Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c4d76c0-fd22-3414-9a03-f8b1677b5508.roa
File:                     2c4d76c0-fd22-3414-9a03-f8b1677b5508.roa (raw, json)
Hash identifier:          EFa4qXl9CJSbwczDhHQ3S6vFJ1CV72EPjmZJlt0V1f8=
Subject key identifier:   24:49:F0:BB:E7:99:18:72:DB:4C:27:76:10:6A:00:B8:D4:10:98:3B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584D27AA63EBD50133A412FBF980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c4d76c0-fd22-3414-9a03-f8b1677b5508.roa
Signing time:             Fri 13 Mar 2026 13:00:40 +0000
ROA not before:           Fri 13 Mar 2026 13:00:40 +0000
ROA not after:            Thu 11 Jun 2026 13:00:40 +0000
asID:                     15169
IP address blocks:        64.233.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Mar 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:27:aa:63:eb:d5:01:33:a4:12:fb:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Mar 13 13:00:40 2026 GMT
            Not After : Jun 11 13:00:40 2026 GMT
        Subject: CN=13bad594-807a-4675-996a-75a9cc885814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:fc:84:53:12:e1:61:f4:a3:aa:da:ee:e6:18:
                    8c:65:2a:3d:e3:0f:f4:c1:56:47:9c:06:d9:25:eb:
                    f2:2f:8a:31:53:a1:45:5d:0c:de:ee:2c:83:09:9b:
                    70:d7:78:6c:85:11:ad:ed:e8:8e:ae:19:8e:0b:f0:
                    c2:1f:9f:16:44:43:aa:73:be:aa:38:0c:2b:f7:88:
                    51:3c:0a:f9:ea:1e:87:8b:e5:9f:b3:7f:19:51:24:
                    bc:b7:c4:58:5a:d6:04:58:03:f5:5b:9c:85:65:99:
                    46:c2:6d:ed:17:3f:9f:da:e4:35:40:44:bf:61:8e:
                    f2:19:4a:7d:00:29:18:b6:41:06:3e:42:b8:de:c1:
                    08:ce:21:0d:01:11:28:62:7e:bc:31:04:aa:d2:1c:
                    12:2c:17:09:78:58:98:2e:df:21:25:48:e5:23:a1:
                    47:da:d3:c3:3c:93:d9:80:ab:59:9e:19:db:4a:f5:
                    b9:73:a7:8e:bd:ee:11:4e:d3:0a:15:d2:ec:cd:c9:
                    24:f4:b2:5a:18:15:02:d0:9c:24:00:71:2f:06:69:
                    0a:fe:4c:8a:42:ae:b5:31:55:1b:79:7d:5e:3c:1c:
                    d7:78:44:67:00:7b:44:bd:23:3e:28:48:28:b1:1f:
                    d8:7d:12:ce:71:76:68:b5:01:de:1c:8d:00:ac:fc:
                    5d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:49:F0:BB:E7:99:18:72:DB:4C:27:76:10:6A:00:B8:D4:10:98:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c4d76c0-fd22-3414-9a03-f8b1677b5508.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.233.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:9f:ab:08:48:9d:21:01:d2:54:0f:63:85:ba:cd:bd:16:c3:
         7a:71:26:88:d3:af:77:4f:7d:59:7b:e5:b7:13:3c:ce:36:6f:
         57:6e:d8:b6:b4:0e:4c:32:28:09:fb:59:e3:7c:bc:dd:8e:b2:
         66:4b:b4:8c:7b:3c:69:31:16:72:3d:23:58:39:44:56:48:7c:
         11:9b:70:99:be:9d:8b:e2:5d:6b:fe:e5:b8:7c:b7:8d:8f:ad:
         5a:b0:7b:7a:66:d2:26:44:3f:76:8f:0e:67:c2:4a:ff:16:ed:
         76:c8:31:2f:42:cd:37:14:16:e4:a2:58:1c:58:b4:a5:2e:89:
         06:c8:1e:ee:49:c5:5f:e6:ef:57:7c:24:03:7e:af:dd:61:ab:
         20:2b:20:8a:34:2b:21:83:bc:ad:77:93:4d:9a:3b:25:c8:83:
         4c:44:4e:47:34:62:9b:74:d7:02:af:59:e6:97:27:3c:12:38:
         95:e6:24:5a:3d:d0:be:48:57:63:ae:6b:65:67:25:c8:59:35:
         16:9c:74:3a:32:06:cf:51:59:b6:2e:3d:ce:b1:f4:24:8b:29:
         b1:87:89:b8:12:53:c9:f4:ff:78:e4:99:09:09:c3:ff:a3:ba:
         d7:8f:5a:0b:95:2b:bf:37:d1:41:5f:9b:9c:22:44:0f:4f:66:
         ed:bd:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 20:32:31 2026 by rpki-client