Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/022d8988-9d2b-32ce-97c6-f993375ebefa.roa
File:                     022d8988-9d2b-32ce-97c6-f993375ebefa.roa (raw, json)
Hash identifier:          4OL8X/h6zELmdYXrrzL9IuYk7HCdK+CVmtQnCIf6Hog=
Subject key identifier:   52:49:36:20:B9:47:AD:CC:0B:F7:43:A8:EA:E6:56:69:4F:5E:BA:3E
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584D7A051CC35A52C7B55DEB8C00
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/022d8988-9d2b-32ce-97c6-f993375ebefa.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     398233
IP address blocks:        67.214.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:1c:c3:5a:52:c7:b5:5d:eb:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=1bad0904-8b87-48ca-a072-3c914a07d388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:25:db:55:1e:3c:76:94:1a:94:7f:ac:12:fe:
                    c9:35:8e:d0:13:a9:58:20:83:e4:96:56:1a:88:b1:
                    9d:06:f0:78:a0:7a:ef:52:47:e9:e1:37:7a:57:ca:
                    5e:1a:5b:35:be:02:f2:c4:d6:25:6a:45:c7:a0:06:
                    85:b2:23:05:b6:82:f9:30:be:a8:88:ac:4f:d4:90:
                    01:12:31:ed:eb:d7:13:31:30:1b:56:5e:1a:a7:d3:
                    d1:fb:35:2a:77:69:ba:3d:8f:50:3f:70:26:46:b9:
                    de:c9:ed:0e:e8:4e:6b:09:83:8d:be:27:2c:ed:72:
                    a3:15:1a:c8:45:98:54:a8:e9:04:07:2b:dd:68:9d:
                    23:ed:98:ae:4f:48:b8:d1:26:b7:69:f5:b0:30:7b:
                    26:90:3d:2e:5c:62:0f:06:d5:1f:a3:dc:d9:b2:c2:
                    aa:1c:29:7c:3a:e9:96:4b:72:e5:66:f7:12:8d:af:
                    1e:0e:9e:6b:80:ce:7e:b0:35:a1:bb:f9:7b:b4:b8:
                    b2:bf:21:a3:b6:56:51:80:4c:23:33:42:b5:d2:6d:
                    67:54:7c:6b:a8:11:0b:7d:99:c3:15:ca:34:69:4b:
                    f2:d1:02:1f:f2:c1:94:56:a6:04:a1:6c:e9:d5:5c:
                    ac:87:19:b7:3f:ac:db:e2:2b:7b:a9:2a:89:70:b7:
                    ae:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:49:36:20:B9:47:AD:CC:0B:F7:43:A8:EA:E6:56:69:4F:5E:BA:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/022d8988-9d2b-32ce-97c6-f993375ebefa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:46:d7:31:4f:93:d6:64:bc:f2:b0:30:af:69:88:21:f9:f3:
         08:ea:8f:19:82:82:61:77:cc:d1:6f:60:1f:8b:e9:01:9b:87:
         46:bd:e5:3d:19:d1:f9:36:cc:f5:ae:8f:99:99:d0:d1:b0:a1:
         69:65:12:bb:85:95:e4:67:f8:4b:d6:df:72:91:20:60:57:f4:
         e4:ef:53:2d:12:9b:d3:0c:ac:42:9d:c1:47:db:ea:77:05:ff:
         df:e7:3b:62:41:30:f0:98:4b:a1:0c:80:9b:60:bf:7a:11:72:
         6c:f3:05:f3:01:57:3c:cc:cf:32:3b:db:00:3a:50:f5:72:18:
         80:56:34:b7:cc:00:83:74:12:63:c6:70:58:18:bb:27:ba:a2:
         1a:77:55:7a:74:1f:9a:e6:5a:42:38:1f:f9:03:42:4d:a2:f0:
         1f:24:5b:65:1c:f5:82:15:88:df:64:b0:06:3c:3d:dc:88:f1:
         a4:64:5e:46:b0:5f:66:92:c9:26:f9:3a:f4:0e:bc:d8:49:98:
         89:a2:8d:c1:92:b2:4a:f4:82:57:ef:96:27:a8:ed:aa:52:86:
         81:5b:87:df:38:8f:9e:b0:82:c7:0f:2d:14:91:2d:ca:13:e1:
         45:c3:85:f0:c2:0f:9a:95:7e:bd:c9:be:f4:dc:1c:b5:8d:ec:
         c7:b3:bd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:28:27 2026 by rpki-client