Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d60dbab-03ee-396a-9cc4-b0e924f218d9.roa
File:                     0d60dbab-03ee-396a-9cc4-b0e924f218d9.roa (raw, json)
Hash identifier:          lrBa2uzaT7beX2/3yC0SK2wUFZRcyiCvNA8AP66KgL0=
Subject key identifier:   60:99:18:48:02:7A:4B:41:D4:C5:A5:FA:E1:67:76:B3:C7:1F:40:15
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D81001751104B4DA8F0260200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d60dbab-03ee-396a-9cc4-b0e924f218d9.roa
Signing time:             Tue 14 Apr 2026 13:00:30 +0000
ROA not before:           Tue 14 Apr 2026 13:00:30 +0000
ROA not after:            Mon 13 Jul 2026 13:00:30 +0000
asID:                     7725
IP address blocks:        71.204.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:81:00:17:51:10:4b:4d:a8:f0:26:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 14 13:00:30 2026 GMT
            Not After : Jul 13 13:00:30 2026 GMT
        Subject: CN=ce9f162c-ad8e-4aca-869f-0693d8a19b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:18:ab:83:2e:57:e3:38:cd:7a:49:d1:5c:
                    90:f9:19:f1:4e:94:04:91:2c:b3:18:5d:b2:52:78:
                    73:1d:58:d3:a5:14:21:29:30:b8:26:42:b3:d7:1d:
                    4d:16:7a:16:a1:ed:36:1a:f9:e3:46:7b:aa:46:54:
                    8c:b6:c9:32:6c:51:56:f6:d1:4e:2b:fe:ab:b3:cf:
                    ba:b4:67:c7:7c:c6:9b:9b:85:0c:42:f4:eb:89:9a:
                    4d:4c:39:30:d7:18:b2:fb:ef:af:e1:ee:3d:df:a0:
                    2b:8a:fc:23:77:58:d9:b8:a3:32:a0:36:cd:73:f2:
                    3c:62:66:23:95:08:65:dd:8c:1a:db:ae:1b:b7:7e:
                    c1:d0:ac:f4:04:9f:41:6a:a5:1c:37:b9:7c:ea:76:
                    37:b4:89:78:b1:45:2b:8c:da:a5:7a:0c:be:2e:e5:
                    8d:3f:79:32:13:30:41:5d:a1:35:21:33:0a:86:c6:
                    f5:91:cf:91:6e:32:b9:f4:b5:15:99:3f:de:f6:fd:
                    d6:f0:70:f9:e4:37:6e:95:46:0e:68:00:ce:5d:62:
                    b5:1b:99:1a:0c:e7:4d:16:51:0d:87:4f:c0:8d:c7:
                    5c:22:d9:97:6e:61:bf:0f:fb:50:8d:0f:af:ee:8f:
                    b8:bf:f1:88:38:c8:a3:d4:70:9c:7b:2a:45:4b:81:
                    4b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:99:18:48:02:7A:4B:41:D4:C5:A5:FA:E1:67:76:B3:C7:1F:40:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0d60dbab-03ee-396a-9cc4-b0e924f218d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.204.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:94:f8:83:c5:c6:a6:e1:56:8b:6c:d7:ea:21:bd:e5:f5:25:
         00:39:a3:fe:5c:78:63:5e:01:6d:e2:96:e2:9d:0a:c0:1b:d6:
         77:13:4f:e4:0d:bb:61:a9:18:5e:a9:84:d5:7d:b2:3f:86:4f:
         1a:d9:ec:74:b0:78:21:a6:b4:c8:c0:3e:ca:25:ca:a9:67:68:
         94:53:b3:3e:c8:7f:c7:3a:c3:d1:15:76:e4:2e:c4:8d:25:1e:
         5d:32:b7:47:77:d9:83:35:47:0a:cc:dc:1a:b0:b4:0e:61:3a:
         13:9f:d3:6a:d9:a5:97:28:82:15:54:9c:f9:9b:4b:2b:83:92:
         3f:8f:0f:56:f5:0b:57:7f:93:33:55:f1:0c:2d:bd:b4:6c:18:
         aa:3f:b8:55:5e:73:30:0f:7b:07:96:17:16:94:0b:31:9a:53:
         47:d1:e4:2b:0e:52:f2:63:21:27:c6:2f:86:c5:6c:5e:69:1c:
         15:e6:db:42:af:05:23:9e:17:ff:58:f5:9b:72:72:5b:69:4c:
         93:25:c2:88:d0:cb:75:e5:4a:7f:54:42:ce:59:9d:d4:a3:6f:
         bd:f1:d7:61:ba:df:7c:a9:aa:e7:75:95:54:3b:8b:4f:f1:ce:
         73:78:f5:8e:68:13:07:ef:ac:23:96:7f:c6:04:2a:f9:db:14:
         8a:9b:66:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:28:39 2026 by rpki-client