:50:24:1a:b5:51:1b:88:40:85:30:22:cd:bc:b4:
                    af:13:27:55:5a:cc:5d:9b:8d:4b:98:24:2d:39:ad:
                    97:3d:89:f2:66:98:cf:f4:7a:da:59:d4:fb:c4:ae:
                    7f:b5:d2:47:a3:46:11:9a:1d:6d:03:e3:d0:d3:35:
                    45:75:23:59:77:16:4e:1e:1a:b8:6e:ad:9f:17:b0:
                    15:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:4C:45:B1:D0:69:68:AF:77:D1:E8:84:B3:9A:9A:FA:DB:89:13:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/28986011-044d-3ddc-91d9-ea7ed00e5470.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc/891cc01a-37bd-41ca-8f2a-23c062bbdefc.crl

            X509v3 Authority Key Identifier:
                keyid:9E:31:E8:B4:A6:34:03:B0:4F:0A:20:9F:30:6A:DD:0A:60:B8:92:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/891cc01a-37bd-41ca-8f2a-23c062bbdefc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.215.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:3c:d9:59:a7:46:de:0e:f5:ea:9b:29:b5:b9:68:b3:f9:ba:
         55:fa:52:10:6b:19:72:f4:16:6e:ca:f1:4f:45:e6:45:07:f3:
         b0:0c:7b:eb:56:24:0c:90:48:4f:bb:c8:0b:6b:4d:99:f0:90:
         1b:f5:fd:12:82:d3:bd:95:70:0a:af:2a:2e:bc:ce:fa:5b:bd:
         21:02:c0:bc:7c:6a:78:1d:0c:c4:fb:eb:d9:07:5c:63:f4:10:
         d1:cf:1a:3f:aa:db:ff:69:4b:a8:cb:d8:64:1b:29:e6:eb:80:
         a1:f8:41:01:8f:cb:53:0a:0c:21:00:84:cb:4a:64:36:5f:e9:
         c5:39:88:2c:98:65:05:20:89:da:15:14:e7:98:d7:35:5d:14:
         47:98:ed:9d:c1:c3:28:e6:ee:7c:b6:e4:e7:8d:3c:6f:f3:cf:
         b7:e7:3b:61:2a:48:82:d1:46:51:bb:0d:73:3c:2f:65:ba:c7:
         6c:c4:e6:dc:77:95:a7:d2:aa:a4:39:89:6a:64:b4:a1:ce:c2:
         17:83:a6:cc:a6:7e:04:eb:6e:99:0d:a6:31:19:ad:8a:7f:a2:
         82:c9:bb:0a:7a:66:d9:2a:43:37:c0:61:b7:97:d4:75:d1:64:
         34:3f:f7:c8:87:50:72:3c:9b:56:0f:26:78:54:78:2d:e6:1a:
         11:69:80:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:40:01 2026 by rpki-client