Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/02c67eec-fa8e-34db-b94d-008faf554b49.roa
File:                     02c67eec-fa8e-34db-b94d-008faf554b49.roa (raw, json)
Hash identifier:          +GmzeZl2xa+rdJYJxREFs9LHQUPTtqKcrNXoWae1BhU=
Subject key identifier:   0F:70:C4:28:FA:61:3D:59:16:58:53:5A:68:74:A5:21:42:A8:49:FD
Certificate issuer:       /CN=c43335db-c55b-443e-b20c-5c74e1c256c9
Certificate serial:       010D0C9F4328584C9ACC5BA9FA28F1FAE9944480
Authority key identifier: C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/02c67eec-fa8e-34db-b94d-008faf554b49.roa
Signing time:             Thu 22 Jan 2026 02:00:31 +0000
ROA not before:           Thu 22 Jan 2026 02:00:31 +0000
ROA not after:            Wed 22 Apr 2026 01:00:31 +0000
asID:                     54535
IP address blocks:        146.197.60.0/23 maxlen: 23
                          146.197.62.0/24 maxlen: 24
                          146.197.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:9a:cc:5b:a9:fa:28:f1:fa:e9:94:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c43335db-c55b-443e-b20c-5c74e1c256c9
        Validity
            Not Before: Jan 22 02:00:31 2026 GMT
            Not After : Apr 22 01:00:31 2026 GMT
        Subject: CN=ab73fe4a-1b60-403d-8322-1d5cd88661fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a7:eb:b1:fb:2b:99:29:7a:bd:37:29:26:92:
                    9b:08:75:13:68:85:8d:9f:5b:b5:aa:bc:5b:db:7b:
                    33:a5:4a:3a:4f:14:68:8f:cd:0e:c0:77:a4:e8:09:
                    24:e6:7e:0e:71:29:00:e6:2f:71:2e:bb:87:8a:ef:
                    05:ba:5f:40:13:9a:03:f6:c6:b8:38:36:77:ab:fe:
                    ad:03:0e:89:10:55:5d:df:6b:f3:8c:7d:59:fa:c4:
                    76:7c:22:5b:93:46:6c:c0:f9:fd:b6:11:f5:76:2d:
                    8d:59:b8:a9:65:af:2c:2a:b8:b4:6f:e5:b2:46:77:
                    aa:0b:d0:83:25:16:0d:c5:d3:82:d6:68:8c:e7:44:
                    9d:d0:f4:f6:e7:e6:1b:56:4f:79:97:d3:c3:d1:45:
                    9a:8f:59:39:c2:ee:97:b7:17:ab:fb:75:c2:1d:e4:
                    b1:28:d5:24:2d:6a:10:be:57:42:c7:7e:fb:63:0a:
                    6f:89:da:0d:97:c6:fa:a5:d4:e2:f0:e8:ee:40:ed:
                    3c:b4:fc:ee:ad:a1:c9:b0:89:a9:a6:ce:ea:b9:04:
                    02:a4:c1:a1:b0:b3:52:63:f7:ce:00:f0:69:57:e4:
                    6a:49:45:5b:9c:2a:fd:2a:4f:92:c4:e5:8a:b0:c3:
                    fa:44:a0:c7:00:fe:03:01:25:6f:e1:f8:6d:30:c6:
                    57:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:70:C4:28:FA:61:3D:59:16:58:53:5A:68:74:A5:21:42:A8:49:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/02c67eec-fa8e-34db-b94d-008faf554b49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9/c43335db-c55b-443e-b20c-5c74e1c256c9.crl

            X509v3 Authority Key Identifier:
                keyid:C4:0B:DA:80:5B:40:21:B8:D0:D4:AE:DD:16:A8:92:8A:62:B3:65:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c43335db-c55b-443e-b20c-5c74e1c256c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.197.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:3b:3d:bd:6f:f3:07:0c:43:5f:6f:ed:d6:6e:85:10:46:db:
         9f:38:76:8b:cb:ad:1c:be:90:3d:7b:3d:20:0c:33:b3:fc:85:
         be:fb:5d:44:fb:70:56:e3:48:33:97:2f:8e:1a:de:cc:f1:f8:
         da:53:fc:85:b9:e0:e7:37:15:05:d5:28:ab:98:2e:d3:8c:86:
         22:d2:0e:93:32:ea:10:a7:ab:29:1f:01:be:51:01:ae:fc:59:
         e3:5d:56:69:de:71:44:bd:1b:fb:10:da:16:25:0e:a1:6b:b7:
         a6:59:b4:d0:70:a2:07:74:23:cf:1b:b0:df:be:24:29:3c:27:
         82:56:40:06:b0:20:c5:3a:a5:1d:1f:f5:0d:f6:5e:85:b3:b8:
         e5:3f:fe:82:78:3f:c0:53:3d:98:d2:e4:93:b2:d3:c8:8b:71:
         6f:35:3d:ae:ec:0b:14:f8:19:95:57:e9:aa:86:bc:b7:fa:82:
         56:1c:c1:d7:1f:5c:0b:93:33:0d:f6:3c:51:c0:b3:c7:ee:86:
         4f:ec:ab:c2:41:4c:94:d3:f8:9b:2e:91:bf:36:ba:91:bc:91:
         2f:a6:5f:60:03:04:1b:33:e4:8a:0b:f3:cc:00:cd:d0:f1:2e:
         14:f8:cd:fc:31:7d:2e:4e:8d:32:b2:8b:0a:54:98:fd:85:d7:
         59:66:bf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:41:56 2026 by rpki-client