Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d89092f4-8a71-3cc5-8c2b-4fa24708e663.roa
File:                     d89092f4-8a71-3cc5-8c2b-4fa24708e663.roa (raw, json)
Hash identifier:          0XKCb7djRKn2xkMAQaFWAkjxaB66v+OtnQvEI3VC3ys=
Subject key identifier:   C0:89:D1:9A:CA:16:E0:35:6E:6F:BA:33:44:8B:1C:52:C4:4E:9E:F9
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584DE1509A3D1534A25A20C7DC80
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d89092f4-8a71-3cc5-8c2b-4fa24708e663.roa
Signing time:             Tue 19 May 2026 01:00:24 +0000
ROA not before:           Tue 19 May 2026 01:00:24 +0000
ROA not after:            Mon 17 Aug 2026 01:00:24 +0000
asID:                     0
IP address blocks:        67.150.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:e1:50:9a:3d:15:34:a2:5a:20:c7:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May 19 01:00:24 2026 GMT
            Not After : Aug 17 01:00:24 2026 GMT
        Subject: CN=16175f79-6f68-4e45-9432-cee85bf0db43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cd:0d:b5:82:d0:42:31:0a:26:86:ef:db:55:
                    86:99:bf:60:2d:a0:48:10:1e:eb:a1:ff:23:b3:05:
                    e8:8f:17:c6:21:58:e3:22:0c:cb:cb:a9:36:4f:86:
                    6f:9e:2e:bd:d2:02:ad:e1:10:f0:cc:5a:5a:8f:a8:
                    83:f3:7d:94:ef:66:6d:c7:b1:e7:6f:c9:0e:0f:1f:
                    1d:fa:92:5c:c8:bb:2d:71:33:15:78:2e:48:f6:9e:
                    61:d7:7f:23:a7:ff:e4:e3:70:40:83:cd:4d:ea:3f:
                    1d:c5:27:fa:09:1b:da:44:15:27:50:7e:ac:40:26:
                    4f:c4:83:75:79:d4:95:df:f3:6f:17:af:4c:fd:56:
                    cd:3e:9d:ae:55:2c:a9:ab:d5:11:f5:2f:bb:d8:f1:
                    c7:d1:0b:e6:84:ab:97:2c:29:61:30:2c:d0:52:72:
                    b4:bf:dd:98:ea:54:26:0e:a9:fe:16:14:63:e3:7f:
                    3b:a5:41:4c:c6:c1:71:92:9e:6c:d7:46:67:39:fa:
                    7d:5b:bd:9c:e0:e6:9f:8a:77:59:b7:c1:3b:df:a1:
                    6b:36:45:9d:20:67:b8:b5:ad:6e:10:22:6f:ed:4d:
                    6c:ff:57:31:2b:62:88:b9:7b:88:54:0d:6e:b1:b0:
                    38:f7:45:5a:dc:55:37:4d:76:85:c5:35:5f:07:27:
                    76:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:89:D1:9A:CA:16:E0:35:6E:6F:BA:33:44:8B:1C:52:C4:4E:9E:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/d89092f4-8a71-3cc5-8c2b-4fa24708e663.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.150.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:18:7b:cf:bb:97:e0:f2:eb:34:32:fe:11:ed:26:c7:93:56:
         8f:50:65:c7:db:92:e2:1a:75:7a:94:7f:19:48:9c:96:ea:9f:
         84:1a:f7:5d:a2:17:b4:33:f6:1c:e5:55:99:e8:4c:1d:b8:bf:
         3d:ce:81:27:4d:55:c1:be:18:62:7c:25:0d:2c:98:bb:21:96:
         cf:99:fd:15:84:bc:57:e1:7a:55:d8:47:a2:17:3b:c7:8a:e5:
         16:f4:13:56:ef:04:cc:26:44:de:0f:2c:b5:7a:36:db:44:18:
         f3:29:4f:44:50:d3:77:fe:b8:7f:50:36:e0:26:1f:e6:1f:2b:
         26:f3:a9:fa:8b:a9:9a:81:32:3e:00:fe:ab:38:cb:51:9d:2e:
         39:d4:bc:55:d2:b6:45:b0:64:49:e8:7e:f8:cf:4a:f7:8f:13:
         c7:41:a0:71:e5:60:5d:72:15:49:28:55:7c:0f:a3:a0:0b:ce:
         ec:4d:e6:7c:5c:a7:3b:b5:a5:b6:26:98:5a:08:91:07:45:51:
         69:9b:c2:91:ed:5e:03:db:73:ca:6e:d0:6a:87:21:fb:c7:f9:
         db:bf:ca:5c:36:6c:c6:c7:5a:44:fd:85:e1:c6:65:2f:2e:fc:
         fb:35:55:ae:c4:36:77:18:93:1f:f8:57:6e:8e:83:e0:9c:c9:
         3d:48:93:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:05:48 2026 by rpki-client