Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ba243f99-0c02-3caf-abae-a7672e161f0a.roa
File:                     ba243f99-0c02-3caf-abae-a7672e161f0a.roa (raw, json)
Hash identifier:          Uu0L4xO7F8KPoKNt4KxgKBBLAqpwjWy4kVHVwbf/KoE=
Subject key identifier:   EF:92:FB:DE:CA:E9:09:AF:EA:C2:32:A1:94:1F:39:98:85:D1:3A:B1
Certificate issuer:       /CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Certificate serial:       010D0C9F4328584C7D7C41B68F0F5E724AD1B800
Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ba243f99-0c02-3caf-abae-a7672e161f0a.roa
Signing time:             Sun 11 Jan 2026 14:00:39 +0000
ROA not before:           Sun 11 Jan 2026 14:00:39 +0000
ROA not after:            Sat 11 Apr 2026 13:00:39 +0000
asID:                     18875
IP address blocks:        64.66.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7d:7c:41:b6:8f:0f:5e:72:4a:d1:b8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
        Validity
            Not Before: Jan 11 14:00:39 2026 GMT
            Not After : Apr 11 13:00:39 2026 GMT
        Subject: CN=77fec47f-ace4-4601-bfbd-df69e6a72ddd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:23:7a:b5:cf:5d:dd:7b:ed:85:f6:91:2b:a0:
                    3a:8a:d0:6b:30:03:55:85:82:16:4e:7a:46:2f:b0:
                    74:64:e2:7d:a2:1e:2a:d8:fe:20:ba:29:33:42:6f:
                    be:9b:62:19:54:91:81:58:96:bc:d1:4f:e7:9b:16:
                    b7:b0:33:b8:aa:41:33:c7:fc:be:2d:f6:8c:4e:3d:
                    cc:89:20:d5:5a:cd:d1:13:17:52:4b:a1:97:fe:43:
                    5b:91:4b:15:32:31:7d:9b:90:d9:6d:2b:ae:3f:ca:
                    13:e4:d0:b3:e3:0e:51:6a:c0:83:22:2a:a9:50:27:
                    72:7a:bb:f5:19:bd:d8:67:9d:f0:26:4c:fa:e1:65:
                    d3:06:f2:55:08:22:09:7d:63:a9:2a:c5:5a:7f:8c:
                    b6:1d:f6:78:44:90:39:24:4b:b7:0d:69:85:42:fc:
                    7d:87:7c:9c:4d:db:36:43:a0:f1:2f:4c:f9:0f:2c:
                    ae:78:14:3d:cc:8b:67:0a:aa:11:93:58:ac:99:85:
                    70:00:ea:3e:d1:cd:86:1f:ed:6f:bb:6c:b2:7d:17:
                    88:0a:e4:79:c3:72:a7:05:ff:ed:f0:ef:8a:14:17:
                    2b:1e:05:9a:8b:07:ce:25:de:ad:14:79:60:57:d0:
                    9f:8c:b5:e5:b6:22:93:7d:66:16:a4:2e:60:6f:60:
                    ce:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:92:FB:DE:CA:E9:09:AF:EA:C2:32:A1:94:1F:39:98:85:D1:3A:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ba243f99-0c02-3caf-abae-a7672e161f0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl

            X509v3 Authority Key Identifier:
                keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.66.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:0b:8a:67:7c:90:cb:a4:ac:83:87:9b:cf:f3:91:be:17:1a:
         07:9a:77:f0:7a:c6:89:97:b2:1b:5c:ee:82:4c:4c:00:57:de:
         59:43:d9:d0:9f:2c:2a:49:f9:62:84:95:c4:04:ed:a0:f6:51:
         c4:f8:e6:99:16:cb:b9:12:9c:ea:37:b4:48:e7:75:1a:d2:2b:
         23:a2:b1:a0:18:52:d8:3f:de:b6:55:8c:59:01:2c:4d:77:fc:
         1c:09:0c:b5:90:83:6a:a3:f3:84:12:b6:ef:b7:2a:bd:28:35:
         6d:c4:38:b1:b7:6e:8f:17:6c:7e:e1:3e:ff:e2:7a:a3:b8:60:
         1a:03:fa:56:40:2f:22:ff:66:28:a1:fc:a6:2a:4b:92:64:cf:
         79:0b:65:3c:06:f7:65:32:84:27:8d:b2:95:b3:af:1d:0b:c9:
         8c:ae:fc:7f:57:12:a7:b9:69:28:bb:ce:3e:10:e9:3a:d1:cf:
         0f:3a:dc:fc:0d:64:e9:f9:bf:e6:3c:2a:89:61:ab:87:d6:9e:
         e0:18:c0:cf:df:9e:b8:55:26:53:00:17:eb:f1:4c:e8:80:3e:
         99:29:b6:cd:99:3f:cb:fd:95:a8:1c:46:95:9f:3f:5e:05:95:
         1b:b6:f2:c8:92:e8:d6:bb:0e:18:bc:e2:5c:50:5b:d6:c6:bb:
         18:75:23:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:50:01 2026 by rpki-client