Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ca026ced-ab2b-3fa4-8aec-2b95a959f4f6.roa
File:                     ca026ced-ab2b-3fa4-8aec-2b95a959f4f6.roa (raw, json)
Hash identifier:          nFBbqCc21ItvpbHO/ruTYLh4bNkNoSJwa60A6IdV5x0=
Subject key identifier:   58:FF:11:C0:8F:E5:20:F5:4E:66:0B:61:3A:FC:0D:BD:3F:5F:CF:FA
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584F3CE2863095E33F5C1EB60360
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ca026ced-ab2b-3fa4-8aec-2b95a959f4f6.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     62610
IP address blocks:        128.14.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:86:30:95:e3:3f:5c:1e:b6:03:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=46e1b1ba-65de-4426-b593-02b9fa0d2c30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:21:56:70:33:0d:b4:ea:5f:39:ab:08:4a:a6:
                    37:1a:c2:55:68:3b:0a:d5:1a:3e:30:d5:72:2d:92:
                    b4:f3:ba:b9:f0:4e:60:50:af:e5:f6:a8:1f:6e:2d:
                    12:97:ac:9e:3d:d9:ee:46:a7:c7:1c:af:50:7b:16:
                    ee:7a:ee:a1:64:a5:f9:54:a3:08:17:f4:cd:1d:be:
                    b1:32:25:9b:8c:fd:68:ed:e1:f5:ed:40:bb:c6:77:
                    e4:87:dc:76:07:7a:3f:52:12:c6:31:48:1d:24:ad:
                    56:b9:1d:49:d0:ca:ad:5a:69:e4:1d:52:f6:27:79:
                    7e:14:22:05:c9:1c:4e:81:07:75:c8:0d:76:7b:eb:
                    e2:2a:fa:08:10:f8:9a:4c:c8:10:4d:05:9a:8f:36:
                    db:74:2a:37:55:03:de:54:f8:c2:3d:86:c5:83:9e:
                    74:7b:1b:97:1d:fc:4e:88:7e:2b:2d:9c:73:0c:8a:
                    15:b5:de:c5:f2:8c:17:d8:e9:70:5d:a4:58:83:c9:
                    8d:da:83:15:8d:e1:6a:6c:b8:ae:f0:38:ec:45:95:
                    a6:20:5b:38:26:e7:b8:07:f6:91:5a:b0:18:9e:04:
                    50:91:84:69:dd:69:10:1f:0b:53:6e:a9:58:4c:30:
                    50:bb:e4:91:30:69:7e:f8:27:23:89:b7:d0:fa:62:
                    13:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FF:11:C0:8F:E5:20:F5:4E:66:0B:61:3A:FC:0D:BD:3F:5F:CF:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/ca026ced-ab2b-3fa4-8aec-2b95a959f4f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.14.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:08:c3:07:04:b8:f3:69:e0:09:a1:84:48:4c:83:56:9c:62:
         19:df:3e:9c:e5:c8:18:22:25:85:bc:53:ac:e1:e6:fe:0f:f8:
         40:8c:6c:ee:0d:db:6b:0a:8f:14:17:08:cf:28:43:2a:35:f5:
         ac:89:e8:28:a9:bc:66:2f:55:06:79:bb:c5:ef:91:68:eb:f4:
         79:8b:60:46:c8:ba:19:f9:ef:ac:c5:8c:7e:45:32:5c:29:e5:
         d1:e6:87:d4:0d:f3:ba:60:39:00:50:92:35:88:26:9f:d9:1d:
         dd:49:67:87:4c:d1:f5:60:4a:7a:35:78:1d:4c:67:92:2b:46:
         b7:6f:57:39:89:31:00:34:da:b3:a6:7e:8e:92:e2:91:33:fc:
         5a:5c:64:e8:89:71:0f:f5:9e:b3:de:cf:a2:60:1e:11:ff:0d:
         e9:f6:a2:0d:52:fa:f8:7e:d3:c2:56:72:aa:81:1c:84:f9:55:
         ee:ce:55:59:26:45:1d:1f:52:26:3a:60:ea:6c:84:cb:34:49:
         ad:61:0e:7c:38:f7:93:94:d8:27:b4:be:c3:88:03:13:7e:14:
         26:bc:f4:95:50:b3:0a:27:a8:a0:9b:a9:98:4f:72:9d:39:91:
         51:81:c8:ce:b0:5c:36:ec:20:af:24:c1:9d:99:1b:80:45:07:
         00:ec:c4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:37:20 2026 by rpki-client