Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1e0ca83f-24c8-35be-be76-db572c9a7dab.roa
File:                     1e0ca83f-24c8-35be-be76-db572c9a7dab.roa (raw, json)
Hash identifier:          UtlWPvrRC8KFs+r6CjE4sa+FK26TRZ07pvQREATKjnc=
Subject key identifier:   67:C3:0A:58:7C:23:2B:ED:C4:C9:F0:9C:55:12:C7:6A:70:18:72:C5
Certificate issuer:       /CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
Certificate serial:       010D0C9F4328584E210EF71544DEEF592E0EBFC0
Authority key identifier: B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1e0ca83f-24c8-35be-be76-db572c9a7dab.roa
Signing time:             Wed 10 Jun 2026 21:00:11 +0000
ROA not before:           Wed 10 Jun 2026 21:00:11 +0000
ROA not after:            Tue 08 Sep 2026 21:00:11 +0000
asID:                     14618
IP address blocks:        149.72.106.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:21:0e:f7:15:44:de:ef:59:2e:0e:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fce230e-0fe6-4ddf-979c-0be2349b7c0b
        Validity
            Not Before: Jun 10 21:00:11 2026 GMT
            Not After : Sep  8 21:00:11 2026 GMT
        Subject: CN=b698b2b6-5904-4724-aadd-b19a8727018d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2c:7e:34:87:ce:f9:e1:b2:08:5f:90:f4:b2:
                    bb:c5:b8:18:2a:62:05:6e:75:b0:1f:b2:97:88:0e:
                    45:16:6d:2c:e7:f1:4e:ac:a3:af:69:a2:80:73:2b:
                    9d:57:cf:d3:db:07:eb:59:38:3c:f2:e7:b3:b7:1e:
                    75:64:9f:a8:cf:b2:54:81:35:76:d7:93:97:d3:28:
                    b4:be:ad:c6:ab:0c:41:dd:85:a6:9c:86:30:19:aa:
                    a5:7c:46:1d:65:87:54:73:f7:c0:98:4b:d7:b8:f9:
                    01:13:57:21:c5:6a:a8:a5:a1:d5:a4:e5:a6:e2:22:
                    39:80:20:c5:d3:97:84:06:2a:0d:d2:0a:97:43:c8:
                    77:d3:6e:b9:b5:11:49:c6:ad:c2:e3:5f:1b:93:53:
                    35:97:50:d7:d8:78:56:31:66:bd:c5:71:02:eb:a6:
                    92:50:d8:0d:4d:30:86:9d:73:05:38:72:a5:7f:4e:
                    46:f5:13:0f:37:5a:8b:58:49:13:6d:0d:6a:77:ce:
                    3e:35:44:9e:ec:69:8a:44:2d:8e:b3:26:8e:b4:2e:
                    03:08:ea:77:2f:0a:17:fa:ee:57:bf:35:01:99:06:
                    84:95:cf:fc:53:71:1e:28:8f:dd:39:dc:d6:50:e4:
                    0f:d7:aa:c3:ad:9d:a7:5f:b7:ab:47:19:f6:aa:18:
                    74:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C3:0A:58:7C:23:2B:ED:C4:C9:F0:9C:55:12:C7:6A:70:18:72:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/1e0ca83f-24c8-35be-be76-db572c9a7dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.crl

            X509v3 Authority Key Identifier:
                keyid:B3:34:32:A1:5F:60:BA:95:31:B8:25:F3:92:BD:4A:F5:D2:53:E7:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4fce230e-0fe6-4ddf-979c-0be2349b7c0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.72.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:a4:7d:db:b1:02:19:48:5c:35:91:66:ed:43:4f:f4:77:6c:
         9d:de:0f:9f:41:a8:49:5d:d1:25:15:15:4b:dd:86:92:0f:19:
         27:87:48:2d:49:f7:82:dc:ee:22:e1:38:9e:93:6f:bc:11:07:
         2f:6a:e6:c9:bb:66:64:26:1b:5c:18:5e:29:63:d7:d4:f2:01:
         b9:dd:ee:d2:db:76:45:53:91:85:e9:19:b6:ca:48:ca:02:d5:
         22:ce:ca:dd:af:2a:a3:a7:2e:e5:de:40:97:2d:9d:c9:04:c3:
         95:f6:08:b8:fb:15:93:da:73:b1:4d:0a:78:77:89:f8:9f:da:
         78:c8:9e:21:39:ad:30:68:12:55:93:d2:6b:96:d3:cf:44:ea:
         02:a3:4b:af:c0:84:ce:5a:ec:d6:3e:1e:0c:24:93:00:26:e0:
         e2:e3:9e:58:52:de:c4:75:91:22:c7:57:b3:e5:3c:a7:07:ed:
         36:0c:09:e1:6a:87:df:5d:1e:45:fa:2c:88:14:cf:9a:0e:94:
         46:33:2e:ad:e2:20:f6:58:dc:f1:e6:9d:e1:b3:6d:d3:02:cf:
         35:98:b3:77:b7:b5:6b:c6:d6:f8:06:37:f9:ad:0a:b3:91:00:
         89:16:ad:bf:d6:5c:29:92:f8:e1:1c:62:db:ec:ef:9e:0e:c9:
         2f:a6:4e:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:18:05 2026 by rpki-client