Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60e432b4-1d15-36c5-b71c-747d043dc7ae.roa
File:                     60e432b4-1d15-36c5-b71c-747d043dc7ae.roa (raw, json)
Hash identifier:          9x4SMA9mm/d02ZFVyRiRvAlnnQRCotfvlnTwKp+P3KQ=
Subject key identifier:   13:2C:BA:61:86:EA:6C:BD:F0:34:82:70:46:8B:2D:89:C5:40:20:EC
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584D83CAB7A4E8475BB67ED8F380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60e432b4-1d15-36c5-b71c-747d043dc7ae.roa
Signing time:             Wed 15 Apr 2026 13:00:30 +0000
ROA not before:           Wed 15 Apr 2026 13:00:30 +0000
ROA not after:            Tue 14 Jul 2026 13:00:30 +0000
asID:                     33655
IP address blocks:        96.79.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:83:ca:b7:a4:e8:47:5b:b6:7e:d8:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 15 13:00:30 2026 GMT
            Not After : Jul 14 13:00:30 2026 GMT
        Subject: CN=2efc973a-7720-4bf4-9382-0b263a100f9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:14:d7:15:b3:9f:27:fb:69:c7:b1:4f:53:5b:
                    a8:95:4a:f5:a0:b8:0a:a9:9c:d4:87:50:6e:5b:a1:
                    b0:83:6f:ee:87:46:2a:22:6b:3f:db:87:96:5b:0f:
                    21:a0:32:f6:87:69:11:fa:e5:3f:4e:41:7a:92:83:
                    99:14:e6:51:2b:81:fd:a3:d4:d5:49:e9:9a:98:d2:
                    00:b8:8f:bf:f2:a6:51:02:27:28:15:c8:76:e7:e1:
                    07:a5:0e:0b:20:0d:ef:22:12:ef:e2:f5:a9:7a:66:
                    ad:58:6d:eb:6e:25:97:59:3d:8b:07:c4:23:4b:41:
                    3f:5a:2c:d0:2f:e8:37:6d:0f:74:2a:d9:28:29:de:
                    7c:ff:e7:68:fe:1f:e7:aa:03:4d:90:1e:66:d3:48:
                    41:85:97:86:9b:70:7d:11:8d:7e:d9:be:b5:57:d2:
                    a3:e3:4d:b5:e4:ae:c4:2e:52:8c:ff:a4:d3:da:86:
                    89:17:0c:97:ac:80:ca:f1:f1:27:2d:57:b9:1e:b1:
                    e5:aa:7b:ab:cd:cb:17:13:ba:b7:e8:47:d4:80:8f:
                    af:b3:8c:ce:46:66:41:61:65:ab:23:dc:bc:86:a0:
                    b8:d7:80:5b:08:8d:e1:65:f6:69:15:80:cd:0d:68:
                    e9:8d:74:92:ac:ee:4b:ad:7a:86:fc:24:e0:e9:0c:
                    06:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:2C:BA:61:86:EA:6C:BD:F0:34:82:70:46:8B:2D:89:C5:40:20:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60e432b4-1d15-36c5-b71c-747d043dc7ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.79.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:bc:b7:01:cb:d9:20:6b:fd:3d:f4:28:33:96:43:9d:7a:57:
         64:3e:51:6b:d7:6e:ae:58:e7:c8:48:ef:de:07:9e:e0:20:75:
         c5:03:a3:1a:a9:b0:99:f8:92:79:ad:d6:0d:f8:22:24:49:f4:
         76:92:0e:ed:07:57:6d:f6:d3:51:c9:29:11:7b:12:b7:c5:e4:
         ab:94:c3:9b:d7:21:eb:ae:97:86:b4:ae:94:f7:02:da:8d:72:
         3a:ae:18:c6:e5:b9:6b:42:a4:1f:51:3a:af:84:f8:4a:0f:60:
         88:d3:bf:9b:76:10:14:cc:2c:36:20:a5:a0:bf:92:b9:e2:19:
         e9:1f:70:c0:f0:0b:ac:08:38:69:8a:96:62:de:6f:34:95:9e:
         11:30:d3:b5:66:d7:91:7e:e2:ba:f8:03:cf:14:4b:35:c6:96:
         28:0a:55:e7:62:6a:26:aa:22:91:3d:4d:f6:62:3b:d1:e4:63:
         76:8b:e4:9d:4e:f1:d2:5c:bf:35:05:14:e3:c0:fb:c1:99:b8:
         a4:52:cd:ef:b3:65:b2:da:bc:6d:c4:2d:e0:24:b6:5d:88:84:
         12:4f:6a:f3:b9:14:e1:5f:73:e8:49:a3:c4:bf:f3:4d:17:dd:
         69:8a:a9:6d:51:81:b6:0e:75:ef:86:27:77:62:6e:63:08:e9:
         a7:6b:cd:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:19 2026 by rpki-client