Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/8eb2e15a-cf22-3dc0-8673-f4024bc280a8.roa
File:                     8eb2e15a-cf22-3dc0-8673-f4024bc280a8.roa (raw, json)
Hash identifier:          kfjv7JPLltD30nmoiE3FQxrqZZyG6gOXvCBdFqFtUK8=
Subject key identifier:   E2:F0:A8:55:E5:5B:94:22:C6:B7:6C:AB:04:EB:36:AE:74:AF:42:77
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F4328584D7F9A8F3333AB6C651CB7C0E0
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/8eb2e15a-cf22-3dc0-8673-f4024bc280a8.roa
Signing time:             Tue 14 Apr 2026 01:00:24 +0000
ROA not before:           Tue 14 Apr 2026 01:00:24 +0000
ROA not after:            Mon 13 Jul 2026 01:00:24 +0000
asID:                     19107
IP address blocks:        216.234.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7f:9a:8f:33:33:ab:6c:65:1c:b7:c0:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Apr 14 01:00:24 2026 GMT
            Not After : Jul 13 01:00:24 2026 GMT
        Subject: CN=4f2631d8-e0f7-458d-9e1b-cb7f00079ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:63:50:b3:69:13:5d:ce:84:14:fb:04:ca:a2:
                    d4:e7:83:d1:fa:b0:37:cd:0e:ff:fc:76:cc:9d:94:
                    db:e2:44:a7:66:46:c3:92:3b:cf:c0:1c:9a:14:b9:
                    1b:9f:e9:16:e6:8f:db:f1:cb:2c:54:15:eb:a0:e6:
                    38:5b:59:9e:a9:5b:a5:fa:16:6a:51:2a:0f:89:0c:
                    f9:62:d2:64:3e:92:e8:93:2c:b4:ed:68:cd:dc:97:
                    31:7b:84:35:9f:f4:30:1b:6b:96:7c:9f:13:62:89:
                    da:11:9a:21:00:91:65:4a:ab:86:38:8b:a4:30:f0:
                    1f:3a:51:3f:2f:16:74:92:44:73:d6:f7:22:b4:a3:
                    82:59:fd:45:93:15:2e:d1:78:45:fe:ce:84:36:46:
                    6c:d7:d5:05:fc:75:f6:ce:73:87:70:ba:92:f2:65:
                    09:02:f5:81:2b:f9:7a:45:88:85:6c:ec:ba:ea:eb:
                    12:f9:65:44:dc:c3:0a:79:a6:53:a8:c3:6c:54:5d:
                    c7:99:e1:01:ee:74:a6:6a:ed:cc:94:28:1f:8f:f2:
                    1e:0d:56:d1:fd:a2:28:46:a3:21:c3:c2:82:5e:9a:
                    c2:66:bf:53:22:b0:d5:fc:c3:5d:76:75:17:e7:f8:
                    ee:69:99:15:3e:32:9b:88:f8:2f:bd:c6:0d:6a:60:
                    88:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F0:A8:55:E5:5B:94:22:C6:B7:6C:AB:04:EB:36:AE:74:AF:42:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/8eb2e15a-cf22-3dc0-8673-f4024bc280a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:f8:64:e5:f8:e0:5d:8f:7e:74:cc:ed:45:2a:2c:b1:26:92:
         bf:4f:dd:f5:15:6e:15:00:10:de:83:f7:1c:67:3e:f4:97:19:
         3a:a8:10:f6:ae:71:7d:15:ff:3d:a0:6a:45:6f:e0:85:2b:7f:
         6b:f3:3f:b2:8b:6f:5c:c3:ad:89:92:73:18:96:13:f2:6b:52:
         40:7d:98:85:88:22:ac:22:57:57:7d:a4:0b:1d:59:19:22:7c:
         d8:9f:da:4c:31:da:78:03:76:3e:1c:16:4b:bb:81:5e:98:86:
         1f:c9:16:43:c8:db:ff:56:43:91:eb:80:16:33:6a:2d:8b:96:
         5a:38:1b:12:51:32:3e:e4:95:23:8a:a3:94:1f:b9:f1:20:0e:
         de:2d:52:c9:73:eb:00:a6:16:63:47:ed:f8:e8:27:9c:3b:95:
         b1:37:a7:52:24:68:94:c2:4e:45:30:47:95:a1:22:94:cd:2f:
         20:d2:a4:65:8d:06:e7:8c:0e:ea:41:16:30:32:5f:8b:d8:b6:
         2c:ff:45:8d:12:85:7f:77:fb:14:98:01:ec:23:27:83:f1:4f:
         b2:24:1c:ba:50:ed:90:5c:5c:20:09:c6:8e:c5:0d:bc:0d:ac:
         52:0b:c5:c3:bf:41:81:bd:ee:66:2b:a1:bc:83:ba:e5:40:53:
         d5:5e:a1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:58:47 2026 by rpki-client