Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/bdd949a7-e0e1-3b8e-81bc-94238a595155.roa
File:                     bdd949a7-e0e1-3b8e-81bc-94238a595155.roa (raw, json)
Hash identifier:          N96YiaGZ/t2OMsp/PdbWHVLtJTYBDp4pvFLUIFzxEok=
Subject key identifier:   D4:FA:99:EF:89:C5:D4:BA:0B:D5:3D:F9:77:DA:AE:3E:A9:6C:91:E0
Certificate issuer:       /CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
Certificate serial:       010D0C9F4328584D44FA385EF8DC78E542A5C480
Authority key identifier: E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/bdd949a7-e0e1-3b8e-81bc-94238a595155.roa
Signing time:             Tue 24 Mar 2026 01:00:31 +0000
ROA not before:           Tue 24 Mar 2026 01:00:31 +0000
ROA not after:            Mon 22 Jun 2026 01:00:31 +0000
asID:                     14618
IP address blocks:        67.226.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:44:fa:38:5e:f8:dc:78:e5:42:a5:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=928cccc8-4c1d-457b-a709-2f2c5d83c939
        Validity
            Not Before: Mar 24 01:00:31 2026 GMT
            Not After : Jun 22 01:00:31 2026 GMT
        Subject: CN=4fea09ec-0c32-44bd-919a-3d9d393fd7c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dc:5b:44:35:24:e9:31:8d:fc:74:80:cb:3f:
                    03:69:c7:70:d7:e0:08:40:dd:4e:d7:27:51:6d:73:
                    29:19:bc:d3:73:6d:70:60:65:be:b8:ed:2c:b1:48:
                    42:3c:b8:77:3f:e6:64:f1:5e:5a:81:48:9f:1c:5e:
                    d1:78:4d:08:21:ec:b2:ff:28:d1:6d:a8:c9:76:50:
                    68:71:49:54:ff:fb:b1:9e:f1:89:17:ac:c4:ae:ed:
                    76:00:a1:46:28:bc:30:82:38:fc:0b:b9:1f:5c:16:
                    68:57:d6:ba:f0:d7:d0:36:69:56:4d:38:04:b8:9f:
                    15:a6:64:32:b6:c7:99:8a:26:4e:9a:5d:ad:f0:8f:
                    dd:7f:19:8e:f6:2a:17:4e:eb:80:18:58:b4:3e:66:
                    e2:58:7e:9c:71:25:9b:28:c2:11:92:07:d7:2c:d4:
                    cf:8a:74:7e:0a:3b:d2:6d:4b:ed:3e:4a:83:0f:37:
                    90:ff:4d:f7:10:e9:aa:19:fe:a5:66:42:a2:b9:8c:
                    6b:ff:9e:00:f1:20:3c:3a:95:86:b6:84:22:66:bf:
                    a5:bb:ce:18:29:1c:63:a5:2b:06:08:c8:6f:e9:ab:
                    a9:b0:d2:49:02:66:37:94:df:93:f5:ae:56:17:34:
                    3e:b3:7f:08:3d:65:98:05:70:74:ea:28:7e:32:45:
                    d9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FA:99:EF:89:C5:D4:BA:0B:D5:3D:F9:77:DA:AE:3E:A9:6C:91:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/bdd949a7-e0e1-3b8e-81bc-94238a595155.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939/928cccc8-4c1d-457b-a709-2f2c5d83c939.crl

            X509v3 Authority Key Identifier:
                keyid:E7:48:CF:EC:DF:A9:17:0F:AE:79:4A:FB:3E:33:6D:B0:4A:C5:88:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/928cccc8-4c1d-457b-a709-2f2c5d83c939.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.226.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:68:74:50:c3:8f:55:38:b3:36:8a:eb:67:96:aa:81:ee:47:
         dd:d9:64:5b:4d:db:f6:a8:31:34:4b:90:f7:0c:bf:b5:3a:a5:
         3e:b1:1f:63:fe:fc:1d:f4:7c:d2:db:32:82:c7:e4:68:d4:00:
         4a:46:8e:25:eb:aa:90:78:16:bb:2b:e6:97:59:d2:e5:c1:9f:
         0f:33:52:20:9a:45:91:19:d7:ff:aa:b4:ef:a2:f9:52:5e:f7:
         e3:50:2f:d2:6e:ad:5e:6a:12:be:6b:ab:f3:23:25:c9:28:3d:
         e0:61:0d:e6:a5:2a:5b:75:5b:2f:1f:ee:31:09:fa:56:01:4d:
         0e:09:73:6a:ec:b0:73:e7:09:4c:9d:b5:45:3c:c0:60:68:e1:
         74:a7:4a:f0:63:f3:44:ed:0f:c0:b1:29:80:4a:bd:fb:f0:39:
         07:e0:9b:2a:c8:1b:74:ac:39:1a:6b:c7:43:df:b9:95:94:a0:
         24:35:4a:ca:30:15:b6:d0:e4:cf:ce:9a:37:2d:7c:9a:c0:91:
         52:27:00:64:01:d4:1e:42:8b:a5:07:92:a3:ce:2b:60:80:41:
         53:b4:47:60:8d:50:a4:41:22:21:88:0b:9a:d1:d1:e9:6c:26:
         30:96:30:eb:43:ce:7a:af:06:3d:ee:31:78:a7:94:1f:82:87:
         62:e1:42:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:27:32 2026 by rpki-client