Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa
File:                     60c05e3f-1816-3cff-8958-8504b17b798d.roa (raw, json)
Hash identifier:          sili6a28l2kRDw6rkGjWJVhPdeL3EV7LdQElCVbOpNA=
Subject key identifier:   F0:1D:4B:4B:2F:18:47:D1:64:91:CB:4B:61:30:31:C8:A6:FF:DD:9C
Certificate issuer:       /CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
Certificate serial:       010D0C9F4328584CD40761BFCD3A03D9BA20305E
Authority key identifier: EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa
Signing time:             Wed 11 Feb 2026 14:00:41 +0000
ROA not before:           Wed 11 Feb 2026 14:00:41 +0000
ROA not after:            Tue 12 May 2026 13:00:41 +0000
asID:                     394745
IP address blocks:        170.75.160.0/20 maxlen: 20
                          172.81.176.0/21 maxlen: 21
                          2602:ffb6::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d4:07:61:bf:cd:3a:03:d9:ba:20:30:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
        Validity
            Not Before: Feb 11 14:00:41 2026 GMT
            Not After : May 12 13:00:41 2026 GMT
        Subject: CN=72b7a6e5-ecf7-43fb-a889-72a5c9b6d8b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:97:7a:3e:4f:e9:32:a5:6e:c1:86:ea:bf:
                    4b:5f:de:6f:3e:7b:23:e8:4f:54:b7:8b:f2:33:d1:
                    84:36:cd:c2:44:98:26:d6:30:fa:80:ee:c4:eb:30:
                    e5:30:e9:c8:0f:2c:6a:ae:5a:10:8c:42:e2:bd:df:
                    24:99:64:ec:22:ca:00:d1:3e:26:fe:54:fa:4b:eb:
                    bd:42:08:e9:4a:26:d1:a2:6c:09:3f:5f:9f:fb:c9:
                    3a:b0:b0:fb:78:cd:24:92:bc:0c:72:54:51:9b:ca:
                    ff:33:46:87:ee:6d:48:42:e8:bc:0f:60:a5:35:b7:
                    12:21:78:06:e6:39:14:ad:a9:5b:8e:6a:8e:7d:18:
                    7d:81:6e:de:08:74:4a:cb:66:af:63:25:04:28:4c:
                    d8:42:7c:00:13:af:b4:2d:3f:1d:35:47:cb:98:89:
                    fe:dd:bd:6b:2c:e9:95:38:1b:f0:78:c4:e0:1c:a8:
                    45:db:70:9b:75:67:7e:95:93:29:7a:1b:c2:11:80:
                    19:3f:42:a9:12:82:57:26:15:d9:b1:00:41:5a:47:
                    bf:90:ae:20:6f:27:82:a2:3f:3a:ba:dd:d8:25:6a:
                    55:d6:46:bc:d2:d2:dc:be:0e:42:40:d1:60:d3:b7:
                    f1:84:68:13:d0:7d:62:14:bf:a8:15:89:f9:a0:5b:
                    90:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1D:4B:4B:2F:18:47:D1:64:91:CB:4B:61:30:31:C8:A6:FF:DD:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl

            X509v3 Authority Key Identifier:
                keyid:EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.160.0/20
                  172.81.176.0/21
                IPv6:
