Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f60a8a51-92fd-467a-adef-b4528e0a6a7a/c5ec543c-b9e7-34bf-ba72-303a3136fc2f.roa
File:                     c5ec543c-b9e7-34bf-ba72-303a3136fc2f.roa (raw, json)
Hash identifier:          YTFi3S1MshiK/n6jXEMp8vJ7EeBcjPHevXijox3KLQY=
Subject key identifier:   B9:0A:39:2B:ED:37:D4:64:29:F2:15:06:66:6E:98:DA:4D:85:73:A2
Certificate issuer:       /CN=f60a8a51-92fd-467a-adef-b4528e0a6a7a
Certificate serial:       010D0C9F4328584CB2C1E269FBFAF823AE402B00
Authority key identifier: 8E:45:6F:25:D7:2A:58:81:82:DF:E9:DB:49:35:31:D4:18:20:63:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f60a8a51-92fd-467a-adef-b4528e0a6a7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f60a8a51-92fd-467a-adef-b4528e0a6a7a/c5ec543c-b9e7-34bf-ba72-303a3136fc2f.roa
Signing time:             Fri 30 Jan 2026 15:59:11 +0000
ROA not before:           Fri 30 Jan 2026 15:59:11 +0000
ROA not after:            Thu 30 Apr 2026 14:59:11 +0000
asID:                     17891
IP address blocks:        199.91.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f60a8a51-92fd-467a-adef-b4528e0a6a7a/f60a8a51-92fd-467a-adef-b4528e0a6a7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f60a8a51-92fd-467a-adef-b4528e0a6a7a/f60a8a51-92fd-467a-adef-b4528e0a6a7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f60a8a51-92fd-467a-adef-b4528e0a6a7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:b2:c1:e2:69:fb:fa:f8:23:ae:40:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60a8a51-92fd-467a-adef-b4528e0a6a7a
        Validity
            Not Before: Jan 30 15:59:11 2026 GMT
            Not After : Apr 30 14:59:11 2026 GMT
        Subject: CN=8c30f87d-a5a3-4d12-bfc3-cecb447f0a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0a:d2:1f:31:a1:fa:99:8b:cf:aa:e9:34:bd:
                    a2:41:3a:6a:df:fb:cb:f2:b2:82:38:22:fb:4b:d1:
                    20:3f:5f:1b:82:1a:82:05:41:e2:51:47:94:ff:69:
                    6c:75:36:e7:01:86:ab:fb:e6:0c:34:6a:77:b8:5d:
                    5a:a8:c2:fe:16:a9:ba:e0:fb:e1:fc:ca:c7:7d:8f:
                    20:6f:9b:9c:56:56:ff:0a:fa:0f:89:aa:50:62:91:
                    02:4f:86:2d:ab:ff:a4:9c:b9:9e:9a:07:38:7e:0f:
                    8d:b6:fa:46:f3:fc:cf:49:d4:19:06:25:35:9a:50:
                    d0:23:aa:06:29:cc:22:e0:09:44:e4:21:86:90:b3:
                    cb:cf:96:66:20:0c:35:75:6c:89:25:0c:bd:dd:58:
                    f2:ec:6a:5a:e0:7d:6b:91:64:21:43:9d:49:31:e4:
                    f9:f8:86:0f:e5:f8:3e:26:92:da:4d:c4:80:62:4e:
                    5b:8d:a2:f9:54:eb:ed:86:7f:7a:4e:67:10:d0:a1:
                    b9:fd:a6:13:80:28:39:1e:b9:c8:86:63:44:60:e3:
                    d3:f9:38:f1:9a:9a:7e:2b:43:83:ab:9f:5e:fd:0f:
                    08:b6:46:f2:c2:b2:16:ec:8b:34:dc:6a:d7:8b:95:
                    0e:30:e5:45:70:ed:08:86:b6:98:6a:f8:65:69:fa:
                    39:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0A:39:2B:ED:37:D4:64:29:F2:15:06:66:6E:98:DA:4D:85:73:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f60a8a51-92fd-467a-adef-b4528e0a6a7a/c5ec543c-b9e7-34bf-ba72-303a3136fc2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f60a8a51-92fd-467a-adef-b4528e0a6a7a/f60a8a51-92fd-467a-adef-b4528e0a6a7a.crl

            X509v3 Authority Key Identifier:
                keyid:8E:45:6F:25:D7:2A:58:81:82:DF:E9:DB:49:35:31:D4:18:20:63:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/f60a8a51-92fd-467a-adef-b4528e0a6a7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:60:28:ba:58:18:6d:39:69:f0:13:29:0e:da:d0:a8:69:d6:
         f1:dc:49:2a:d2:93:e9:6d:02:da:a5:f5:37:db:a3:83:68:e7:
         90:84:fb:6f:53:4b:37:1e:f7:1e:bf:38:48:65:91:2f:4b:9c:
         a7:ab:d0:00:d6:2b:98:a3:e2:8c:96:19:53:eb:0d:d1:d7:e4:
         44:b6:00:92:70:17:9f:ae:72:7f:c6:49:54:5a:29:07:78:3c:
         0d:7b:c7:2e:db:39:c2:14:d9:ae:00:0a:35:7d:28:57:0e:46:
         99:a7:51:3d:c6:8d:46:49:35:72:18:fd:cf:38:b9:8f:87:b4:
         7d:fc:30:da:5d:02:7a:a7:e9:11:a9:aa:2f:ed:27:b3:cd:26:
         55:84:1b:98:40:0a:90:02:17:1e:89:23:86:90:de:11:fa:a3:
         3f:15:49:62:b3:6e:79:eb:60:91:2a:ab:39:dc:7d:46:6d:8c:
         64:cf:b0:cf:a8:b2:65:28:07:a1:ce:3c:d6:d6:43:9b:73:1c:
         09:4a:f3:cd:5a:b5:64:11:9e:b6:75:cd:aa:5c:20:48:df:41:
         c8:d0:6d:fb:bc:da:d6:e9:67:f2:c3:06:87:98:17:32:7d:35:
         dd:c4:6f:32:23:a2:8e:b5:ce:93:f9:22:25:09:42:84:c7:98:
         cf:5e:5a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:52:44 2026 by rpki-client