Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/6105942a-8e10-3008-957f-e9a2aedabc91.roa
File:                     6105942a-8e10-3008-957f-e9a2aedabc91.roa (raw, json)
Hash identifier:          CvuOukpqVnHRpD5XaKWk+wqhpSaHLnvT+llUZPVFLt8=
Subject key identifier:   EC:22:6C:DF:1A:26:82:09:8B:D1:D0:83:A4:AF:DD:D2:3D:F8:0F:2B
Certificate issuer:       /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial:       010D0C9F4328584D75D5298227C572F7E8B81F40
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/6105942a-8e10-3008-957f-e9a2aedabc91.roa
Signing time:             Fri 10 Apr 2026 13:00:31 +0000
ROA not before:           Fri 10 Apr 2026 13:00:31 +0000
ROA not after:            Thu 09 Jul 2026 13:00:31 +0000
asID:                     8038
IP address blocks:        67.221.252.0/24 maxlen: 24
                          67.221.253.0/24 maxlen: 24
                          67.221.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:75:d5:29:82:27:c5:72:f7:e8:b8:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
        Validity
            Not Before: Apr 10 13:00:31 2026 GMT
            Not After : Jul  9 13:00:31 2026 GMT
        Subject: CN=d64841a1-7839-4e7e-b977-137f99bf87fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fa:5a:93:3b:39:0a:01:3f:fb:bb:50:cc:f0:
                    c2:03:29:17:86:04:75:66:e5:f2:c5:a7:1d:60:5b:
                    fa:0b:07:50:74:7f:90:9f:6b:e8:b8:4e:e6:66:52:
                    d0:0a:02:8a:5f:42:52:91:5d:b0:59:6f:d6:c5:0d:
                    31:31:3c:99:6e:51:9f:e0:0a:40:4c:47:d0:c3:81:
                    a5:0d:bf:95:2a:ad:31:20:de:85:61:36:cd:95:b0:
                    52:b9:f3:c7:50:b6:ac:c1:d6:fa:f5:c8:f0:c8:22:
                    0b:43:0d:86:da:21:ae:54:e3:95:b6:3c:ef:0d:fb:
                    c1:ad:74:94:83:ad:67:6a:5d:a5:47:fa:93:af:c6:
                    a7:93:2d:0c:f6:74:83:61:5a:06:b4:34:0a:92:93:
                    42:d6:d6:22:10:dc:6c:cc:c2:4b:7b:5b:ef:95:b3:
                    54:67:74:e8:f0:7b:4a:c7:3e:70:c8:c8:32:f9:53:
                    7e:b2:47:7b:55:82:97:eb:5a:d8:8b:23:1b:91:1c:
                    38:70:7b:de:c3:51:f0:0b:d2:63:af:b9:15:ee:6f:
                    9b:e2:a1:35:85:37:20:9c:75:0b:80:50:05:84:18:
                    45:60:31:e0:3f:67:4a:51:fa:d5:85:e6:da:e7:fe:
                    80:17:6e:2c:5a:76:e5:c1:89:b6:98:a5:4b:b7:2a:
                    26:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:22:6C:DF:1A:26:82:09:8B:D1:D0:83:A4:AF:DD:D2:3D:F8:0F:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/6105942a-8e10-3008-957f-e9a2aedabc91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.252.0/23
                  67.221.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:09:75:7e:72:46:34:88:a7:24:5d:1d:6e:ea:8e:45:02:22:
         a0:73:68:f0:6a:cf:ea:a4:04:64:f9:9d:c7:33:3b:b1:90:df:
         33:69:71:a3:0b:8b:a8:e5:90:9b:e0:fa:6d:4a:a9:05:87:aa:
         83:08:34:df:ca:8d:27:fe:95:79:d7:3c:de:36:3c:4e:bd:8d:
         87:cf:ef:58:2e:4c:eb:de:1f:9f:ff:69:d0:87:72:7e:7d:d8:
         86:5d:a2:a0:e0:1f:6f:c2:95:0d:ac:7c:3b:34:88:1a:da:97:
         42:a5:f6:0f:60:ec:54:9f:7e:34:35:c8:43:46:fb:93:f6:29:
         e0:68:9a:17:e0:f6:91:cc:42:cb:bd:85:3c:e2:54:af:92:f2:
         be:65:45:d4:41:04:81:63:3d:fb:9b:8c:3e:52:4f:0a:ce:71:
         46:92:50:73:2a:05:35:03:3b:9a:9b:00:2d:75:ba:a7:50:a0:
         27:ba:7a:6e:80:9c:a6:a5:07:4c:9e:73:d1:e6:80:e6:08:1c:
         0d:d1:ef:97:32:c9:4f:57:db:dd:cb:1e:d4:2b:27:46:6e:b4:
         b0:89:d1:18:f0:b7:16:44:c2:91:5b:8b:ba:1a:f9:14:b9:f8:
         61:75:70:f4:57:c3:22:33:8d:ce:10:62:db:3d:e0:1e:35:5a:
         85:fd:6c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:15 2026 by rpki-client