                  2602:ffb6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:db:5d:39:5a:4c:16:c0:dd:ee:03:18:b4:5b:cc:f3:b4:ff:
         7a:f0:2f:be:43:be:fe:90:b3:7a:76:c8:5b:c9:c9:f1:7c:2f:
         7b:94:10:01:3b:8d:a1:e6:32:d4:96:42:15:3f:08:a4:06:f5:
         46:df:70:72:d4:1c:3a:4b:59:93:a8:19:eb:1f:a6:5d:69:e1:
         d2:4c:1f:d4:6a:1e:a9:98:07:a9:4a:82:a5:c8:80:a0:b6:bc:
         43:1f:26:cf:a7:b4:c3:89:0b:70:2f:18:dd:1b:b3:d5:dc:82:
         f2:78:0f:e4:e3:d1:4b:d9:ac:3d:7c:d9:d8:23:1d:85:d8:39:
         a9:4f:ce:7f:67:d6:c9:de:18:8a:ed:66:fd:a2:d7:f1:08:be:
         f3:29:00:51:ae:8f:b6:7f:da:ba:1c:71:3f:5d:7b:7e:6c:54:
         82:55:fc:7e:04:4c:b7:4e:0e:41:36:f9:d0:46:8d:b4:97:e2:
         ed:4f:7d:8e:ff:74:d8:74:03:e5:ee:e1:77:03:00:a7:6e:e5:
         95:62:0d:22:6c:c0:4c:1a:fc:4f:ff:8f:93:9c:8b:ef:de:1d:
         ee:28:78:7c:1c:96:3d:55:fe:77:85:0c:b2:77:c6:f6:8e:11:
         16:2b:72:43:d2:d5:d5:3d:0f:d0:3d:be:bc:09:01:01:1b:77:
         c7:02:23:2f
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWEzUB2G/zToD2bogMF4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZhNjA0YzItYmQ5Yy00ZDBlLWJmYjAtZGFhYzhjZDFj
M2ZjMB4XDTI2MDIxMTE0MDA0MVoXDTI2MDUxMjEzMDA0MVowLzEtMCsGA1UEAxMk
NzJiN2E2ZTUtZWNmNy00M2ZiLWE4ODktNzJhNWM5YjZkOGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUWXej5P6TKlbsGG6r9LX95vPnsj6E9Ut4vy
M9GENs3CRJgm1jD6gO7E6zDlMOnIDyxqrloQjELivd8kmWTsIsoA0T4m/lT6S+u9
QgjpSibRomwJP1+f+8k6sLD7eM0kkrwMclRRm8r/M0aH7m1IQui8D2ClNbcSIXgG
5jkUralbjmqOfRh9gW7eCHRKy2avYyUEKEzYQnwAE6+0LT8dNUfLmIn+3b1rLOmV
OBvweMTgHKhF23CbdWd+lZMpehvCEYAZP0KpEoJXJhXZsQBBWke/kK4gbyeCoj86
ut3YJWpV1ka80tLcvg5CQNFg07fxhGgT0H1iFL+oFYn5oFuQMwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFPAdS0svGEfRZJHLS2EwMcim/92cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZmE2
MDRjMi1iZDljLTRkMGUtYmZiMC1kYWFjOGNkMWMzZmMvNjBjMDVlM2YtMTgxNi0z
Y2ZmLTg5NTgtODUwNGIxN2I3OThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWZhNjA0YzItYmQ5Yy00ZDBlLWJm
YjAtZGFhYzhjZDFjM2ZjLzFmYTYwNGMyLWJkOWMtNGQwZS1iZmIwLWRhYWM4Y2Qx
YzNmYy5jcmwwHwYDVR0jBBgwFoAU6uuVQNAUCiOlEBgO4kiYg3XNvEgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZmE2MDRjMi1iZDljLTRkMGUtYmZiMC1kYWFj
OGNkMWMzZmMuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQEqkugAwQD
rFGwMA4EAgACMAgDBgQmAv+2ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBX2105WkwWwN3uAxi0W8zztP96
8C++Q77+kLN6dshbycnxfC97lBABO42h5jLUlkIVPwikBvVG33By1Bw6S1mTqBnr
H6ZdaeHSTB/Uah6pmAepSoKlyICgtrxDHybPp7TDiQtwLxjdG7PV3ILyeA/k49FL
2aw9fNnYIx2F2DmpT85/Z9bJ3hiK7Wb9otfxCL7zKQBRro+2f9q6HHE/XXt+bFSC
Vfx+BEy3Tg5BNvnQRo20l+LtT32O/3TYdAPl7uF3AwCnbuWVYg0ibMBMGvxP/4+T
nIvv3h3uKHh8HJY9Vf53hQyyd8b2jhEWK3JD0tXVPQ/QPb68CQEBG3fHAiMv
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:11 2026 by rpki-client