Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5e61fb1a-eb78-30e7-8f90-aa21511fc378.roa
File:                     5e61fb1a-eb78-30e7-8f90-aa21511fc378.roa (raw, json)
Hash identifier:          rwC2sIMA4xRryFnEByBkpNc2+uFDIbNsv8Bfnc3kOQI=
Subject key identifier:   F0:10:D1:48:8B:66:FB:C5:EE:2D:D3:34:C1:5A:B9:8C:AD:4A:BA:4B
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F4328584D60E4F3460C5D221D958A9500
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5e61fb1a-eb78-30e7-8f90-aa21511fc378.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     32889
IP address blocks:        96.60.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:f3:46:0c:5d:22:1d:95:8a:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=4cae63cd-fe5a-464c-9728-a8ebb65539ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:70:09:48:7e:99:9c:ad:96:1c:82:6a:86:5b:
                    d9:f5:d6:5f:b2:2e:0f:d6:9d:3d:e0:36:65:f3:34:
                    dc:30:05:b2:73:80:a6:b5:23:98:59:83:86:e2:4c:
                    a3:8e:6f:c5:ae:77:75:8c:0f:b6:e9:0f:4e:24:2a:
                    61:0b:64:50:75:07:01:69:53:60:e5:9f:72:4a:1e:
                    b3:7f:b6:a8:84:5a:51:70:48:22:b7:42:e9:59:ee:
                    2a:26:b3:11:b9:61:a7:2d:1c:e8:20:64:54:70:8c:
                    f4:69:b6:26:0e:c0:3f:a8:a7:fb:ab:1a:d0:96:b0:
                    49:16:aa:8c:12:dd:57:cc:01:9f:9e:66:00:38:3d:
                    6e:0c:b3:53:e8:c8:a8:d7:62:66:36:56:8b:fc:25:
                    ff:e1:59:db:98:86:2c:4f:43:2a:02:b9:0c:0f:71:
                    c9:49:4c:3f:01:d9:85:b4:71:03:61:de:84:30:60:
                    ca:7a:d8:8c:77:03:f5:ad:02:ef:65:c8:a9:7f:d2:
                    e9:9a:ff:fb:32:9d:50:9e:f3:67:2f:55:e2:ef:32:
                    5c:1d:96:b2:94:b5:d2:1d:5e:51:ec:53:65:cf:ed:
                    c7:70:84:e9:02:2e:cb:6e:2d:a2:63:24:c3:ca:08:
                    d7:33:16:d9:ba:27:9f:ca:8b:fa:25:bd:b8:f5:2b:
                    67:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:10:D1:48:8B:66:FB:C5:EE:2D:D3:34:C1:5A:B9:8C:AD:4A:BA:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/5e61fb1a-eb78-30e7-8f90-aa21511fc378.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.60.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:bb:05:f1:e7:7b:07:fc:1f:96:3e:fd:ca:b7:0d:2f:7e:dc:
         30:00:0e:24:20:22:66:a8:e9:42:76:21:ca:d6:00:a3:ed:fd:
         54:11:db:c7:fd:2a:9e:3c:45:43:49:71:0b:b8:11:49:d1:6e:
         69:0d:4b:7c:4d:d7:4f:9e:b2:30:8a:26:71:80:80:52:5c:b4:
         8c:70:1d:fc:57:5f:d1:06:4c:e4:50:07:44:e6:51:c8:6e:de:
         0f:2b:f3:12:6b:82:b7:58:13:e7:5c:fb:78:66:5d:c9:46:15:
         06:89:7d:0c:ba:8b:de:c7:f9:e1:10:c9:e0:e0:ba:a0:a4:e6:
         c4:b6:b9:d6:c9:6d:29:6e:1f:05:7e:36:69:7c:82:3a:db:32:
         90:67:05:59:98:f0:c4:b6:1b:3a:e9:db:bb:16:2f:e4:bc:d2:
         7f:5f:9f:71:f4:85:11:8e:70:a9:79:33:55:6b:38:13:5b:59:
         e3:d4:e8:da:ee:8e:8c:01:a6:d5:89:21:68:14:e0:02:93:07:
         44:46:2a:b2:90:1a:d3:f2:f0:07:95:72:d8:ac:51:7b:ea:04:
         98:67:54:8e:b4:4f:16:28:1d:19:dd:01:bd:03:1e:98:40:35:
         43:c5:51:b6:3a:b4:c3:f7:8e:c8:9e:78:a9:16:4d:9c:72:f3:
         1d:de:bc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:13 2026 by rpki-client