Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/d9d3f8e3-fade-31f9-86bd-03df3c9769bc.roa
File:                     d9d3f8e3-fade-31f9-86bd-03df3c9769bc.roa (raw, json)
Hash identifier:          mrDJdmsKuftAX3WfIeOQabUyblVBgSXNBtyT5xsnZhA=
Subject key identifier:   0F:5F:B8:58:EB:69:FF:BE:60:09:FB:92:95:12:82:23:B7:35:22:24
Certificate issuer:       /CN=41810617-fa0e-48cc-badf-1b017add1f3e
Certificate serial:       010D0C9F4328584CEA5CE8347D839B625CFA37C0
Authority key identifier: 7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/d9d3f8e3-fade-31f9-86bd-03df3c9769bc.roa
Signing time:             Thu 19 Feb 2026 14:00:40 +0000
ROA not before:           Thu 19 Feb 2026 14:00:40 +0000
ROA not after:            Wed 20 May 2026 13:00:40 +0000
asID:                     23471
IP address blocks:        67.219.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ea:5c:e8:34:7d:83:9b:62:5c:fa:37:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41810617-fa0e-48cc-badf-1b017add1f3e
        Validity
            Not Before: Feb 19 14:00:40 2026 GMT
            Not After : May 20 13:00:40 2026 GMT
        Subject: CN=3ca7cb29-32dc-4cee-9732-1218123f5ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:60:94:62:25:45:ac:fd:8e:6f:e2:a3:01:00:
                    ce:78:1d:c5:a0:cb:af:fd:0c:e9:c2:2b:02:6d:48:
                    e4:1d:c2:d2:c8:4a:20:b2:9d:7c:a6:83:a5:cd:a1:
                    d1:ff:d6:4a:18:c7:eb:b2:4d:99:27:cf:3b:55:6f:
                    a8:1f:97:91:2a:c9:ad:60:b2:0f:22:ea:b8:3b:df:
                    2b:fc:11:29:00:d4:ed:99:9d:63:a4:5a:6c:e7:33:
                    3b:b4:38:28:14:b8:84:05:4d:00:8e:3a:b2:f6:ef:
                    c8:6e:cb:0e:94:10:3c:90:c4:ac:8f:46:23:dd:15:
                    4c:a8:9e:f1:60:8d:4f:af:ac:cd:98:79:b7:cb:a0:
                    65:6e:e4:d1:8a:77:4b:7f:66:5c:c9:20:75:eb:58:
                    05:53:b6:99:0e:be:22:cb:79:a8:e1:ee:46:9f:39:
                    50:77:18:f0:ec:fa:e4:2c:a1:b4:e2:fb:93:3d:7e:
                    58:bf:19:ba:2e:1f:be:6e:3f:cd:1a:2a:c6:ac:ec:
                    1c:04:f7:ce:96:a9:77:f6:99:06:48:8a:a3:78:d4:
                    e7:fc:99:9d:6f:91:c0:30:c0:84:39:da:c0:45:b0:
                    9b:31:06:f1:64:fd:0d:44:23:75:0e:bf:16:9b:dd:
                    57:70:f7:24:a3:24:e9:20:9d:76:5c:b6:8f:1f:cd:
                    bc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5F:B8:58:EB:69:FF:BE:60:09:FB:92:95:12:82:23:B7:35:22:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/d9d3f8e3-fade-31f9-86bd-03df3c9769bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e/41810617-fa0e-48cc-badf-1b017add1f3e.crl

            X509v3 Authority Key Identifier:
                keyid:7A:26:81:C9:09:F1:CC:38:B7:DF:FE:A1:D0:20:6D:4D:0A:BC:F8:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/41810617-fa0e-48cc-badf-1b017add1f3e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e0:a4:22:2c:85:67:12:7e:e4:af:87:54:e6:f5:75:b5:00:20:
         18:c1:94:85:54:3b:3b:99:d2:e1:aa:62:eb:20:de:ea:a8:da:
         46:af:7b:40:a9:dc:51:4b:af:51:9d:93:9f:5d:52:f0:6b:13:
         72:e5:24:8f:78:27:75:07:e3:45:71:a5:0c:aa:d6:6f:41:b1:
         3c:37:7d:d7:90:67:3e:83:ce:b6:ad:c8:7c:36:88:de:c9:01:
         0c:69:79:41:48:e6:b9:06:ca:80:e0:06:92:15:0f:4e:6f:12:
         b0:91:d5:e6:e3:e5:76:12:0e:a6:6f:9e:38:94:0d:93:d1:1f:
         47:64:21:b8:7c:e5:f8:8f:54:38:c6:65:6d:00:0a:5b:47:f9:
         03:87:77:7b:f5:83:2d:45:2e:1b:93:aa:e8:16:f7:83:5b:0d:
         7b:e2:e5:68:c6:e2:28:75:64:0b:cf:6a:c2:ce:5e:d1:ff:c4:
         e8:f2:a2:e5:ce:6d:43:6a:1a:93:0d:3b:ac:38:e9:b2:ae:91:
         de:b6:39:1d:25:8e:83:bd:3c:b8:9a:c4:5f:48:68:a4:28:5b:
         56:4e:df:fe:bf:6c:55:cb:47:33:44:1c:80:0c:5d:92:91:b8:
         df:97:cf:e0:df:95:43:69:b7:12:54:50:69:3d:de:07:3f:30:
         1b:d0:c6:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:27 2026 by rpki-client