Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/cb1754c2-89fa-3b4c-a110-0ca448297dac.roa
File:                     cb1754c2-89fa-3b4c-a110-0ca448297dac.roa (raw, json)
Hash identifier:          BurtqB6jlWCqvv3QfNPOVj287wPD4epodCIBlDIBUIA=
Subject key identifier:   29:4E:9C:4B:C9:73:A7:CD:38:F7:7F:C8:BE:20:75:71:0D:28:4E:18
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584E5A49F2AA401538E8D2CEA9F2
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/cb1754c2-89fa-3b4c-a110-0ca448297dac.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     55269
IP address blocks:        67.214.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:f2:aa:40:15:38:e8:d2:ce:a9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=249bafd1-01be-4053-b74f-826d106aeb96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0b:56:51:fd:53:53:41:22:01:da:43:5b:46:
                    77:c8:a2:1e:47:f7:0f:df:75:5c:68:f7:54:55:70:
                    39:2b:ba:f6:a2:93:e0:3d:f4:23:41:32:21:6a:6a:
                    7e:7f:53:c3:b8:20:0a:d1:9a:ca:fe:3a:78:57:29:
                    b0:91:da:d5:4a:92:8a:d0:56:90:97:32:78:62:87:
                    00:18:80:72:59:0d:63:52:a9:48:64:c4:f6:d8:7d:
                    02:9e:14:93:6b:81:bd:9f:01:2e:5c:de:7e:7f:74:
                    f2:0e:97:a1:69:fd:c4:f5:0a:c2:b3:ff:27:ac:98:
                    26:5e:05:f8:35:26:30:1e:86:6b:4e:ec:b5:42:9d:
                    e3:c1:83:a5:07:58:fa:a8:00:8e:38:2f:d7:a3:87:
                    3f:25:cb:0f:75:12:8a:6d:ce:e7:89:93:3d:20:44:
                    4e:28:cb:6c:ca:b4:04:2f:10:cf:03:32:50:f0:1e:
                    bb:a0:25:01:78:f2:d3:a4:6c:56:6f:24:39:76:69:
                    ff:50:5c:c4:51:39:c4:49:a8:96:d1:74:be:3e:ce:
                    47:a6:0f:f9:36:ce:23:cf:87:53:1f:61:ee:27:76:
                    21:09:3a:30:ab:54:62:fd:11:e5:5d:13:c5:a1:a9:
                    10:4c:df:c7:fa:39:a0:61:d0:b0:a7:88:07:db:a2:
                    b5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4E:9C:4B:C9:73:A7:CD:38:F7:7F:C8:BE:20:75:71:0D:28:4E:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/cb1754c2-89fa-3b4c-a110-0ca448297dac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:56:f7:25:76:99:a2:89:36:f5:30:6f:a6:2b:c3:2e:e3:97:
         71:e9:46:a3:c7:b5:f0:61:82:62:0a:0a:c5:6b:04:1a:c1:b0:
         d8:9a:82:06:b7:31:f0:cd:35:4d:81:3a:82:19:9e:2f:03:e3:
         60:08:3f:1f:63:df:7a:c3:5b:b0:84:60:02:2b:44:fe:65:29:
         c3:e5:65:b5:23:d6:82:66:da:86:17:21:b3:9c:6e:59:ed:49:
         81:59:f5:11:2f:22:9b:91:0a:13:6a:68:0c:13:4c:9b:54:59:
         1f:95:cf:f8:ce:82:f5:df:e4:b4:ac:27:39:69:2b:a0:71:7c:
         72:f8:18:16:1a:0e:d1:af:08:08:d7:ca:a1:cb:9d:c4:dd:74:
         ea:01:b4:1b:fe:93:6f:73:bd:96:ec:f1:96:68:95:6d:a1:54:
         50:fa:4d:c6:5d:e3:91:58:d4:ae:de:71:bb:dc:a6:78:5d:a9:
         eb:da:c7:98:9a:70:6a:0c:ab:6e:43:a6:82:e9:23:0e:41:8b:
         89:6e:ff:b9:32:96:d6:b9:3e:30:38:ed:6b:fc:75:5e:82:13:
         17:e7:24:b7:10:75:94:72:7d:75:af:af:6f:85:35:86:8e:8b:
         64:15:b8:d8:c5:68:67:6c:a0:be:3c:b0:1d:f2:1f:67:ac:d4:
         14:88:c2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:39:10 2026 by rpki-client