Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bfc3288-7489-335b-99cc-2d2468401e68.roa
File:                     6bfc3288-7489-335b-99cc-2d2468401e68.roa (raw, json)
Hash identifier:          6DpHHjK5pBunCWmuWX2EZ4PwCJ7KcMr3gplIP9XecBg=
Subject key identifier:   CD:2C:6A:80:60:88:27:D1:B5:77:BF:6D:5E:C1:E6:7A:E1:4D:71:6C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119E337B19E537F869FD1CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bfc3288-7489-335b-99cc-2d2468401e68.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33651
IP address blocks:        67.174.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9e:33:7b:19:e5:37:f8:69:fd:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=299fee01-2302-495c-9ccf-bf7b1a69e1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:80:d8:49:1a:1f:a4:78:17:11:61:eb:11:02:
                    b0:07:ec:40:10:17:78:d7:cc:3e:44:4a:4f:6e:ef:
                    6f:13:e8:b5:ee:43:22:43:02:62:8c:99:1a:8f:8f:
                    ad:69:a8:f1:c4:e3:ed:8c:25:34:89:c7:85:11:25:
                    4e:e2:3b:42:f4:79:be:4c:e3:c9:39:44:1a:5e:90:
                    51:27:ca:6f:81:a8:54:75:d1:48:29:fc:ad:71:d6:
                    c8:57:f4:06:7e:4f:61:7b:0a:8b:39:18:1c:3d:89:
                    8c:15:c4:87:e2:ee:d6:f5:18:17:38:18:57:71:0f:
                    13:f9:fb:1c:49:7f:b7:1c:93:7f:9b:31:62:08:9c:
                    ce:39:65:a2:e2:da:08:b7:c5:16:57:75:31:67:97:
                    19:6f:77:50:c9:99:12:a5:b9:49:19:87:6c:bf:20:
                    c5:48:78:fa:70:9c:1f:d0:20:53:6d:02:a5:e3:d3:
                    cf:50:c3:79:e7:a9:10:95:30:33:60:b7:e6:e7:39:
                    91:d3:35:21:0e:5f:83:df:93:b4:63:d2:e8:f5:9b:
                    38:73:4e:a5:16:fe:6c:a3:54:99:68:f3:85:8f:af:
                    f9:44:c0:31:67:bc:08:62:64:a1:25:55:25:5d:7f:
                    b8:c4:b6:7c:c8:78:a9:e0:6b:3e:31:01:5d:d1:69:
                    a1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2C:6A:80:60:88:27:D1:B5:77:BF:6D:5E:C1:E6:7A:E1:4D:71:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bfc3288-7489-335b-99cc-2d2468401e68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.174.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a2:0c:6f:27:6e:40:63:48:cb:05:45:a0:86:3e:5b:9f:f9:
         24:27:ed:cc:95:42:f7:3f:c9:c7:62:72:94:dd:83:e3:ce:c3:
         b1:b5:bf:85:f2:e2:a4:6e:9e:c0:01:12:b5:f5:12:48:88:6b:
         80:0e:a8:07:a8:43:36:25:10:6e:70:08:ea:ef:74:ae:79:78:
         d8:b8:1f:2c:44:3f:37:e4:78:ec:68:09:3b:fe:88:c4:78:14:
         a1:1b:f8:d2:1d:dd:7d:d8:43:0e:2f:1a:46:ae:35:71:6c:20:
         d7:93:66:e6:bc:c7:c0:fc:aa:26:f6:42:e2:82:73:dd:48:29:
         95:e7:f5:61:c6:92:30:f3:24:52:40:58:85:60:16:a9:eb:2b:
         f6:3f:93:54:88:a2:f2:1f:ad:84:09:90:dc:54:b5:a0:a3:34:
         e0:8c:5e:fa:57:e9:a7:b9:36:47:d2:3d:a2:a2:c3:67:c7:2d:
         90:58:b2:5a:09:d6:2a:15:6d:59:ec:73:4c:9e:8d:76:9c:15:
         c1:96:37:a7:73:7a:dd:4e:11:35:d3:d5:63:91:f9:8b:0e:8b:
         01:0e:75:4e:8e:81:4d:85:ce:d2:2f:16:bb:09:eb:e2:a4:9e:
         11:b6:52:54:9c:91:fd:30:80:be:df:6f:a5:c8:62:bc:70:58:
         c4:d1:0b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:56:10 2026 by rpki-client