Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/04ca4493-92f5-337d-b186-db2cfa6ac49b.roa
File:                     04ca4493-92f5-337d-b186-db2cfa6ac49b.roa (raw, json)
Hash identifier:          K8XI9OR0Z0qrJJBS4scWfw/i6BFR/nJBIg4FGAmiB9E=
Subject key identifier:   02:D6:9A:55:A7:13:94:23:65:98:B7:FD:1F:C6:EE:76:55:43:AD:CD
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584E18AEEDB53DCFD433387B6E00
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/04ca4493-92f5-337d-b186-db2cfa6ac49b.roa
Signing time:             Sun 07 Jun 2026 21:00:12 +0000
ROA not before:           Sun 07 Jun 2026 21:00:12 +0000
ROA not after:            Sat 05 Sep 2026 21:00:12 +0000
asID:                     397422
IP address blocks:        67.210.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:18:ae:ed:b5:3d:cf:d4:33:38:7b:6e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Jun  7 21:00:12 2026 GMT
            Not After : Sep  5 21:00:12 2026 GMT
        Subject: CN=223515d4-5225-4eef-b481-1b4ae3acb548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:60:4d:c9:75:a6:5a:0a:b8:43:ab:1e:26:63:
                    fa:72:9d:d1:c6:e2:54:d1:53:11:08:97:39:83:c3:
                    7c:f8:12:a8:bd:15:b1:49:d1:fd:e7:1e:18:4d:8d:
                    2c:d7:aa:93:83:81:43:51:41:e3:57:9b:4b:4e:db:
                    7c:33:19:f2:ac:32:46:74:76:ba:d1:49:e2:65:79:
                    7f:86:5a:cd:2c:95:d7:6d:fe:77:cb:58:41:75:74:
                    fc:8a:24:9d:e4:98:46:7a:63:d2:65:6a:c2:bc:39:
                    55:a2:07:6d:1c:36:2d:49:09:c0:89:bf:3b:b3:40:
                    7b:37:bf:a1:cc:0a:c3:04:ef:6d:ff:0e:ce:99:e5:
                    b0:01:cc:1e:43:97:6c:ba:92:fc:71:61:f4:b6:c5:
                    a3:70:65:5b:84:47:d4:98:f1:fe:4b:44:dc:df:ab:
                    3f:8a:b3:ce:b9:0e:b2:d0:0f:6a:84:b2:8e:f3:a7:
                    fe:7f:70:03:3a:aa:b5:a0:94:19:c0:df:27:91:11:
                    33:9e:d1:63:e2:38:17:4e:49:e2:95:29:01:4f:88:
                    14:f4:79:fb:50:af:3a:f8:86:cd:9a:92:71:2f:a4:
                    97:9b:62:d8:45:b9:9b:ba:e2:88:19:54:67:01:88:
                    31:21:37:0c:13:4e:8a:7e:68:9d:59:3e:cf:3e:b8:
                    47:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D6:9A:55:A7:13:94:23:65:98:B7:FD:1F:C6:EE:76:55:43:AD:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/04ca4493-92f5-337d-b186-db2cfa6ac49b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:4f:54:40:d8:94:4f:75:c9:fc:bb:0b:37:bf:4e:86:29:fa:
         5e:86:7a:c1:1e:6b:ab:7c:21:e4:f3:31:e1:1b:fe:ca:81:1b:
         63:3f:1e:f3:94:99:2e:87:21:87:9b:51:f6:a4:df:e6:1a:97:
         bb:d0:41:a6:fe:8a:ad:4e:3d:55:6f:e6:50:7f:d0:df:7e:af:
         fd:36:dd:b7:37:66:4a:f5:23:fb:2f:dc:5c:f4:34:aa:46:53:
         a8:f5:4a:16:4b:72:43:2f:d0:98:57:c4:67:13:48:38:e5:8d:
         8f:24:36:2d:78:60:22:49:da:51:4a:df:26:b4:02:c4:50:c4:
         19:7f:39:16:92:cb:f9:53:bb:be:5e:bb:25:88:8e:3b:ed:58:
         5a:f9:b1:01:11:3f:71:cb:f6:37:4e:aa:8b:24:12:2d:49:a9:
         ab:bf:59:bd:79:40:56:cc:da:33:65:d3:42:1e:22:61:33:63:
         b7:c5:8b:28:c0:3f:41:9d:80:f4:80:c3:ad:f7:ba:89:e8:3d:
         4a:57:01:6a:72:aa:2b:4c:dd:fb:52:1a:1d:c6:43:56:05:62:
         9d:39:1a:1f:48:b9:44:de:ac:0f:6e:bc:97:4c:6e:1b:1b:39:
         e1:00:1d:b6:07:48:6c:e1:0c:80:64:b9:76:94:bb:5f:3c:1b:
         48:cc:db:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:13:14 2026 by rpki-client