Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a60f390e-6c81-3aff-b8e0-e81760b2ce11.roa
File:                     a60f390e-6c81-3aff-b8e0-e81760b2ce11.roa (raw, json)
Hash identifier:          b9Ow3Cbvi1yJDTYzzdvG5CCLQNtNe8m38mzanMJxhnM=
Subject key identifier:   93:44:83:40:E5:F4:37:CB:66:40:F2:BE:08:5A:B3:30:B5:BE:29:6E
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584D59EAB0CD27A45E863DE48D40
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a60f390e-6c81-3aff-b8e0-e81760b2ce11.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     14114
IP address blocks:        157.133.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:b0:cd:27:a4:5e:86:3d:e4:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=8753ea90-e713-4eb7-a120-1530197afae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d4:3f:c1:f6:c2:3a:ba:84:e6:7a:59:2d:78:
                    74:af:6a:bd:df:ce:00:ba:98:fd:92:f0:4e:82:fe:
                    46:57:70:e6:fa:69:94:de:0d:67:9a:d9:7e:49:d7:
                    70:f0:5f:01:d3:3b:91:de:81:de:69:c9:e4:39:c2:
                    02:de:4b:49:22:78:ee:b9:94:a2:5d:2d:8e:e9:65:
                    87:0e:03:aa:21:d3:81:35:b4:58:b0:4b:97:b1:e4:
                    ee:d4:eb:25:ac:93:9e:40:a4:94:52:92:5e:32:39:
                    a7:c5:0b:2a:05:05:c8:cf:c6:c0:75:9f:4c:47:a7:
                    df:e3:18:87:b6:b0:2a:41:be:4e:ee:4f:34:65:9d:
                    ff:24:94:37:7a:05:57:03:9b:df:ff:d6:cc:b5:07:
                    9d:f3:15:7a:49:25:8d:5b:53:a1:d9:f8:d0:53:69:
                    76:ae:09:19:97:95:e8:3a:f3:8b:5f:84:f1:19:2d:
                    33:2a:d5:cf:bb:d0:71:6f:25:20:97:06:36:85:43:
                    d4:80:33:12:05:be:07:b1:61:65:25:73:75:21:c4:
                    a9:6f:21:a6:00:d7:dc:61:9b:11:7b:39:17:0b:33:
                    76:c8:ef:a7:f2:c1:89:94:0f:1b:91:25:73:e5:d5:
                    8e:f2:06:85:2a:d7:b7:6d:77:83:73:92:f1:3e:07:
                    ab:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:44:83:40:E5:F4:37:CB:66:40:F2:BE:08:5A:B3:30:B5:BE:29:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a60f390e-6c81-3aff-b8e0-e81760b2ce11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d2:85:f8:94:9a:19:2b:f1:99:35:01:60:bf:30:e3:b5:95:
         6b:53:f9:a8:43:fc:4a:c1:f8:a4:bb:64:92:84:aa:b3:65:fe:
         23:b1:85:af:4a:fc:66:be:bb:b2:af:0a:a9:a2:e8:0b:44:58:
         3e:e1:72:18:d6:df:98:fd:83:2d:8f:1e:cd:05:8a:8f:b0:5e:
         97:ff:2e:5d:62:6b:02:95:3b:15:bf:66:49:6b:1e:71:86:30:
         95:39:18:c4:05:1f:2b:56:99:01:ac:c6:65:50:55:ac:b1:53:
         38:cd:21:96:45:39:36:90:38:cd:6d:b9:de:a0:2a:3e:01:89:
         fd:c0:a4:c3:21:45:b5:8f:04:ad:3d:f5:a1:06:81:0b:b9:cc:
         21:9c:a3:2d:0e:b1:8c:e7:7b:eb:a7:c7:cf:13:31:f2:6d:19:
         59:63:ed:27:91:ba:3f:f7:bf:ca:f0:9e:aa:77:64:6a:44:19:
         f2:07:70:b7:a1:96:f1:98:39:9a:08:06:dd:0f:6e:87:da:49:
         ac:2f:72:3b:9a:60:04:a6:ec:de:b6:e0:8f:8c:fd:3b:c2:49:
         f6:51:d5:0b:cb:5b:1f:20:5e:19:40:2a:04:2d:75:56:d0:f1:
         15:f3:31:c0:58:50:31:1b:94:82:af:b9:8e:07:1b:c8:79:a5:
         eb:22:71:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:43 2026 by rpki-client