Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7dba6a4b-5602-3c57-8193-02808f199303.roa
File:                     7dba6a4b-5602-3c57-8193-02808f199303.roa (raw, json)
Hash identifier:          rgxez60ggD2TWwJ315x10mvLLg+jmJNGUsU8AD6UWFQ=
Subject key identifier:   E0:ED:23:19:26:1D:D1:FD:BB:09:FF:E7:3D:22:AC:89:17:C7:55:CB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584F119D20A3439C5039C7F3D240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7dba6a4b-5602-3c57-8193-02808f199303.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     33660
IP address blocks:        67.163.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:20:a3:43:9c:50:39:c7:f3:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=24db7167-2fbb-41ad-a7fb-80bfdd32e1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2a:66:5f:01:c0:0c:eb:fa:04:a0:46:46:be:
                    b8:00:01:57:68:d4:39:81:e0:22:fe:61:66:8c:83:
                    cf:33:d6:bd:ce:bb:f6:8b:be:c3:e7:1e:86:1c:24:
                    ea:e6:6f:0d:1e:d7:b5:84:d4:5b:5d:c8:f6:a3:af:
                    73:0b:ac:bb:02:a5:b6:af:69:70:cd:fd:b1:6f:bb:
                    87:7f:ad:a9:75:bf:73:39:2d:3f:5c:a5:64:bb:84:
                    44:8c:58:65:49:0a:b6:4b:cc:b0:b4:76:fa:c0:2d:
                    6c:55:ec:26:82:b8:7d:5b:4a:8b:ef:2b:cf:f7:31:
                    0d:c3:c5:32:1f:dc:0e:7b:08:ef:86:0b:14:9a:b8:
                    32:00:fa:f8:35:65:1d:b2:af:6a:5b:34:94:ff:49:
                    04:aa:f6:ea:77:66:ff:96:98:35:ac:ed:ea:e0:ef:
                    4c:da:0b:a9:63:af:97:a9:a4:87:d0:a5:5e:be:26:
                    78:5b:cd:1c:b3:b4:ba:84:49:af:d7:19:be:d0:59:
                    9e:d8:f9:77:e8:4f:0f:10:53:4b:74:cf:8d:84:ba:
                    80:4f:c4:74:53:78:52:b6:8d:46:ec:ae:36:20:e9:
                    aa:ed:55:2d:b7:5a:e0:e7:fc:ff:69:b2:95:0b:1f:
                    5e:46:50:a6:59:47:0d:8e:90:48:7b:10:9f:77:41:
                    fc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:ED:23:19:26:1D:D1:FD:BB:09:FF:E7:3D:22:AC:89:17:C7:55:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7dba6a4b-5602-3c57-8193-02808f199303.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.163.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:64:c4:01:e2:2b:95:b6:a2:85:c8:58:30:e1:39:ba:76:d9:
         fe:15:13:49:83:77:0d:d9:73:a6:ba:39:08:f0:35:24:82:bb:
         14:4c:3a:f2:e6:9f:cb:81:a6:bb:fc:7b:e8:c1:20:dd:a6:fa:
         d4:c3:d9:44:52:86:09:5e:7b:3a:f6:4a:64:48:2e:c2:32:6b:
         55:37:d6:55:67:36:79:ae:4b:90:c6:12:62:f6:80:2b:5c:52:
         e0:78:f4:ac:3e:80:2f:77:87:6c:1c:42:90:ae:47:58:92:2b:
         b5:b7:1a:e8:f7:35:d1:52:a2:a0:4a:62:45:9a:88:1e:73:bc:
         1a:c8:7b:0d:79:0f:45:8e:00:4d:53:82:32:c0:7c:81:65:31:
         db:35:fa:4c:40:72:ca:78:b7:e7:af:cb:99:09:d4:86:d1:44:
         12:f0:9a:db:eb:18:50:d7:26:f4:9b:c0:02:32:f1:c1:fd:31:
         f8:1d:2d:48:17:33:c3:8a:f8:23:aa:ae:c3:9d:5a:49:c5:7b:
         3c:84:ff:84:c3:8e:03:04:d5:1f:8b:5f:b1:68:c4:f6:2a:d9:
         2d:85:01:bb:22:df:15:05:54:39:ac:77:dd:2b:57:89:d0:fc:
         b5:85:d5:ad:4c:24:b1:77:ac:63:bb:64:58:43:ed:c0:2c:2d:
         59:61:8d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 10:54:25 2026 by rpki-client