Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/3a314440-3852-3ede-949e-440ef10c8f34.roa
File:                     3a314440-3852-3ede-949e-440ef10c8f34.roa (raw, json)
Hash identifier:          PxX5VbeUDEp31Zgw8xBDRltg0ftQh1taI/gDXWKqaGw=
Subject key identifier:   51:2F:DA:48:9F:3A:AF:64:8C:4D:EB:72:0D:8A:FE:1F:F4:F8:17:70
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584CCE71FC202D263B03196DAF00
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/3a314440-3852-3ede-949e-440ef10c8f34.roa
Signing time:             Mon 09 Feb 2026 14:00:39 +0000
ROA not before:           Mon 09 Feb 2026 14:00:39 +0000
ROA not after:            Sun 10 May 2026 13:00:39 +0000
asID:                     14618
IP address blocks:        167.234.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:ce:71:fc:20:2d:26:3b:03:19:6d:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Feb  9 14:00:39 2026 GMT
            Not After : May 10 13:00:39 2026 GMT
        Subject: CN=379e9b2d-824f-42dc-b0b3-51d56bac9cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ea:f5:80:78:3e:87:e5:b4:25:f2:dc:bf:cd:
                    09:88:28:7e:51:03:d6:8a:de:1a:72:f5:7f:5f:26:
                    ce:e4:6b:1d:f8:00:72:8f:77:78:2f:78:82:6d:62:
                    82:70:96:f3:33:25:87:06:f0:a6:bc:37:fc:bd:0c:
                    40:4c:10:5b:ad:5b:70:b5:14:6b:ef:8b:37:a7:5d:
                    8b:d1:67:b9:9a:57:7f:4c:08:8b:17:c0:27:ec:f8:
                    d5:9c:17:28:08:32:5a:99:0d:a6:52:b5:05:8e:cb:
                    60:4a:d5:86:cc:dc:12:1e:a6:f0:5c:27:27:05:e9:
                    53:6c:52:fb:f7:17:ac:8d:c3:ea:30:82:20:b5:a8:
                    f1:a3:7f:5b:25:06:94:6e:c8:09:b9:b9:e2:b7:a9:
                    8f:c4:4c:e1:a9:b9:a7:2c:57:46:6f:23:2e:9e:58:
                    53:43:fe:48:89:d8:ec:d7:e1:9c:00:91:f0:71:ac:
                    5f:3c:36:54:00:5a:6e:f9:9e:90:d2:77:68:5a:3e:
                    a1:f2:89:95:10:06:97:8d:c7:7f:48:63:37:9f:22:
                    d1:03:6f:5e:0d:f0:d7:d1:79:c2:1b:63:61:96:cf:
                    8d:90:8b:43:84:68:b2:bc:16:48:47:73:19:c7:8f:
                    34:a5:aa:88:a7:c0:e9:4d:05:94:76:04:1d:1e:5e:
                    b6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2F:DA:48:9F:3A:AF:64:8C:4D:EB:72:0D:8A:FE:1F:F4:F8:17:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/3a314440-3852-3ede-949e-440ef10c8f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e1:7c:04:8d:ed:e7:67:f2:f4:1d:32:cb:c4:e1:3d:3c:cd:
         32:05:b5:b2:cd:a2:ea:86:6d:81:ab:48:af:64:d1:0a:7a:e5:
         56:70:12:28:3c:f2:ba:63:0e:a7:fb:67:0e:c7:5e:9f:24:f9:
         dd:a6:ed:9b:88:f0:da:cd:2f:74:23:9f:93:24:b0:07:7d:75:
         51:0f:c0:7d:3b:7e:9c:a2:eb:2d:ba:61:61:ec:a5:d3:2b:e8:
         0a:27:4d:9c:9b:72:f9:82:df:1f:11:53:be:ce:ee:01:31:c1:
         ac:2c:0e:47:1e:aa:90:61:de:08:b7:17:f5:84:2e:8d:82:e8:
         61:fe:65:c6:bc:a6:06:fe:16:aa:c5:36:ed:ab:fd:93:4c:a9:
         12:b9:dd:ff:92:80:69:62:da:4d:db:f7:f9:f7:43:39:16:d1:
         8f:4b:9f:2d:81:55:9f:92:a4:ea:5f:3a:7c:6b:1f:4e:2b:b4:
         5e:cd:d2:e9:9d:de:a3:86:f2:ab:e7:00:60:1f:51:a9:bd:c0:
         3e:76:b1:f0:ac:6e:48:4b:5c:b3:65:8a:71:99:8c:ce:4c:ea:
         e4:e1:1f:9c:fa:db:27:da:9b:a4:9f:18:de:67:f8:17:fd:80:
         19:5c:ba:3c:2c:ea:27:dc:80:9a:a7:8f:c4:47:d1:a7:dd:ab:
         dd:56:1a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:10:46 2026 by rpki-client