Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d57adb1e-7b1d-3c87-81ee-833ac3039df9.roa
File:                     d57adb1e-7b1d-3c87-81ee-833ac3039df9.roa (raw, json)
Hash identifier:          fSZU1a+lxB6zWj4tGx1S93J3bkoxD+LrlwUKAdLFpvE=
Subject key identifier:   25:88:35:B3:20:02:38:78:B4:99:BC:CD:39:BB:35:92:EF:07:76:B8
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F4328584E104F1FEBF246AD5D876CF700
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d57adb1e-7b1d-3c87-81ee-833ac3039df9.roa
Signing time:             Thu 04 Jun 2026 21:00:12 +0000
ROA not before:           Thu 04 Jun 2026 21:00:12 +0000
ROA not after:            Wed 02 Sep 2026 21:00:12 +0000
asID:                     27172
IP address blocks:        67.217.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:10:4f:1f:eb:f2:46:ad:5d:87:6c:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Jun  4 21:00:12 2026 GMT
            Not After : Sep  2 21:00:12 2026 GMT
        Subject: CN=d11e2fad-cd76-40f5-aa28-da2943628352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:13:26:da:17:19:1b:21:d4:54:4c:6f:e2:15:
                    c0:22:38:f4:da:4d:20:ba:9d:de:05:a9:e2:07:b2:
                    3a:25:d3:c8:b1:eb:32:9b:1e:d8:10:03:e0:d8:25:
                    d3:d0:52:d1:d0:4b:17:45:0c:d6:6c:17:fc:b1:9b:
                    84:4d:ef:92:b6:2b:33:59:d3:e6:0f:da:27:52:ba:
                    32:6b:78:db:b5:12:fb:d3:c3:fe:e5:3b:89:e7:85:
                    d4:f2:31:bb:6b:34:5f:28:08:0b:7d:e9:4a:68:56:
                    1b:ec:37:3b:87:2c:7b:ed:99:ec:3e:e7:e5:bb:80:
                    72:30:9b:11:eb:9b:2a:a7:c9:43:82:8d:bc:1a:e5:
                    b7:07:d9:af:1f:fc:5a:06:d4:b9:3a:32:16:0b:cb:
                    4b:d8:9e:41:d7:f7:e2:9a:44:ca:45:47:5c:b6:91:
                    3b:4a:9c:ed:ca:c2:6e:46:91:e0:c6:66:18:dc:2e:
                    5a:7a:8a:83:41:3f:01:f8:14:e8:59:cd:57:e7:b4:
                    2f:88:3e:72:43:63:c6:68:2a:83:60:ad:4c:7f:ef:
                    ae:17:ef:cd:87:53:c4:78:8d:87:21:83:01:89:c1:
                    06:c2:f1:15:db:aa:0a:a1:42:5f:9f:45:b8:7d:87:
                    63:a4:22:d8:06:0c:58:60:22:e4:e5:78:3d:23:e1:
                    8b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:88:35:B3:20:02:38:78:B4:99:BC:CD:39:BB:35:92:EF:07:76:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/d57adb1e-7b1d-3c87-81ee-833ac3039df9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:55:88:fa:f1:ae:ee:ab:32:39:e2:16:73:c7:d5:34:9c:0d:
         2b:03:93:9a:14:0c:21:4c:36:d5:6b:63:b0:04:a9:fa:7e:f2:
         72:95:ae:40:84:65:e5:c1:f5:09:eb:25:2b:da:6a:29:9c:45:
         08:46:b6:d2:d2:b3:e5:05:8a:9a:c4:2d:3c:f9:e1:2b:db:22:
         0d:5e:b7:03:20:81:9e:d3:38:25:43:32:d2:0f:78:de:49:56:
         23:72:df:f0:35:81:61:ff:19:9f:f2:18:0d:c4:11:59:2c:08:
         a8:29:3f:25:1d:c8:6c:95:51:12:bc:67:36:f5:f8:01:39:2e:
         2b:e8:aa:ee:0d:6d:61:e6:2d:16:7c:99:1a:5d:50:44:fc:f2:
         ab:50:93:26:4b:cb:84:50:22:39:41:cf:64:8c:da:de:fd:ce:
         63:27:55:73:e9:c6:78:de:68:f3:0d:f3:7c:f1:8d:48:15:9c:
         d8:40:88:a0:02:c3:5b:70:7a:f7:7d:d7:44:fa:fd:28:61:0c:
         f6:c0:86:d5:5b:20:12:9e:a9:3b:c0:8c:0d:7a:35:3d:5f:5d:
         14:8f:25:0b:b0:9a:49:78:f6:74:b5:bc:da:b2:7a:dc:85:84:
         d7:4e:13:70:c8:2f:0e:32:47:52:4e:cb:8b:a2:f4:25:c6:d7:
         17:1b:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:48:17 2026 by rpki-client