Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/60b7bedb-cf92-3a5a-af1c-379c13e83f7b.roa
File:                     60b7bedb-cf92-3a5a-af1c-379c13e83f7b.roa (raw, json)
Hash identifier:          BYf+4cIaDNeVcapq2ulcTD/nUPFnzxZ5hFgHcrUcvYc=
Subject key identifier:   36:02:C6:CF:28:80:95:36:00:06:72:A5:91:02:D4:90:F3:3C:C5:59
Certificate issuer:       /CN=c2e53398-d877-4381-8fdb-2ec7db53fc5e
Certificate serial:       010D0C9F4328584D7A052ED25F6DAD25C71B6680
Authority key identifier: 2B:E1:B8:FE:4E:74:DB:27:4B:8E:5F:CE:9D:30:66:E7:DA:0D:EA:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/60b7bedb-cf92-3a5a-af1c-379c13e83f7b.roa
Signing time:             Sun 12 Apr 2026 01:00:24 +0000
ROA not before:           Sun 12 Apr 2026 01:00:24 +0000
ROA not after:            Sat 11 Jul 2026 01:00:24 +0000
asID:                     16801
IP address blocks:        198.50.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7a:05:2e:d2:5f:6d:ad:25:c7:1b:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e53398-d877-4381-8fdb-2ec7db53fc5e
        Validity
            Not Before: Apr 12 01:00:24 2026 GMT
            Not After : Jul 11 01:00:24 2026 GMT
        Subject: CN=6832c8fc-94aa-411a-9ad0-1db4058ba24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:d6:07:f4:08:1a:71:c9:d2:db:33:78:23:8a:
                    34:98:11:b5:1e:10:62:23:90:ea:a8:d3:1b:6b:d7:
                    de:0f:83:7d:ca:d3:41:a6:55:68:c6:d5:64:16:2d:
                    3f:63:8b:17:84:a0:5c:42:fc:f6:75:cd:6b:94:da:
                    c2:13:2f:46:98:dc:f6:d9:c7:25:52:73:20:5a:50:
                    84:36:a6:10:2e:23:10:c2:4e:a6:dc:fa:5b:6b:a6:
                    31:1b:b7:21:7a:24:fa:92:43:a1:96:4f:6a:45:02:
                    8a:87:1b:64:e9:84:69:ff:49:4d:f4:3c:d8:1d:64:
                    96:da:51:29:91:6c:89:0f:26:12:c2:36:5e:92:3a:
                    23:98:a3:58:8b:c3:72:27:16:9c:a1:ad:92:d8:7b:
                    94:97:f4:07:91:8d:3c:59:7f:48:55:ec:24:d5:6e:
                    f7:59:90:dc:78:b5:bf:4b:09:39:77:59:f6:d2:d7:
                    eb:6b:fe:7d:87:83:2e:99:a5:b4:21:4c:11:b3:26:
                    b8:d8:91:e8:50:b1:5b:d1:69:5c:ef:cf:15:a7:2b:
                    60:9b:fa:ad:53:dc:0c:3f:c3:7c:8b:08:60:37:ef:
                    9d:58:97:af:c2:3d:30:86:33:e5:31:8f:54:00:e6:
                    84:b2:60:ff:93:55:2d:d1:d5:53:ac:32:da:b9:be:
                    79:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:02:C6:CF:28:80:95:36:00:06:72:A5:91:02:D4:90:F3:3C:C5:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/60b7bedb-cf92-3a5a-af1c-379c13e83f7b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e/c2e53398-d877-4381-8fdb-2ec7db53fc5e.crl

            X509v3 Authority Key Identifier:
                keyid:2B:E1:B8:FE:4E:74:DB:27:4B:8E:5F:CE:9D:30:66:E7:DA:0D:EA:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c2e53398-d877-4381-8fdb-2ec7db53fc5e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.50.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:ca:f8:67:c6:85:a2:9b:39:e5:2b:44:76:e3:3f:f5:70:53:
         92:56:9c:28:5a:71:24:b0:a6:3f:ca:15:3c:1d:a3:db:19:99:
         63:13:eb:1b:49:c6:1c:07:23:ed:28:71:71:ea:3f:42:84:e9:
         42:d7:0e:d3:ca:87:81:3b:fc:9d:de:89:58:c4:a0:42:46:b5:
         fe:22:21:b6:eb:2e:14:79:52:45:f8:8a:b1:94:f2:52:bd:c8:
         d5:a0:c7:e9:bc:e4:62:19:2c:86:b5:a5:c6:22:91:a0:08:8e:
         89:4d:74:22:f1:79:0b:51:04:9a:a8:b0:a4:5c:3b:85:43:02:
         38:75:d6:e7:e1:ec:52:9d:d0:24:79:54:f1:3e:ec:0d:14:fd:
         cd:e0:80:45:9b:4d:ee:28:5a:8a:e9:9f:84:1d:3c:70:f8:50:
         90:32:32:41:f7:fc:12:34:96:4f:fc:00:f3:9a:e5:01:eb:a2:
         9a:fe:4d:12:05:94:8b:67:a9:95:a7:5c:c6:cf:b7:9b:d9:e1:
         fa:9c:5e:02:bf:6e:8c:2d:b6:8f:dd:f1:b7:2c:f9:69:7e:fb:
         1b:a0:e2:59:56:7c:cf:57:dc:43:9c:aa:bc:8c:74:55:52:26:
         17:5e:2e:c4:d8:51:2a:62:6f:9a:fb:5b:e3:29:4e:f0:a1:1a:
         4b:5e:ca:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:35 2026 by rpki-client