Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/98a04760-96c2-30fa-a4d0-fd2e850ed79e.roa
File:                     98a04760-96c2-30fa-a4d0-fd2e850ed79e.roa (raw, json)
Hash identifier:          SwS2xwz1uujURDB8kgL7qKWVrlpYCPs6RTO5J5ZANbE=
Subject key identifier:   D5:B5:DD:E8:81:41:AC:4F:89:7A:FB:89:FE:40:92:89:01:E6:87:30
Certificate issuer:       /CN=1e6b1e4c-be11-4e48-a0ee-190ac58209a6
Certificate serial:       010D0C9F4328584CF587B25DACFD07827B644F00
Authority key identifier: D0:82:5E:7A:13:B9:A3:5F:2A:3B:B6:C3:D7:42:91:8D:C4:EB:3D:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/98a04760-96c2-30fa-a4d0-fd2e850ed79e.roa
Signing time:             Mon 23 Feb 2026 14:00:41 +0000
ROA not before:           Mon 23 Feb 2026 14:00:41 +0000
ROA not after:            Sun 24 May 2026 13:00:41 +0000
asID:                     20454
IP address blocks:        206.168.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:f5:87:b2:5d:ac:fd:07:82:7b:64:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e6b1e4c-be11-4e48-a0ee-190ac58209a6
        Validity
            Not Before: Feb 23 14:00:41 2026 GMT
            Not After : May 24 13:00:41 2026 GMT
        Subject: CN=24796341-72cd-41c0-b3eb-a3e0926daa6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:91:bc:a6:0e:37:00:7d:ea:df:15:4f:22:6c:
                    2b:5e:a6:46:71:30:24:2f:ed:5a:47:9f:1c:8b:4a:
                    bd:26:7f:08:fa:87:a6:e4:6c:df:f6:af:3d:c0:0a:
                    58:8a:98:73:b8:2c:49:86:9c:88:d5:b1:73:aa:43:
                    9b:66:e3:e9:cc:c8:fa:6d:59:f3:76:a3:ce:e2:3a:
                    0e:03:ea:53:d9:6e:91:92:56:cd:0c:78:90:8e:4e:
                    63:94:38:ff:b2:05:72:77:92:5c:7a:f8:fb:a7:6c:
                    4c:56:1b:a1:49:c0:8e:c4:42:b0:94:3f:37:e4:e5:
                    5b:8c:72:e5:cf:b2:1c:49:8b:d4:a1:9d:cb:00:89:
                    8e:47:cb:ad:f0:c3:a3:cc:34:78:f2:28:d9:a7:57:
                    2f:f1:e2:fd:9d:e2:33:b6:60:f6:ae:1a:72:24:dc:
                    e3:c3:99:e1:b0:02:3b:ca:46:ac:73:5a:6c:98:c7:
                    b1:fb:f2:51:62:e5:0c:23:4e:69:ab:20:d6:89:45:
                    45:45:1e:0b:4d:79:ad:1d:38:dc:8b:60:9d:90:4c:
                    10:a2:9b:5f:9d:a7:b4:b0:59:70:5d:24:61:4d:de:
                    19:01:9d:e4:42:e6:f2:67:25:48:05:8c:c9:57:be:
                    02:63:44:ee:30:8c:17:8c:04:1a:b1:ff:3a:a7:5a:
                    16:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B5:DD:E8:81:41:AC:4F:89:7A:FB:89:FE:40:92:89:01:E6:87:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/98a04760-96c2-30fa-a4d0-fd2e850ed79e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.crl

            X509v3 Authority Key Identifier:
                keyid:D0:82:5E:7A:13:B9:A3:5F:2A:3B:B6:C3:D7:42:91:8D:C4:EB:3D:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:4c:43:a4:1f:3f:cf:5c:86:20:b7:f7:6d:ff:b7:87:3b:97:
         41:5f:79:24:af:1b:0c:86:a4:47:4d:24:2e:ab:21:62:ca:f2:
         b4:47:8a:fa:9e:ed:65:1f:d2:a5:04:6d:32:cb:84:f1:92:bb:
         7a:29:78:dd:17:b8:66:53:29:f5:e6:33:ec:bd:3a:af:fb:1e:
         95:cc:81:df:83:f3:e9:f9:f2:cb:4d:e3:31:90:e2:c6:9f:1c:
         82:6b:19:e1:ca:93:f6:fe:d2:0e:b3:5e:a7:dc:0d:61:ea:16:
         12:be:17:57:e6:af:85:88:cc:45:4b:ab:73:9e:de:e1:fc:7d:
         ab:20:26:14:8d:d0:8e:0f:11:90:89:dc:f4:92:1c:4f:35:1c:
         33:67:05:ea:0d:6c:99:6f:d7:79:d6:39:55:d8:b0:9a:05:86:
         92:92:9e:59:28:fb:90:ae:db:25:d2:8e:30:df:db:10:5a:0f:
         16:03:ca:9d:2d:d0:d1:f8:68:fc:bf:bb:b7:bb:a1:27:05:11:
         0b:c5:6f:b2:6f:19:44:06:4e:1c:d4:00:7e:81:06:7f:f3:d3:
         a1:30:3d:39:18:ad:b3:77:01:11:22:4a:c7:1c:bc:a9:1b:34:
         f7:49:17:8e:d7:93:40:af:8a:4c:20:56:93:51:5d:60:f9:ce:
         e7:89:1d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:25:30 2026 by rpki-client