Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/6383ebca-73f5-3eb0-afe1-dd9509971aac.roa
File:                     6383ebca-73f5-3eb0-afe1-dd9509971aac.roa (raw, json)
Hash identifier:          V82v3M2gTRdDLVerl3iD5nWCOiY9+tfot46q14gzLIM=
Subject key identifier:   D7:69:5A:E2:FF:DA:04:D2:9E:2D:BE:2D:A1:5E:FC:53:1E:6F:A3:26
Certificate issuer:       /CN=ddca76af-4c49-4bd6-b142-1774c42d55b2
Certificate serial:       010D0C9F4328584CCA422005434D76AA9E5C2A40
Authority key identifier: C3:69:1A:4B:EC:52:26:1B:23:7C:5A:E5:B5:95:C9:D0:24:3E:D6:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/6383ebca-73f5-3eb0-afe1-dd9509971aac.roa
Signing time:             Sun 08 Feb 2026 02:00:32 +0000
ROA not before:           Sun 08 Feb 2026 02:00:32 +0000
ROA not after:            Sat 09 May 2026 01:00:32 +0000
asID:                     398019
IP address blocks:        172.81.60.0/24 maxlen: 24
                          172.81.61.0/24 maxlen: 24
                          172.81.62.0/24 maxlen: 24
                          172.81.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/ddca76af-4c49-4bd6-b142-1774c42d55b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/ddca76af-4c49-4bd6-b142-1774c42d55b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ca:42:20:05:43:4d:76:aa:9e:5c:2a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ddca76af-4c49-4bd6-b142-1774c42d55b2
        Validity
            Not Before: Feb  8 02:00:32 2026 GMT
            Not After : May  9 01:00:32 2026 GMT
        Subject: CN=6324a835-5480-4747-bdbd-e567c0bafb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:02:2c:ac:9f:f3:3b:b5:92:35:6c:11:1f:28:
                    00:e5:5c:ac:05:6f:29:98:db:85:82:77:c9:e7:9d:
                    03:60:37:ee:4b:fa:e3:70:4a:bf:ab:ea:16:53:d1:
                    3a:f7:7a:8b:cf:16:92:04:21:52:bd:c7:db:28:bb:
                    bd:e0:d2:56:7b:eb:a8:30:1b:45:9b:9b:a5:e1:61:
                    39:07:42:0a:ce:6f:5a:46:ec:47:a5:38:ae:f0:45:
                    ca:47:20:67:d1:57:17:23:b8:da:b8:90:c5:60:da:
                    ec:20:7a:49:ee:12:c9:ef:52:18:36:7b:9f:f1:13:
                    d8:99:ac:3d:f5:02:5d:1b:df:17:f5:88:be:ae:1e:
                    bf:11:fa:e2:5c:51:fa:e2:1b:4c:ad:7b:2d:b3:a7:
                    9f:7b:fc:17:48:70:39:dc:e2:e4:50:5a:3a:f0:06:
                    fe:12:b2:b1:62:1c:d8:52:41:f6:be:20:37:00:ee:
                    20:43:63:3a:34:7d:bf:46:c0:81:96:1c:20:44:ca:
                    3d:11:1f:b6:27:14:0b:4a:58:d7:94:6e:77:36:0e:
                    23:37:ae:4d:6f:9c:d1:c7:f9:65:9f:0a:43:3b:57:
                    e7:82:00:94:28:27:2d:62:e9:07:2f:7a:b8:0f:15:
                    8f:72:6a:92:54:ee:da:40:ef:dc:0c:ea:d5:f0:69:
                    22:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:69:5A:E2:FF:DA:04:D2:9E:2D:BE:2D:A1:5E:FC:53:1E:6F:A3:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/6383ebca-73f5-3eb0-afe1-dd9509971aac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2/ddca76af-4c49-4bd6-b142-1774c42d55b2.crl

            X509v3 Authority Key Identifier:
                keyid:C3:69:1A:4B:EC:52:26:1B:23:7C:5A:E5:B5:95:C9:D0:24:3E:D6:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ddca76af-4c49-4bd6-b142-1774c42d55b2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:af:fd:28:8f:cc:a6:18:65:ee:50:26:67:3e:bb:1f:d8:81:
         42:05:b8:87:4c:68:0a:54:70:4f:b4:ea:85:31:b8:02:a3:73:
         6f:d2:3f:a2:3d:fb:64:e0:1d:10:2d:57:04:ba:1c:c5:f1:1f:
         df:f5:9b:9d:78:1c:57:43:44:1b:bb:8d:d2:64:20:df:6a:8b:
         db:02:a0:8c:62:6d:96:cd:ea:29:72:51:c6:fb:52:59:ee:d5:
         7e:ad:fc:9c:ec:b0:26:4f:52:4c:5a:76:24:70:c1:18:29:f7:
         7c:3a:b4:4f:67:c3:88:71:17:2e:4b:df:f1:d4:d6:0d:5a:6f:
         3a:59:45:41:14:3e:0c:62:06:10:b1:c0:5b:9b:2e:73:cf:4a:
         a2:87:1c:b3:b0:f8:12:7d:f7:a0:17:e3:7a:98:25:d1:79:c8:
         eb:e8:55:16:97:c7:0e:8e:27:e0:be:41:3d:67:02:72:30:78:
         d6:a9:9e:eb:f0:a2:0f:54:fa:1e:a4:e4:91:9d:92:4e:56:11:
         4c:80:f1:e3:d8:d7:48:56:ee:71:9f:0c:23:98:ac:81:b1:4e:
         86:5f:de:83:2b:a9:ab:af:e4:c2:e3:82:22:0c:bc:8f:80:60:
         68:b5:18:d6:f1:a6:11:a8:32:20:17:65:d4:8f:7c:9d:f9:f4:
         af:14:a3:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:35:29 2026 by rpki-client