Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ea2b8f6b-1d68-3288-867f-4922b4a39175.roa
File:                     ea2b8f6b-1d68-3288-867f-4922b4a39175.roa (raw, json)
Hash identifier:          HcEVJHM7CPRXZvwk7Pvw1PAl41rq/CG4+YQhClttxQg=
Subject key identifier:   B5:29:62:47:24:8D:53:D2:ED:91:9F:1F:7E:2D:40:D6:6B:48:C5:AD
Certificate issuer:       /CN=60a936c7-4a19-44a9-b75d-cc22c274db26
Certificate serial:       010D0C9F4328584C7D7C48552E51F68358CF3880
Authority key identifier: 5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ea2b8f6b-1d68-3288-867f-4922b4a39175.roa
Signing time:             Sun 11 Jan 2026 14:00:39 +0000
ROA not before:           Sun 11 Jan 2026 14:00:39 +0000
ROA not after:            Sat 11 Apr 2026 13:00:39 +0000
asID:                     18875
IP address blocks:        216.20.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:7d:7c:48:55:2e:51:f6:83:58:cf:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a936c7-4a19-44a9-b75d-cc22c274db26
        Validity
            Not Before: Jan 11 14:00:39 2026 GMT
            Not After : Apr 11 13:00:39 2026 GMT
        Subject: CN=b44b9813-db11-43a5-8049-375f430b9929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:aa:c8:19:5f:c3:5e:6e:56:68:a2:72:7a:80:
                    83:c5:54:74:f0:79:aa:11:86:4d:65:4d:44:31:01:
                    5a:77:3f:ef:a3:1d:e0:45:07:5d:fb:e0:41:81:fe:
                    0a:4f:97:21:78:d5:37:92:ed:1a:40:2d:3e:3f:c0:
                    18:55:74:e3:f5:1e:58:6b:51:2a:0f:65:74:32:16:
                    a0:b1:0c:f0:ba:30:8b:e4:92:aa:0a:dc:d6:b1:ac:
                    33:22:52:38:9e:f0:95:6f:85:ff:0c:1d:48:7c:2d:
                    70:1d:ea:b6:8e:95:4f:86:e1:eb:20:25:5e:62:33:
                    5a:3d:17:bb:3f:24:ab:1e:b5:25:dc:fc:a2:3a:33:
                    6d:cb:39:b1:8f:d3:9f:15:3e:21:2b:78:4f:2f:c6:
                    02:e9:b9:e5:6b:db:0b:41:40:4a:6b:52:c7:7e:30:
                    29:1d:db:da:f2:5c:74:46:9a:35:9d:79:94:fb:af:
                    6e:0c:57:2f:f3:48:b7:38:29:0e:e2:e3:62:89:c2:
                    6c:5e:4e:92:62:f9:55:28:13:56:10:43:d1:40:2a:
                    d7:e3:1b:0c:d9:a2:b6:18:3c:bf:3d:03:8e:f4:3b:
                    72:8f:5b:19:3b:38:ad:9d:af:5a:ba:47:a9:63:46:
                    05:16:ea:8e:50:28:1b:58:92:ec:ad:07:67:bb:05:
                    66:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:29:62:47:24:8D:53:D2:ED:91:9F:1F:7E:2D:40:D6:6B:48:C5:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/ea2b8f6b-1d68-3288-867f-4922b4a39175.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26/60a936c7-4a19-44a9-b75d-cc22c274db26.crl

            X509v3 Authority Key Identifier:
                keyid:5E:C1:B1:FA:49:CE:BF:BA:D8:5A:0C:DE:2A:61:2C:3B:EE:72:33:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/60a936c7-4a19-44a9-b75d-cc22c274db26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.20.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:76:4b:db:c4:85:25:bc:af:e6:37:1a:bf:52:90:fe:a1:50:
         08:83:25:2d:52:e5:c6:7a:99:ae:a0:46:0d:9e:a0:40:9d:7f:
         7a:a9:33:07:4c:85:be:94:b0:1d:2a:de:bb:96:0f:27:b2:90:
         a8:c1:d5:7e:ed:f8:19:76:62:7c:69:51:f1:76:d3:ac:56:7d:
         7f:db:a5:e4:be:3c:67:aa:b6:b2:25:e4:83:87:e1:f5:6b:b0:
         4a:5c:4a:68:64:fa:57:ee:d8:ec:a1:ba:8e:48:ba:bb:6d:c7:
         b8:db:1a:e5:dd:8b:39:e8:b4:01:ff:6d:33:54:e0:63:44:c2:
         7c:f0:32:a5:11:34:1b:b7:33:e4:d6:63:52:fe:9c:82:12:b6:
         05:dc:ee:03:0a:c1:04:09:05:81:bb:88:61:74:dd:79:eb:ce:
         f1:fc:34:13:91:37:b4:42:43:6b:34:56:9f:9a:66:a1:66:58:
         f5:c3:2b:3f:a7:ff:f5:a1:af:a7:1e:0e:c6:f3:36:db:33:a7:
         ab:fb:8c:35:1f:3f:ad:db:de:19:4b:a9:ee:be:e4:09:99:a9:
         b3:65:4f:a5:70:d5:11:ae:42:1f:3d:e0:84:81:b4:63:0e:98:
         df:a8:c0:16:8f:f7:06:6a:16:a5:bb:85:d2:93:2f:8c:c2:61:
         2f:ef:b6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:09:18 2026 by rpki-client