Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/5688d85a-c7fa-30b4-851c-65ced22445bf.roa
File:                     5688d85a-c7fa-30b4-851c-65ced22445bf.roa (raw, json)
Hash identifier:          rn5eZjW/abw8ZSABALMLKHn88tQRIcJ7y8yhW/MjcKs=
Subject key identifier:   F2:82:8B:6C:F3:BE:24:66:21:D2:DA:9E:6C:EA:0A:DA:F3:DD:BC:41
Certificate issuer:       /CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
Certificate serial:       010D0C9F4328584D709468C5D1BF7EA266C388E0
Authority key identifier: 36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/5688d85a-c7fa-30b4-851c-65ced22445bf.roa
Signing time:             Wed 08 Apr 2026 15:51:08 +0000
ROA not before:           Wed 08 Apr 2026 15:51:08 +0000
ROA not after:            Tue 07 Jul 2026 15:51:08 +0000
asID:                     5650
IP address blocks:        141.195.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:70:94:68:c5:d1:bf:7e:a2:66:c3:88:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
        Validity
            Not Before: Apr  8 15:51:08 2026 GMT
            Not After : Jul  7 15:51:08 2026 GMT
        Subject: CN=124f1346-79ba-4719-94a4-d0f67e4ef380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:13:2f:73:57:52:27:a2:f3:25:43:4b:18:d2:
                    03:2b:43:05:ac:5c:77:10:4c:5d:80:cb:94:74:60:
                    49:50:7b:e1:5e:7e:bd:c7:30:c9:e1:b1:56:40:0e:
                    27:7a:09:f5:1b:82:d6:a2:98:74:1b:84:f6:8f:ce:
                    cf:3a:64:05:f2:dd:7e:30:c3:4a:c9:bf:2e:91:fc:
                    12:98:dd:36:ab:06:29:b8:64:bb:15:79:4a:36:65:
                    0a:c2:ee:7d:5c:89:7a:1b:3f:d1:8f:36:44:51:ea:
                    ee:12:46:9a:1b:29:38:69:27:31:e3:e9:ee:bf:a9:
                    82:61:d0:02:4f:60:f3:6d:49:ea:bf:33:85:2c:96:
                    79:4e:8a:3b:92:e9:e8:ea:13:fc:d5:2e:0d:65:ee:
                    e0:40:6b:24:be:f4:9a:51:52:14:19:80:8a:93:87:
                    93:dd:a8:af:58:76:33:f9:12:3f:37:c6:d6:04:2b:
                    43:10:e0:21:cf:e2:e4:43:d7:dc:1b:20:69:6d:7c:
                    e3:bc:45:a4:be:12:6b:57:c9:6e:36:ae:eb:01:65:
                    f2:8c:46:fe:e4:8d:be:e6:a3:ad:be:04:59:13:c7:
                    4b:86:4d:66:0d:8d:e3:7d:80:7f:01:62:0b:99:6b:
                    0b:b7:76:be:2c:ba:e2:94:14:89:d1:b0:08:6d:52:
                    aa:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:82:8B:6C:F3:BE:24:66:21:D2:DA:9E:6C:EA:0A:DA:F3:DD:BC:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/5688d85a-c7fa-30b4-851c-65ced22445bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl

            X509v3 Authority Key Identifier:
                keyid:36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c5:61:4f:26:89:61:4a:f6:f3:df:dc:c6:74:d2:4d:16:9d:
         fa:9f:e4:87:c9:f3:2e:8b:2b:36:20:74:41:56:e2:60:0a:36:
         67:f2:05:4c:53:6e:a0:81:59:5a:90:89:9e:6e:e3:d1:bc:aa:
         58:96:aa:76:49:78:2c:bc:3f:11:db:3f:f7:23:0b:9a:ea:e6:
         20:71:63:c9:9a:a2:46:65:ee:af:c2:f7:3a:d9:86:89:0e:0b:
         c0:95:32:be:99:da:33:ff:df:d0:b7:00:18:f1:ce:56:2b:e3:
         90:25:59:2b:18:a6:6b:3e:22:f6:a2:2b:78:ce:87:3b:69:00:
         8b:2b:2d:bb:f0:30:ca:aa:87:96:96:10:92:ff:70:1c:e7:33:
         4f:3d:84:bf:c9:13:75:52:33:3d:bb:23:9c:c2:cd:0c:6e:90:
         d6:69:d9:c2:10:34:cc:cd:72:09:68:c1:f5:0a:53:3c:70:c4:
         44:66:0e:73:f4:46:95:19:7c:a9:6f:8e:73:61:82:5d:7f:73:
         08:e2:cd:0d:45:aa:f5:be:4e:41:82:01:47:4b:5f:e7:34:37:
         bc:fd:43:cb:73:02:09:64:ff:24:d6:78:54:ba:af:62:f1:6e:
         33:d1:27:a6:e4:0f:5f:24:b4:bc:b9:87:2d:1d:26:98:62:83:
         68:ab:14:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:37:47 2026 by rpki-client