Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa
File:                     67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa (raw, json)
Hash identifier:          041Dm1+C7uZj8TLJWmhr/RtbexDoBpOli/Mm8Sw9nIM=
Subject key identifier:   6F:31:FC:1D:68:8F:72:2F:17:08:92:4E:CC:01:11:54:69:EC:1D:92
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584DBBA044029DF5738EA4FD4100
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa
Signing time:             Tue 05 May 2026 13:00:31 +0000
ROA not before:           Tue 05 May 2026 13:00:31 +0000
ROA not after:            Mon 03 Aug 2026 13:00:31 +0000
asID:                     14618
IP address blocks:        208.85.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bb:a0:44:02:9d:f5:73:8e:a4:fd:41:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: May  5 13:00:31 2026 GMT
            Not After : Aug  3 13:00:31 2026 GMT
        Subject: CN=525ee891-f4d0-4615-b66b-3484844bf68e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5c:28:c1:09:fe:0c:1d:95:5e:61:fc:ba:aa:
                    27:a1:71:25:6d:21:7f:41:d4:d9:39:e3:60:67:2a:
                    16:29:8f:ad:75:58:10:bc:89:22:37:9b:fa:18:97:
                    b7:22:b8:01:4b:dc:0a:35:8a:75:77:47:11:65:f9:
                    e6:b9:fa:f2:3e:5c:36:63:b0:0d:d8:13:01:c4:b5:
                    ec:6c:cf:a6:0f:e2:c5:bf:3f:2c:cd:46:3e:b6:27:
                    de:76:ee:04:73:96:8a:b6:e1:b5:d9:28:24:a2:5b:
                    b4:f7:69:52:50:de:59:d9:74:3d:97:4b:f5:d7:eb:
                    15:50:3b:07:08:73:f7:67:c5:17:0d:83:39:77:d6:
                    cf:18:6f:23:f9:35:3e:77:62:a1:d6:d9:52:dd:a9:
                    0f:43:bb:1e:00:40:78:71:9a:c0:60:69:41:6b:5d:
                    03:dc:c7:69:46:e3:53:73:8d:31:3e:98:a3:d9:d2:
                    af:d5:59:89:0f:38:cc:22:8b:9a:cf:91:fc:ba:4b:
                    55:92:d0:2a:70:89:20:0a:14:e6:54:fd:9a:f6:1d:
                    c5:d9:7d:9b:27:71:bf:41:17:da:4c:5d:20:1e:1f:
                    1d:08:64:55:de:50:87:2c:30:13:29:46:e9:8b:96:
                    ba:dc:ab:d1:15:c1:a7:f9:57:a9:ed:18:6a:5a:9f:
                    1b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:31:FC:1D:68:8F:72:2F:17:08:92:4E:CC:01:11:54:69:EC:1D:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/67f4abfc-cbc8-3d4b-9d56-90af0d60faa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.85.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:40:5f:47:fb:eb:e8:62:03:f9:2e:12:f4:9f:9c:9e:7b:98:
         b4:df:e4:0c:aa:c7:44:88:03:cd:51:82:0c:e6:ea:2b:43:69:
         6f:0c:e0:01:0c:a7:a1:24:2e:38:32:29:b9:85:ed:44:d1:cc:
         6d:e7:db:a9:3e:68:11:41:97:93:c1:f7:f2:43:cb:f0:77:fc:
         1a:ea:74:11:81:21:81:ad:ab:93:c9:7d:83:f9:65:03:cb:5a:
         83:23:eb:96:31:4c:91:bd:c1:df:65:54:b3:bc:57:d7:32:6d:
         ab:0e:61:32:93:19:38:92:f1:a7:37:3a:57:88:b3:5f:22:22:
         a5:58:3e:55:6f:d3:07:59:56:40:c6:cf:2d:73:86:12:f6:1a:
         e5:ad:7a:a4:25:d0:bc:79:f7:71:d5:75:ab:5a:ee:28:83:79:
         21:b1:ed:8f:92:1b:1d:c4:85:78:8d:27:f4:06:94:84:84:52:
         71:a2:19:ee:c5:6d:9a:a6:66:dc:d0:38:99:46:02:4f:ee:66:
         51:44:b7:05:49:c3:3f:e6:aa:88:b7:b2:24:2b:92:f4:66:49:
         dc:4b:d3:ae:45:ff:e1:ca:40:2f:8b:ef:56:b5:a0:a9:80:b9:
         ec:98:98:16:a2:7b:a9:23:e1:d0:9d:aa:ac:62:41:5a:83:a6:
         57:d6:8d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:42:33 2026 by rpki-client