Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4327bb41-20b7-39c4-9c16-27a7688c5659.roa
File:                     4327bb41-20b7-39c4-9c16-27a7688c5659.roa (raw, json)
Hash identifier:          meuqeusD5QghYIV5mQIZRs75Tbvdvx6zGcqpCc3jtxE=
Subject key identifier:   FB:D5:E1:C9:64:C7:77:CB:3D:DC:B9:E3:76:F6:6A:F8:A7:C0:4E:AA
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F4328584EA7934424144998C94998FAF0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4327bb41-20b7-39c4-9c16-27a7688c5659.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     31898
IP address blocks:        67.217.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:93:44:24:14:49:98:c9:49:98:fa:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=c86798f3-6829-4ebd-a6ca-43bf260ac650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:61:79:81:a8:db:54:ff:94:60:5d:b0:6a:05:
                    2f:7c:86:59:94:ad:dc:3e:ff:12:7a:3b:08:c0:07:
                    cd:cb:a1:6b:bc:b6:39:3f:87:40:1a:10:31:07:54:
                    e0:68:c2:a2:cd:be:08:53:7c:e9:47:3a:57:ab:ae:
                    cc:13:a1:cb:7b:2d:fc:d4:23:6a:47:cc:41:2e:97:
                    64:46:2b:5d:8a:25:87:6c:7a:37:3f:33:9d:13:21:
                    89:6c:7d:9f:e2:9e:5f:e1:a0:eb:7e:ad:8d:ce:88:
                    84:f9:98:e1:6b:94:15:20:95:82:0f:f9:98:66:f0:
                    de:bd:d0:e2:d9:e2:3f:50:b3:d9:22:51:44:b1:66:
                    b5:62:c8:b0:a3:49:ae:87:ce:23:a5:1f:d6:1d:98:
                    f7:14:22:6f:11:bd:eb:8b:8b:a0:52:0e:2a:91:f5:
                    75:dc:f4:20:b3:17:1b:b7:14:81:cc:b9:ad:11:09:
                    53:73:e2:76:53:c7:cf:4a:75:5b:70:e5:c6:fb:31:
                    b5:d9:41:b8:a4:aa:d7:ac:30:ed:8a:a9:42:1e:c0:
                    cf:ea:db:59:78:48:02:ac:e3:a1:dd:4f:1f:15:c5:
                    69:36:d5:20:1b:40:41:95:da:bc:00:d1:8a:4a:e5:
                    9e:42:d7:0e:a8:32:eb:c2:dc:ac:3b:66:a7:50:0c:
                    73:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D5:E1:C9:64:C7:77:CB:3D:DC:B9:E3:76:F6:6A:F8:A7:C0:4E:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4327bb41-20b7-39c4-9c16-27a7688c5659.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.217.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:60:3d:12:00:70:95:56:96:45:64:25:01:fb:db:1f:07:c8:
         02:b1:73:31:34:ac:e9:7d:ca:5f:1f:8f:5b:5a:fc:09:6f:75:
         02:9e:07:96:8b:a3:c9:0e:61:87:37:9e:0b:2f:bf:6d:bb:2f:
         2d:74:cf:61:23:03:90:c9:34:2a:c1:d5:d2:a0:91:36:56:d5:
         61:60:f3:1e:05:3e:9f:de:cb:40:f0:80:ab:b3:ed:af:84:d6:
         dd:c3:dc:66:26:6a:43:d5:3f:d4:d7:1f:65:00:de:57:d4:8d:
         49:e0:29:d3:d9:e9:a4:2f:4b:a8:15:e0:2f:fb:48:09:e6:4b:
         89:43:e9:0d:3b:eb:49:e3:91:f2:db:4c:46:cf:ec:d6:ac:d3:
         1f:83:30:3e:5b:b1:77:10:d1:4c:90:e5:ab:14:5a:a2:d4:3b:
         dd:11:31:52:ed:fa:de:77:cf:c1:3b:24:80:5d:fa:4d:83:09:
         fd:26:38:71:77:03:55:4c:69:de:bb:50:63:c8:3d:a7:4e:9c:
         59:a1:5a:aa:21:e9:1f:c9:30:17:48:03:62:2e:0c:62:ea:a2:
         10:18:4c:9a:48:34:31:b7:42:4d:9d:af:ff:17:80:b3:57:b3:
         1f:aa:fd:e5:6e:5c:2c:83:aa:7b:25:5d:2b:d5:9c:a3:53:5a:
         c1:d6:56:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:16:07 2026 by rpki-client