Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/db6c28c7-3310-3a30-a759-80e2eb7282e0.roa
File:                     db6c28c7-3310-3a30-a759-80e2eb7282e0.roa (raw, json)
Hash identifier:          fviiMBQ7o+eT/dy4XEfdDN7hH2k7QifKXqsTY1HhL2U=
Subject key identifier:   D0:67:5B:71:39:EC:F7:C5:9C:5A:E6:95:36:71:9A:89:2E:58:7A:87
Certificate issuer:       /CN=d184e471-080a-4e54-bf94-60dd0c8beb48
Certificate serial:       010D0C9F4328584D037D05F6010ABA54D9A8D700
Authority key identifier: 82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/db6c28c7-3310-3a30-a759-80e2eb7282e0.roa
Signing time:             Sat 28 Feb 2026 14:00:40 +0000
ROA not before:           Sat 28 Feb 2026 14:00:40 +0000
ROA not after:            Fri 29 May 2026 13:00:40 +0000
asID:                     22926
IP address blocks:        67.43.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:03:7d:05:f6:01:0a:ba:54:d9:a8:d7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d184e471-080a-4e54-bf94-60dd0c8beb48
        Validity
            Not Before: Feb 28 14:00:40 2026 GMT
            Not After : May 29 13:00:40 2026 GMT
        Subject: CN=206cadf8-0805-4bce-8dd1-d1155bb6bae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:be:d6:1c:39:91:f8:74:a2:4c:7e:84:f9:cc:
                    3a:39:2c:28:b1:7d:a6:c6:c9:71:0c:51:bc:5b:40:
                    87:a7:bd:00:94:e1:42:5a:3c:f4:35:bd:88:84:71:
                    eb:87:78:11:fc:b2:d3:e2:14:06:b4:3b:13:e1:7e:
                    c9:35:60:7a:71:9c:ae:5c:c1:0b:06:80:7e:f5:1b:
                    c1:b5:ed:0f:0a:ca:f0:5d:2e:62:02:05:c4:cb:4d:
                    43:7f:71:04:81:ef:ac:d0:33:f5:1f:81:60:6e:7c:
                    88:b8:8a:4a:57:9b:8d:7c:16:b2:d8:00:a6:b0:cb:
                    2d:ac:eb:ec:5b:15:ee:98:fd:a5:0c:42:54:18:d8:
                    51:6d:1d:84:82:2a:13:e3:a8:2d:a1:32:7d:d1:ed:
                    2a:07:fa:e3:4b:49:f3:ca:41:76:9e:aa:19:53:d5:
                    40:1e:61:b8:6f:0e:96:ee:eb:64:7b:97:7d:a2:19:
                    85:b3:2e:a6:54:42:5f:a1:d9:ae:72:59:91:af:82:
                    df:2b:fc:b8:a2:5f:df:4a:23:09:87:63:e4:6b:cd:
                    58:03:3f:17:bc:6b:94:17:75:43:c1:bd:47:36:4b:
                    3a:ec:3d:9b:0f:1a:f2:4a:6c:db:18:7c:ed:37:36:
                    98:a9:d5:c8:fe:3d:79:9a:fd:34:b6:51:d0:10:12:
                    64:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:67:5B:71:39:EC:F7:C5:9C:5A:E6:95:36:71:9A:89:2E:58:7A:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/db6c28c7-3310-3a30-a759-80e2eb7282e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48/d184e471-080a-4e54-bf94-60dd0c8beb48.crl

            X509v3 Authority Key Identifier:
                keyid:82:2A:C6:5F:05:77:96:D6:12:FB:24:86:E6:72:C6:12:A5:B6:41:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d184e471-080a-4e54-bf94-60dd0c8beb48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.43.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:95:77:f7:ad:1e:40:b3:a4:2f:da:36:d6:3e:5f:2b:c8:15:
         13:b8:df:70:ef:64:43:7d:05:bb:bd:3a:19:0c:20:44:fb:89:
         40:2e:24:44:37:3b:48:7d:98:dd:15:0f:64:16:f7:67:95:ff:
         b4:20:05:6b:0d:99:cd:16:1c:05:a1:06:fe:c3:b0:1f:a1:e2:
         c9:97:16:08:19:74:b2:d4:11:a3:11:8c:d0:c8:1b:0a:89:b7:
         20:d6:eb:b2:3d:97:05:84:66:ae:69:2b:8c:5d:62:67:06:78:
         60:a6:40:98:2d:34:45:57:38:16:2f:53:cb:7b:c0:68:dc:0d:
         b0:a4:4d:cf:a9:b5:3e:54:10:db:97:22:f9:4f:29:9e:07:70:
         2f:92:ac:f5:e8:e6:18:95:96:db:95:ce:57:2c:c3:ba:23:b4:
         35:d2:7c:57:92:ee:a3:53:73:1d:4d:ef:ad:e8:36:fe:17:07:
         e6:6c:3f:cc:0c:b1:a9:95:17:59:12:70:0e:09:a7:7e:cf:f7:
         37:77:bb:aa:fd:2f:68:85:8e:6b:36:7c:c5:48:95:f8:98:34:
         32:a1:95:87:96:30:1f:2e:d3:62:59:ab:39:42:db:f8:d8:2e:
         63:77:dd:5f:d7:9e:90:53:a9:b7:b7:b3:73:60:64:44:3a:e9:
         77:f1:6a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:14:35 2026 by rpki-client