Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/495553e5-6804-3997-88ac-54c613b38c17.roa
File:                     495553e5-6804-3997-88ac-54c613b38c17.roa (raw, json)
Hash identifier:          M9Aq6uIzF8HSPX6DIMGTXGJCC/jpswF2mfZiws8gldM=
Subject key identifier:   BB:34:7E:97:9A:31:8D:05:08:5B:E8:80:8E:F4:5B:39:DA:D1:1D:68
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F4328584EA787D217D32E6CEDB996BE80
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/495553e5-6804-3997-88ac-54c613b38c17.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6621
IP address blocks:        67.142.0.0/19 maxlen: 19
                          67.142.100.0/22 maxlen: 22
                          67.142.104.0/22 maxlen: 22
                          67.142.108.0/22 maxlen: 22
                          67.142.112.0/22 maxlen: 22
                          67.142.116.0/22 maxlen: 22
                          67.142.120.0/22 maxlen: 22
                          67.142.124.0/22 maxlen: 22
                          67.142.128.0/20 maxlen: 20
                          67.142.144.0/21 maxlen: 21
                          67.142.152.0/22 maxlen: 22
                          67.142.157.0/24 maxlen: 24
                          67.142.158.0/23 maxlen: 23
                          67.142.160.0/19 maxlen: 19
                          67.142.160.0/24 maxlen: 24
                          67.142.176.0/24 maxlen: 24
                          67.142.184.0/24 maxlen: 24
                          67.142.185.0/24 maxlen: 24
                          67.142.186.0/24 maxlen: 24
                          67.142.188.0/24 maxlen: 24
                          67.142.189.0/24 maxlen: 24
                          67.142.193.0/24 maxlen: 24
                          67.142.194.0/23 maxlen: 23
                          67.142.196.0/22 maxlen: 22
                          67.142.200.0/23 maxlen: 23
                          67.142.202.0/24 maxlen: 24
                          67.142.206.0/23 maxlen: 23
                          67.142.208.0/20 maxlen: 20
                          67.142.224.0/20 maxlen: 20
                          67.142.240.0/23 maxlen: 23
                          67.142.242.0/24 maxlen: 24
                          67.142.244.0/22 maxlen: 22
                          67.142.248.0/23 maxlen: 23
                          67.142.250.0/24 maxlen: 24
                          67.142.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:87:d2:17:d3:2e:6c:ed:b9:96:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=ea9ca887-67ed-4e97-9acc-388f4c059fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:bc:f8:96:5e:bf:52:68:24:3c:d9:f2:b6:
                    6c:87:7a:40:31:28:7a:7a:53:4b:e9:02:a0:1d:c4:
                    86:59:49:72:bf:ef:14:ad:3c:38:9b:27:fe:06:67:
                    0b:78:0a:aa:40:e5:15:15:05:6c:fd:a8:d2:80:f8:
                    2f:3a:a5:05:2b:c1:e4:b7:a8:c0:58:4f:ee:69:c8:
                    57:4c:0c:4e:14:c4:92:1b:18:5c:e9:85:13:69:63:
                    7b:ae:dc:27:92:6f:ee:e0:ce:6f:52:91:af:2d:fb:
                    8b:df:c2:cd:43:98:b9:0a:dc:ba:63:87:eb:76:98:
                    22:90:99:ba:2c:0f:37:be:a5:aa:55:ef:19:02:f3:
                    2a:03:72:dc:bb:2f:f2:eb:5f:b0:48:69:ce:15:6c:
                    32:3c:32:8c:6a:eb:3e:cd:6d:37:da:1d:a7:c7:a8:
                    ea:54:12:36:45:e0:d8:37:d7:c1:fc:ee:cc:aa:92:
                    ba:e1:b1:73:52:b9:fa:9a:24:aa:1c:73:0e:98:53:
                    a0:b2:2b:46:13:c0:48:13:bb:2d:d8:29:9e:51:91:
                    aa:bf:39:a1:ef:8b:8c:4b:7b:82:79:61:f0:76:ae:
                    26:31:4e:a8:c1:f8:eb:3b:42:41:22:b3:af:8d:1f:
                    1d:38:7f:04:1b:9b:96:21:0d:e1:c0:0d:20:44:c3:
                    da:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:34:7E:97:9A:31:8D:05:08:5B:E8:80:8E:F4:5B:39:DA:D1:1D:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/495553e5-6804-3997-88ac-54c613b38c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.142.0.0/19
                  67.142.100.0-67.142.155.255
                  67.142.157.0-67.142.191.255
                  67.142.193.0-67.142.202.255
                  67.142.206.0-67.142.242.255
                  67.142.244.0-67.142.250.255
                  67.142.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:3b:58:80:35:63:45:65:3f:60:5a:08:8c:b8:d7:19:3f:96:
         f7:77:78:62:50:56:32:5e:b5:41:95:28:03:70:81:4d:5f:19:
         68:15:ad:41:60:33:5c:0a:6d:3b:52:c1:16:c3:a9:9d:59:2c:
         18:8c:a5:2c:20:d3:7c:58:c2:c1:69:09:0f:e0:d8:71:42:1e:
         87:3b:c6:9c:ff:43:a5:e5:86:ed:50:b6:39:8d:99:50:24:e6:
         eb:85:81:68:db:90:11:66:bc:6e:a2:fe:30:eb:dc:df:40:bf:
         fb:a3:6f:eb:56:8f:09:51:7b:f4:3a:a7:f1:09:d7:ae:df:ba:
         2e:e2:bb:38:0d:26:44:63:66:73:d0:4d:b7:45:44:a9:8d:08:
         7d:6d:75:05:3e:79:ff:eb:fd:b5:11:71:ba:e1:b8:a7:96:99:
         f5:50:1c:75:ad:14:dd:45:fe:c2:88:ff:90:3c:a3:c6:35:af:
         cd:d2:a5:2d:5a:76:ae:32:37:1f:fb:6b:e5:c7:c8:50:42:3c:
         54:79:74:b3:1d:45:23:28:5f:44:89:6d:2f:fe:d3:85:17:85:
         1a:73:31:98:c5:fb:59:b9:68:89:9d:b4:e3:b6:2a:43:35:dc:
         11:37:f3:ce:d0:8b:d6:e3:fe:96:9c:11:be:3e:b1:64:4f:f4:
         1d:de:59:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:31:28 2026 by rpki-client