Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bb96dd0-7d4b-3d10-aa94-d1779a21f964.roa
File:                     7bb96dd0-7d4b-3d10-aa94-d1779a21f964.roa (raw, json)
Hash identifier:          TdwXZ+7gSSRKOKNNSuwGaZU/QmZRiazlpLALRMi9vHw=
Subject key identifier:   60:8D:8E:01:92:E7:62:E6:ED:78:A3:05:A3:E0:CE:86:01:AA:13:0B
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584D00B26A889593EDB58E0BDDFC
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bb96dd0-7d4b-3d10-aa94-d1779a21f964.roa
Signing time:             Fri 27 Feb 2026 14:00:40 +0000
ROA not before:           Fri 27 Feb 2026 14:00:40 +0000
ROA not after:            Thu 28 May 2026 13:00:40 +0000
asID:                     63949
IP address blocks:        143.42.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:00:b2:6a:88:95:93:ed:b5:8e:0b:dd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 27 14:00:40 2026 GMT
            Not After : May 28 13:00:40 2026 GMT
        Subject: CN=edfb5dc8-c70b-4da1-940e-cd998541777e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:be:ce:1a:3f:cf:64:40:c3:d9:ed:1c:bc:5a:
                    17:29:d5:e1:f3:10:00:71:b1:ab:dd:4e:cb:4a:a8:
                    5a:5d:e7:19:a5:5b:16:ce:51:eb:77:8d:9d:c5:1c:
                    61:3e:c7:f0:db:06:ef:df:02:a0:c4:61:48:27:ea:
                    d7:b0:50:68:58:d0:ac:31:07:03:52:3e:70:4e:1e:
                    57:8c:af:69:c4:87:eb:cf:41:9a:47:e1:9b:7e:cd:
                    6d:9f:47:c3:2a:60:12:41:22:08:f7:40:40:b2:92:
                    90:8c:2b:b1:60:b3:ad:a5:8f:75:05:f8:b5:8d:eb:
                    0a:ff:13:86:0b:02:97:c5:2f:e0:62:52:9e:f8:eb:
                    c3:e7:99:98:75:5f:ef:e1:1d:b8:91:a1:2d:28:39:
                    b9:72:a5:1b:4c:8a:c6:76:09:5a:5a:25:51:ad:74:
                    f9:0a:2e:2e:28:36:93:d6:75:33:74:6d:e3:1c:17:
                    3c:51:6a:a6:df:95:21:c6:80:3e:82:8d:13:dc:c7:
                    f4:dd:0b:31:c3:13:38:96:3b:f1:cf:7f:21:2f:6b:
                    80:53:69:6c:d1:0d:d0:3d:cd:a4:41:26:80:23:2a:
                    9b:43:0e:6e:c9:13:29:97:50:d5:6c:9e:56:5d:af:
                    e3:e1:ab:bc:85:4d:6e:55:02:a9:65:14:83:ec:56:
                    43:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:8D:8E:01:92:E7:62:E6:ED:78:A3:05:A3:E0:CE:86:01:AA:13:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/7bb96dd0-7d4b-3d10-aa94-d1779a21f964.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.42.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:5a:f3:fd:e9:3f:45:30:01:3d:04:61:25:83:9f:63:cf:13:
         d1:b6:8e:9d:52:52:c0:45:30:bb:d5:a6:27:6a:50:45:bc:91:
         d6:b2:a4:7e:e3:61:56:34:70:ab:cd:18:3a:00:cc:2f:91:a2:
         18:26:19:1e:28:39:58:4c:e8:a3:52:36:bf:e1:c6:12:b5:5c:
         86:43:40:b3:ed:51:1e:f4:42:ba:4a:d2:61:85:a9:9c:6d:47:
         24:9e:06:73:4c:c8:3c:4f:7a:ab:9e:a4:59:2c:0c:86:8b:12:
         20:e3:08:63:8b:02:b0:b6:5b:f2:65:fa:af:48:8c:ae:3c:82:
         34:ca:52:75:3c:0d:fd:aa:95:65:d0:b7:fd:a5:b0:15:eb:cc:
         95:da:22:fd:8b:4a:af:fa:77:63:58:f7:98:1c:ef:84:53:57:
         a9:9d:5b:39:d2:c9:8e:b8:f6:b3:d3:37:6f:27:7c:24:1a:f1:
         f0:bf:70:78:db:07:a6:9b:e5:c1:fc:58:49:2b:a2:e6:8e:4d:
         52:3a:b7:ac:8d:31:54:c3:69:77:ae:8b:62:27:87:b9:05:47:
         61:ce:5e:74:ef:58:51:c1:ed:55:14:d6:df:e4:1b:99:56:80:
         5f:00:68:b6:52:2b:54:7d:92:09:40:d7:57:56:25:92:6b:a6:
         1b:cc:be:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:41 2026 by rpki-client