Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69/26760f49-b861-3db7-a8c9-7190a72d875d.roa
File:                     26760f49-b861-3db7-a8c9-7190a72d875d.roa (raw, json)
Hash identifier:          eC2lzCcI30w3oKfRu1tjG0l0PRaaYjJS/5sw8qNyOHE=
Subject key identifier:   D7:29:E3:CF:AE:88:DB:89:43:CA:EC:52:92:76:94:51:57:30:2B:11
Certificate issuer:       /CN=60d79450-5cfd-43d5-b1eb-e5cb0158ee69
Certificate serial:       010D0C9F4328584F3CE2723E09F7631651AD7C80
Authority key identifier: 56:E8:EC:33:1C:94:46:26:2A:D8:B5:F7:11:E0:A3:17:08:06:44:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69/26760f49-b861-3db7-a8c9-7190a72d875d.roa
Signing time:             Sun 20 Sep 2026 13:00:12 +0000
ROA not before:           Sun 20 Sep 2026 13:00:12 +0000
ROA not after:            Sat 19 Dec 2026 14:00:12 +0000
asID:                     402145
IP address blocks:        199.245.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69/60d79450-5cfd-43d5-b1eb-e5cb0158ee69.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69/60d79450-5cfd-43d5-b1eb-e5cb0158ee69.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3c:e2:72:3e:09:f7:63:16:51:ad:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60d79450-5cfd-43d5-b1eb-e5cb0158ee69
        Validity
            Not Before: Sep 20 13:00:12 2026 GMT
            Not After : Dec 19 14:00:12 2026 GMT
        Subject: CN=a53cc21c-853b-4b12-accb-c432da4528d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f9:95:5b:23:07:e6:fc:d2:15:9a:f4:33:8f:
                    6b:73:07:a5:a6:63:0a:42:62:5b:09:17:13:c3:de:
                    57:e5:ef:10:67:f8:6c:61:e2:3f:4c:3d:85:27:63:
                    26:d1:b1:f7:47:f1:7a:88:ac:18:d1:00:6d:9f:92:
                    25:e5:d7:d0:43:43:fb:89:71:5e:54:d4:c3:6f:af:
                    26:e8:6a:0e:09:36:3d:c9:fb:fb:f2:ac:7f:93:a5:
                    49:1a:08:68:50:7d:4d:8a:79:1b:c4:da:73:3d:2e:
                    da:49:12:72:2c:34:0d:04:0e:04:7d:37:70:cc:f2:
                    2f:5b:52:ec:1d:a2:03:08:c4:eb:4a:92:b7:cc:75:
                    f3:09:4b:b1:fd:bd:ac:7b:1a:95:30:d1:87:97:47:
                    1a:98:3b:27:e5:1e:2e:eb:a8:f7:dc:93:63:2c:bf:
                    52:fb:2d:15:a5:75:5a:7c:ff:11:91:88:0f:68:ef:
                    5f:66:77:71:23:be:b7:5e:e0:87:dd:d0:39:ea:48:
                    e1:e4:6c:d6:33:ae:eb:2b:15:33:2c:64:73:1d:ef:
                    d1:1f:a7:67:ab:6c:0b:05:60:7e:8d:e5:12:2f:43:
                    5d:7f:35:31:bb:d1:b7:9e:66:b9:a3:9a:df:a8:0d:
                    71:ae:da:e5:77:1e:6c:3c:2f:4f:91:25:ea:c4:04:
                    a1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:29:E3:CF:AE:88:DB:89:43:CA:EC:52:92:76:94:51:57:30:2B:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69/26760f49-b861-3db7-a8c9-7190a72d875d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69/60d79450-5cfd-43d5-b1eb-e5cb0158ee69.crl

            X509v3 Authority Key Identifier:
                keyid:56:E8:EC:33:1C:94:46:26:2A:D8:B5:F7:11:E0:A3:17:08:06:44:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/60d79450-5cfd-43d5-b1eb-e5cb0158ee69.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.245.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:e0:ff:d6:26:a9:36:a4:37:af:3e:a5:36:aa:84:b7:b5:f0:
         69:90:8d:52:39:f2:1a:1a:2d:de:1d:5c:79:a6:90:50:ca:be:
         43:f3:71:10:c3:43:8d:2a:e1:1e:b0:60:c5:e8:66:06:51:e4:
         f6:20:59:a4:24:2f:d8:f8:d1:fb:c8:cd:ea:e9:f6:c5:8d:cf:
         2d:8e:cf:e0:01:dc:62:83:9e:34:33:e6:1e:84:67:83:a1:c7:
         3f:ac:f9:7e:65:0e:34:e1:98:7e:0b:c5:cb:4d:c5:4b:09:a1:
         53:f3:b2:08:91:47:d6:2b:89:ab:7f:d5:9e:42:70:db:a0:5f:
         23:00:ff:bd:ca:88:89:0a:ab:04:5f:43:23:86:9e:21:89:10:
         5a:d8:98:fc:d4:4f:ee:83:91:06:4b:dc:71:27:a0:74:7b:6a:
         8a:49:04:f4:ec:7d:ff:5b:cc:c0:c0:2a:c7:a0:b4:28:fc:c3:
         af:06:78:7e:dd:f4:c2:3f:14:b7:ed:59:85:04:df:06:7a:0f:
         d1:cd:1d:d0:c6:34:14:00:1d:d4:06:52:91:9c:55:5b:a6:d5:
         e0:6d:ab:6f:16:8c:00:a5:87:fb:5a:b9:5c:39:a9:54:91:8c:
         64:c7:c9:8b:85:77:ee:16:60:60:f5:fd:39:5f:8f:38:25:f5:
         5b:a2:19:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:58:36 2026 by rpki-client