Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/e7f8b070-b54d-345a-99c3-6754564c0672.roa
File:                     e7f8b070-b54d-345a-99c3-6754564c0672.roa (raw, json)
Hash identifier:          YS8QZUi6COwNdIn+0bN0eyINETPE2vs0dU7YzN7Yqw0=
Subject key identifier:   50:AA:D0:81:9E:76:D6:F3:87:F6:F3:13:F9:C8:48:52:95:0F:29:9C
Certificate issuer:       /CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
Certificate serial:       010D0C9F4328584D869559ADA6853BE726771700
Authority key identifier: 95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/e7f8b070-b54d-345a-99c3-6754564c0672.roa
Signing time:             Thu 16 Apr 2026 13:00:31 +0000
ROA not before:           Thu 16 Apr 2026 13:00:31 +0000
ROA not after:            Wed 15 Jul 2026 13:00:31 +0000
asID:                     8075
IP address blocks:        67.210.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:86:95:59:ad:a6:85:3b:e7:26:77:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=866b2df4-0f0a-4b84-9eb7-c185258f5294
        Validity
            Not Before: Apr 16 13:00:31 2026 GMT
            Not After : Jul 15 13:00:31 2026 GMT
        Subject: CN=81c24693-72a9-48b6-828c-c057a74b12a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:da:ff:9f:71:e8:fa:72:31:ee:b6:5f:31:db:
                    a0:99:78:93:71:7b:cb:67:d9:f7:72:f6:8a:c7:c3:
                    5d:7a:38:9c:26:a7:d6:bb:2b:cc:ca:a0:93:a6:dd:
                    f5:0a:2f:fa:8b:d4:ec:03:7b:70:fe:68:43:b3:2e:
                    fe:c2:22:8d:97:ea:3e:b8:19:97:02:6d:21:78:56:
                    d3:4d:97:ea:ce:30:32:26:93:07:a0:6b:8c:71:4d:
                    9f:8e:db:6f:91:a2:8c:93:00:11:da:4a:6d:d2:d3:
                    e2:57:3b:b1:b8:86:4d:2e:30:66:84:c7:f2:5b:18:
                    c1:f4:e3:c7:b7:5d:e7:5e:c4:aa:6a:a6:e0:61:45:
                    37:8c:7e:8e:e2:53:60:c2:f1:8f:c1:3f:bd:cb:1e:
                    4d:0b:c6:c2:70:33:64:a7:d8:d1:32:b8:e8:75:9f:
                    65:be:7d:6c:f7:d4:87:75:6f:2d:e8:1c:e9:73:05:
                    4a:57:d0:ed:a3:64:eb:f2:d3:35:0f:f7:c8:f2:55:
                    3d:b3:c4:17:81:c6:df:11:92:1a:50:4e:8f:c8:5d:
                    d3:d8:a2:92:f9:cd:0b:95:37:eb:08:78:db:03:19:
                    53:8d:ac:78:bf:16:92:80:c6:6d:83:a3:2a:c3:c0:
                    6a:a1:ee:dd:d2:f2:f7:a6:9a:fd:e7:be:08:68:f4:
                    97:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AA:D0:81:9E:76:D6:F3:87:F6:F3:13:F9:C8:48:52:95:0F:29:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/e7f8b070-b54d-345a-99c3-6754564c0672.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294/866b2df4-0f0a-4b84-9eb7-c185258f5294.crl

            X509v3 Authority Key Identifier:
                keyid:95:76:5B:F1:DC:12:D1:40:FA:AD:5B:D4:EB:65:17:42:16:BE:5A:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/866b2df4-0f0a-4b84-9eb7-c185258f5294.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:ab:f7:81:45:6b:a8:9e:37:fb:3d:e2:1e:c8:d5:73:d3:c7:
         1f:f0:01:1a:f5:f0:07:8b:34:0b:3c:40:cf:d0:7d:47:7e:3e:
         d7:ad:cb:b4:8e:e7:44:4a:1e:00:13:12:a8:6b:76:78:d4:b5:
         2b:9a:49:eb:09:b6:2f:ab:b9:96:34:fa:8b:91:4d:17:c8:be:
         b3:98:86:a6:c9:bb:16:b2:b1:83:b9:08:2c:9f:cb:7b:4f:ab:
         7d:f3:04:19:a8:67:ae:b2:19:ac:d6:f0:0d:2f:e1:ac:6e:8d:
         01:9a:17:fb:de:15:34:aa:c3:7c:67:17:46:af:db:fb:21:d5:
         00:a4:fd:bf:aa:c3:fd:0e:4f:19:2b:6a:e6:3b:e4:d8:83:a6:
         06:ce:0d:1e:be:b9:fb:e8:45:51:4c:33:09:15:6a:7b:b2:2e:
         8e:5e:79:97:e8:c2:f5:f8:2e:a8:ba:66:d4:e1:e4:83:88:c1:
         06:15:8c:d2:20:78:f7:ba:bd:d9:3f:60:4e:59:ab:7e:bb:0f:
         71:12:27:27:59:db:0d:a3:8f:fa:30:1d:22:5e:26:63:b5:a5:
         40:b3:f3:a5:98:05:b1:b7:b7:99:55:1d:e7:a2:57:e3:02:21:
         4e:46:da:df:5a:ed:6a:9a:03:21:df:ac:9e:73:8c:34:c9:4d:
         74:7d:9b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:29 2026 by rpki-client