Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/eae757c8-21af-3b58-a16e-8062e109686a.roa
File:                     eae757c8-21af-3b58-a16e-8062e109686a.roa (raw, json)
Hash identifier:          7MIQ1Vbj7O2GjFDyRAulQLiDHqnxG/b7ahJqMN9fcss=
Subject key identifier:   34:B0:24:BC:E7:6A:93:E2:DF:BB:44:92:3F:FE:6F:C5:CC:45:22:9D
Certificate issuer:       /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial:       010D0C9F4328584CEFF221FEA46E4D611BC245C0
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/eae757c8-21af-3b58-a16e-8062e109686a.roa
Signing time:             Sat 21 Feb 2026 14:00:41 +0000
ROA not before:           Sat 21 Feb 2026 14:00:41 +0000
ROA not after:            Fri 22 May 2026 13:00:41 +0000
asID:                     14618
IP address blocks:        159.172.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ef:f2:21:fe:a4:6e:4d:61:1b:c2:45:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
        Validity
            Not Before: Feb 21 14:00:41 2026 GMT
            Not After : May 22 13:00:41 2026 GMT
        Subject: CN=a3976f6b-5c51-4772-8e84-aefd06568748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6b:29:de:83:43:34:b5:c8:ce:70:42:72:18:
                    a9:d9:9e:9e:47:aa:e9:29:58:34:a4:c5:a1:60:ec:
                    32:bd:f4:79:40:64:b4:72:bb:30:8e:63:13:3b:82:
                    40:69:07:da:87:48:11:13:e4:89:dc:87:a7:64:79:
                    e1:3f:10:06:fe:5a:ed:4e:d1:26:d7:8e:02:8b:4b:
                    4b:03:b1:54:c4:bc:ff:5d:0c:73:af:6b:85:a3:76:
                    41:03:58:b2:58:ca:93:3c:ed:ed:0a:13:4a:d2:01:
                    5a:03:36:54:0a:3a:59:14:42:84:25:68:ac:72:72:
                    2f:f5:18:76:05:a3:07:79:e8:9e:a3:37:12:dd:52:
                    f4:38:65:6d:df:70:59:cc:0c:8a:19:c9:22:19:0e:
                    fd:85:ee:1e:33:44:4b:5a:17:38:23:45:d1:5f:ad:
                    5b:20:33:6f:45:99:f1:d3:91:54:fc:54:82:c3:47:
                    6f:15:d7:fe:6f:c0:17:c1:92:d3:aa:c0:64:a2:73:
                    0a:c5:0f:ee:0c:b1:fc:3c:0a:a9:bd:64:2a:68:27:
                    41:a4:92:ea:16:96:e7:a0:05:37:c4:c2:95:e3:be:
                    c7:97:ec:fa:78:43:bb:f5:b0:29:fe:57:2c:22:78:
                    43:cb:90:7c:ae:a9:2d:c5:2e:e2:7a:46:e0:3d:06:
                    fa:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:B0:24:BC:E7:6A:93:E2:DF:BB:44:92:3F:FE:6F:C5:CC:45:22:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/eae757c8-21af-3b58-a16e-8062e109686a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl

            X509v3 Authority Key Identifier:
                keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.172.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:70:c7:5c:0c:2e:e1:22:7e:bc:ed:a4:17:1b:c9:02:83:da:
         3f:d1:f3:7c:fb:64:cf:cd:a7:15:5d:65:10:a0:87:ba:74:9f:
         8d:f0:c8:ce:4e:d8:29:1d:01:54:56:d0:24:9f:22:86:6d:ff:
         14:5a:7f:6c:47:56:03:5b:66:6a:c5:e2:99:dd:27:f4:c9:2c:
         b4:65:28:2c:55:22:3f:6d:d4:41:ca:54:e4:c2:fb:2a:a2:4a:
         93:58:84:e7:15:68:2e:54:a5:af:24:7b:98:4d:fe:5b:fc:1d:
         13:66:a5:a5:44:22:68:a8:3b:a5:9c:67:18:74:c8:03:14:e7:
         ee:3a:c5:86:a2:ad:30:80:94:98:99:18:08:24:4d:72:62:29:
         24:f7:13:5c:5f:0c:51:fd:e6:81:f8:5a:28:a2:f5:9a:0e:8c:
         8b:d7:a9:41:c3:18:5e:d2:07:6a:b7:74:15:42:98:6c:aa:9b:
         ba:21:ba:d1:94:c4:7a:5d:de:0f:c9:fd:40:bb:91:d8:dd:4c:
         21:b7:b8:79:e3:56:11:16:b8:e7:16:f4:83:ee:23:78:e6:f8:
         0a:df:eb:6e:3d:91:b9:a5:ea:d5:fc:04:25:87:b9:4d:7f:8d:
         66:e9:b9:6d:bc:f9:84:11:da:c5:0a:30:17:15:fd:ec:75:02:
         b2:e6:cb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:17:29 2026 by rpki-client