Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/21843564-16de-304e-ab8f-b7cbc4bef4db.roa
File:                     21843564-16de-304e-ab8f-b7cbc4bef4db.roa (raw, json)
Hash identifier:          P/pMYmB630wyEy3jfdMF9atS/pLL3uyqPj+9Iul5atI=
Subject key identifier:   C3:48:3F:F7:96:80:FA:BE:5E:81:0F:5C:A2:CE:2A:13:B3:E6:D7:79
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F4328584D003A9BBA969EF8E8DD9BE278
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/21843564-16de-304e-ab8f-b7cbc4bef4db.roa
Signing time:             Fri 27 Feb 2026 09:59:40 +0000
ROA not before:           Fri 27 Feb 2026 09:59:40 +0000
ROA not after:            Thu 28 May 2026 08:59:40 +0000
asID:                     14618
IP address blocks:        149.60.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:3a:9b:ba:96:9e:f8:e8:dd:9b:e2:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Feb 27 09:59:40 2026 GMT
            Not After : May 28 08:59:40 2026 GMT
        Subject: CN=1396b81f-bd21-4d5c-994a-1e9fc6f8a025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:68:54:f3:ab:3d:0b:67:c0:c9:0d:42:94:
                    a4:95:bd:0c:1f:1e:bd:d7:6b:ab:7d:53:f9:32:db:
                    56:10:92:00:10:a2:2d:67:d5:57:55:a3:52:c5:d9:
                    73:71:44:16:98:de:59:45:e0:fa:a9:ca:20:5f:2d:
                    68:23:16:df:4f:a0:26:26:3b:a7:7b:22:4d:f3:83:
                    ee:c6:be:b4:ca:a4:f6:6d:a7:8d:d6:3b:d0:b8:a3:
                    9b:cf:ce:94:be:8c:11:b2:d9:f0:74:b7:41:85:fe:
                    a2:3f:46:73:01:52:e2:d6:1f:9d:00:c6:6d:29:f6:
                    83:2c:b9:80:d2:8b:90:26:01:86:bd:87:23:86:7e:
                    c4:ff:0a:80:43:2a:ae:76:29:ba:81:4f:73:6f:f5:
                    72:1b:b7:bb:31:75:74:65:d1:34:2a:dd:60:7d:1b:
                    cb:b0:30:00:20:e5:02:4d:a4:d7:14:0f:5e:da:3d:
                    4e:45:56:a2:ac:81:fd:1a:0a:d5:a0:8d:10:cd:56:
                    e7:5e:d9:29:c4:8a:93:f7:81:38:65:59:aa:6c:fb:
                    5e:c2:30:b4:75:db:c6:66:b2:7a:a8:2f:75:dc:d5:
                    0b:78:45:9e:d8:73:38:09:01:ef:f9:9a:c5:35:ab:
                    3a:86:3f:e2:10:c9:ab:5b:f0:a6:3f:8b:f1:f7:8e:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:48:3F:F7:96:80:FA:BE:5E:81:0F:5C:A2:CE:2A:13:B3:E6:D7:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/21843564-16de-304e-ab8f-b7cbc4bef4db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.60.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:84:9f:09:9c:c8:32:15:94:99:d7:9e:ff:8a:fe:11:56:10:
         f9:90:c7:41:d4:af:09:33:1a:0c:c0:ea:c6:3d:ac:f6:35:a9:
         a9:a4:dd:95:cb:b5:ce:1a:cc:39:6c:a7:fd:c4:f0:80:02:f3:
         62:1f:0a:7a:59:00:b1:52:52:ed:85:57:6e:37:97:85:4b:14:
         19:2a:82:1a:f6:0d:46:c5:9b:65:30:e5:bc:a6:0e:94:eb:f2:
         e4:1d:e3:f6:be:6e:29:01:d6:af:0a:33:cc:ed:3d:ee:8c:bb:
         b8:f5:93:31:c6:eb:92:45:2f:d9:07:98:1d:ac:d2:37:f2:d9:
         62:03:de:fa:54:d9:43:f1:02:ea:10:5e:8e:fa:5b:81:7c:2a:
         19:59:91:fb:21:73:1e:b2:64:af:8e:35:14:e4:25:48:3a:30:
         a8:8a:2e:b6:fb:fe:77:ee:79:93:71:28:0f:10:39:10:fe:0c:
         ca:6b:77:62:a2:1d:00:b6:37:66:c1:96:71:3d:7b:a4:0f:32:
         c2:71:42:20:aa:de:ec:a6:98:5e:5e:6b:26:b5:f2:4f:88:f8:
         03:03:86:13:d6:bd:d2:12:5e:c2:50:f2:ab:3c:5e:34:fe:fe:
         68:d0:7a:6c:a4:e6:24:2c:e4:1b:ba:9c:6c:a9:32:25:64:01:
         64:f1:00:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:18:55 2026 by rpki-client