Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/85eb037c-acf7-3afd-a1ef-ef574abaec30.roa
File:                     85eb037c-acf7-3afd-a1ef-ef574abaec30.roa (raw, json)
Hash identifier:          +U17ajSTcnzLYGOlyWl2a8WyI68hh54NK6C1voTHPRU=
Subject key identifier:   89:C8:80:63:F7:1F:CD:51:44:68:45:0F:00:6E:EC:99:38:82:36:F0
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584F2EED1B09EE0144CC5D6732C0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/85eb037c-acf7-3afd-a1ef-ef574abaec30.roa
Signing time:             Tue 15 Sep 2026 13:00:12 +0000
ROA not before:           Tue 15 Sep 2026 13:00:12 +0000
ROA not after:            Mon 14 Dec 2026 14:00:12 +0000
asID:                     19446
IP address blocks:        67.227.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:2e:ed:1b:09:ee:01:44:cc:5d:67:32:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Sep 15 13:00:12 2026 GMT
            Not After : Dec 14 14:00:12 2026 GMT
        Subject: CN=f46bf9cb-7469-4f70-9bb4-7720b5b1c72e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:01:b4:c0:8c:45:03:8a:e9:84:ac:aa:99:9c:
                    f7:14:6a:b0:d9:6d:d7:29:9f:dd:6e:fd:ed:1b:dc:
                    90:98:cf:58:20:25:0e:c2:dc:c5:4a:c3:4b:cf:d9:
                    ce:c2:90:db:17:ed:7c:b7:c3:8c:ed:60:0b:10:80:
                    d8:20:f1:ba:d6:5c:b5:ca:58:fb:8c:97:30:e8:11:
                    8b:da:ca:bb:a8:45:00:4b:b9:4f:15:6b:85:06:de:
                    cd:7e:ae:0b:c9:f1:11:87:49:93:0b:af:e0:6a:f4:
                    c4:d5:d5:3b:d1:c4:c7:d0:f0:a8:e5:e7:cc:c8:78:
                    7c:0b:d6:3e:7e:60:56:f7:6d:96:7e:15:54:20:ed:
                    06:7f:bc:85:de:9d:bd:70:f5:cc:01:53:c7:b0:b7:
                    56:e3:ae:08:47:6e:63:41:01:be:f8:48:61:c3:17:
                    c5:e1:8d:fa:e7:e4:d2:36:d8:2b:21:0f:b9:89:64:
                    9b:14:ba:d7:50:b9:fa:01:08:13:a1:14:44:b4:a9:
                    ce:f2:2f:5e:38:82:76:27:e4:84:bc:2e:33:40:63:
                    fa:5e:51:67:26:1d:41:bd:53:b0:72:63:71:1e:6a:
                    c9:68:2e:7d:d0:9f:d2:d3:80:d4:93:b9:f6:b3:1b:
                    8e:4e:b9:e3:36:9c:d8:f7:dd:58:e5:35:c7:f7:10:
                    2d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C8:80:63:F7:1F:CD:51:44:68:45:0F:00:6E:EC:99:38:82:36:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/85eb037c-acf7-3afd-a1ef-ef574abaec30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.227.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a4:8e:89:1c:21:75:06:e8:40:f2:4c:11:9b:ae:3f:0c:23:
         38:f9:b7:74:0a:f6:83:1f:73:5a:95:5d:dc:74:48:08:92:6b:
         12:71:c9:51:1f:11:72:52:15:8b:44:c8:a7:20:a2:ba:5b:44:
         c2:a1:98:de:a3:c9:75:cc:bb:19:bb:6f:17:c8:68:92:fc:23:
         a2:3c:f3:0f:82:27:40:0a:62:c0:70:f5:a9:f0:18:d7:6c:ae:
         0a:57:f2:77:77:47:91:1b:ab:37:97:63:d0:45:5b:63:39:57:
         82:75:29:28:a4:56:ec:b1:78:ae:7c:ac:21:d7:66:85:12:8b:
         62:03:88:ec:a0:db:29:40:c0:73:34:56:a0:55:6a:ee:0e:18:
         86:8b:3c:15:82:96:2e:f1:37:a7:f4:8a:76:b5:77:3c:ec:9b:
         a1:6e:2b:aa:5c:8f:ae:55:5f:7f:bb:6e:bb:df:ba:b1:6e:d0:
         2f:0a:0e:65:c4:54:4e:c4:88:89:38:21:00:f0:7b:92:21:4e:
         b5:f7:32:3f:44:27:be:49:ef:a4:4c:63:08:58:3b:34:b3:c2:
         09:41:98:3f:a3:98:74:a8:1a:2f:cd:53:cf:e0:d9:86:e3:46:
         a5:e6:06:df:6e:8f:18:78:c8:a9:17:75:64:1e:93:25:43:ea:
         93:c4:8a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:52:53 2026 by rpki-client