Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6b6ce62e-ca0d-33e2-a2f7-17dc0954ecdb.roa
File:                     6b6ce62e-ca0d-33e2-a2f7-17dc0954ecdb.roa (raw, json)
Hash identifier:          /Chz3aX/OfK747CCJRIRh/UedrVfpY/zGPpIhOA9vgk=
Subject key identifier:   73:B0:61:98:29:5C:87:4E:E5:32:0D:26:8C:4C:3B:1D:41:FB:A4:9E
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F4328584D7F9A88E9B5C10959B579D600
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6b6ce62e-ca0d-33e2-a2f7-17dc0954ecdb.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     19107
IP address blocks:        216.234.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:88:e9:b5:c1:09:59:b5:79:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=02be1d7c-d9a3-49a3-a388-544bf4357b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:d4:ea:e6:bb:31:a9:d4:ca:f5:34:b4:01:ee:
                    2d:71:c7:7c:ec:25:7c:a2:c5:48:7e:ee:c5:da:55:
                    89:ba:ca:12:d7:72:ec:24:df:af:25:a8:11:83:a6:
                    21:a9:a3:e1:ca:e6:4f:c4:ff:b1:91:bf:7a:da:5c:
                    31:1f:dd:a6:4f:40:79:23:7b:d1:b7:59:c6:83:16:
                    36:4d:d5:2b:d8:59:66:71:45:94:53:46:b1:c5:3b:
                    82:54:53:76:e3:6c:9b:50:03:c8:a0:e5:7c:e4:6a:
                    cf:54:81:32:3a:0f:c7:b4:98:63:ad:45:e8:b5:89:
                    9b:b1:04:a0:07:6d:fa:5c:6b:b7:d2:ee:1f:c7:cc:
                    59:13:22:71:41:c3:99:e3:39:0f:81:47:03:23:96:
                    39:0e:82:88:0f:5c:40:be:f7:13:b3:23:d1:82:db:
                    ca:25:bd:e8:68:b2:d4:e8:19:8d:0c:bb:2a:f5:2b:
                    4d:ea:78:64:23:af:14:29:e6:db:da:b1:c4:00:b2:
                    16:81:47:4e:80:ef:31:a0:85:1a:bd:af:8d:0f:f5:
                    63:f4:d7:42:bc:d7:20:28:c2:d8:8c:e8:7c:2e:0d:
                    a3:fa:0e:24:ec:13:b9:1e:d9:d5:21:55:5a:44:61:
                    33:b3:90:28:f9:de:34:5c:3b:13:e8:e6:58:92:28:
                    f3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:B0:61:98:29:5C:87:4E:E5:32:0D:26:8C:4C:3B:1D:41:FB:A4:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6b6ce62e-ca0d-33e2-a2f7-17dc0954ecdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:70:e1:f2:01:52:81:52:30:d9:12:6d:e8:8b:e4:b4:71:b8:
         a9:76:9e:ed:7d:02:b1:36:f7:21:e2:d0:dd:13:ce:f3:2b:e7:
         be:50:90:fb:0a:55:5b:28:7c:36:4f:eb:c6:c3:68:75:45:37:
         6a:9a:7a:63:b6:a2:37:f1:57:c4:8c:23:ce:60:e9:63:1a:26:
         18:ee:99:1f:19:a1:58:db:62:78:aa:e0:b8:b8:c0:da:49:a4:
         e6:71:d4:39:03:01:95:22:b4:a1:5d:f9:19:cf:7f:1d:3f:a5:
         e6:e9:62:81:51:83:8f:33:b9:80:13:6a:14:1f:e7:6e:27:b2:
         8b:a3:99:ad:ad:90:c4:5e:22:ae:10:d8:5f:e6:06:1f:ac:25:
         b5:f1:ee:a4:e3:d5:93:d9:cd:ac:5d:e0:23:6d:b3:2c:a1:a2:
         ea:b9:7e:30:80:3a:c4:39:f3:ae:5e:2a:dc:d8:f4:19:55:bc:
         6e:14:e0:0e:25:1c:60:56:aa:2f:45:40:3d:40:73:1e:55:94:
         0f:1e:aa:ac:4d:eb:24:2c:74:6e:ae:c8:0b:99:6c:94:8e:85:
         32:5f:be:ff:b9:4c:81:11:90:2e:af:0d:ef:39:d1:dd:49:2b:
         cf:9e:9f:b8:87:e1:1f:ce:e6:ee:9c:c7:52:d9:2f:58:3d:59:
         ad:94:20:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:24:16 2026 by rpki-client