Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/111197e9-9752-3c74-a1d8-4e457206dba3.roa
File:                     111197e9-9752-3c74-a1d8-4e457206dba3.roa (raw, json)
Hash identifier:          J1DECYp337D3wxFJUyGAJUZ1H4t+eVbzxn5V9Ax1XB8=
Subject key identifier:   1E:FF:C3:AB:22:EF:0F:97:8C:C4:7E:AF:5A:D5:1A:97:D9:11:1B:69
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E104F1F882DE3CBB54CC5DD00
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/111197e9-9752-3c74-a1d8-4e457206dba3.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     22773
IP address blocks:        67.141.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:1f:88:2d:e3:cb:b5:4c:c5:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=640bf461-01a1-4aa0-a391-34add817db47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d6:0f:43:59:73:2d:46:86:5f:e0:79:4b:9e:
                    4f:43:81:c5:42:86:db:b2:e0:4b:c3:ff:4e:6a:93:
                    ca:6c:ad:42:a2:5a:7f:76:94:58:3f:b4:d0:de:cc:
                    0a:c5:cd:51:29:10:95:ae:27:3f:8b:f0:5e:d5:b1:
                    da:b7:25:2a:fc:43:a5:9c:b7:9c:72:b3:14:cd:2a:
                    35:d8:85:4b:da:3c:a2:49:af:2f:c8:45:64:3d:36:
                    e4:6c:24:48:19:2e:3c:97:4c:6b:00:ae:45:ce:ca:
                    53:41:85:ae:14:b1:26:f1:4e:43:97:84:96:24:d0:
                    65:1d:d2:2d:7f:b7:e6:55:3c:04:09:da:54:48:f8:
                    02:03:fe:52:31:78:f4:34:80:e5:d4:da:69:e5:a8:
                    5f:e0:a6:11:44:b5:0d:1d:7b:fc:de:45:70:73:28:
                    8a:4b:44:e8:8a:f4:34:40:67:63:73:6c:1e:79:77:
                    d9:05:f2:f5:fd:b2:fb:59:6b:5e:18:d0:0c:86:52:
                    90:11:1e:0b:cd:89:96:2a:26:eb:f1:a4:40:e1:73:
                    4a:87:f0:d8:19:00:ce:d3:2a:14:0e:28:b7:db:61:
                    1f:65:21:2e:e0:46:41:65:38:fe:3e:35:6c:f7:70:
                    2d:ed:e2:85:31:17:8b:fa:9c:36:80:4d:c1:14:7f:
                    50:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FF:C3:AB:22:EF:0F:97:8C:C4:7E:AF:5A:D5:1A:97:D9:11:1B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/111197e9-9752-3c74-a1d8-4e457206dba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.141.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:2e:01:0c:c3:d1:86:93:92:84:23:c1:35:c6:98:c3:94:e8:
         ee:7e:71:2c:33:7f:69:09:e3:1c:71:81:48:56:a1:06:62:88:
         14:23:02:27:bb:e2:59:fb:d4:df:f6:48:1b:b8:97:f6:77:f0:
         01:fc:fa:3a:68:29:87:8b:ca:5f:c6:79:51:38:90:21:38:41:
         d5:9d:65:19:c3:89:99:8e:18:45:a4:ec:80:e2:65:af:5d:82:
         c7:ef:28:88:01:1c:5a:3b:8b:10:f3:ba:37:90:ad:6d:9c:40:
         f3:dc:b1:25:32:25:f5:4f:0a:e8:95:23:bd:39:23:7a:93:0e:
         84:a9:7e:da:6f:73:8d:d0:6c:e1:29:5a:86:cf:65:ed:0b:ea:
         6b:de:8b:64:d1:3d:01:ab:31:b7:6d:19:ac:b7:ba:a1:2c:c8:
         da:b2:a5:eb:21:f5:f7:01:98:25:dc:50:43:59:4b:d9:1f:31:
         6b:57:81:67:44:2a:ce:e9:d4:de:6f:7f:f5:30:d1:f2:50:44:
         19:68:db:26:8c:b3:65:24:06:9d:43:e8:0e:ae:08:58:b2:da:
         a8:62:44:27:eb:0f:ec:d6:7a:d0:1a:52:c3:1e:11:54:39:13:
         b0:0c:d0:c8:fd:3a:94:4e:ef:44:7d:e2:74:bf:3a:75:55:e4:
         1e:97:21:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:50:37 2026 by rpki-client