Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/abe5c68f-c2dc-3ea6-945c-60690b54c5e9.roa
File:                     abe5c68f-c2dc-3ea6-945c-60690b54c5e9.roa (raw, json)
Hash identifier:          iIUqxGxIFfyWvJiUS3ZfCx4/+5sccNcq+D0n6POM84I=
Subject key identifier:   6D:A1:87:7F:7D:6E:69:37:07:BD:68:41:9F:B8:8B:37:78:8B:3D:9F
Certificate issuer:       /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial:       010D0C9F4328584F94D30A6501460D805BA30280
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/abe5c68f-c2dc-3ea6-945c-60690b54c5e9.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     6505
IP address blocks:        200.30.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:0a:65:01:46:0d:80:5b:a3:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=ef5fbd62-7dd7-4723-aed7-fb353160a311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ed:f8:dd:f1:4a:27:26:81:0e:f5:20:8c:74:
                    6b:7f:b2:d0:d3:1f:01:9d:cd:91:74:6c:55:6b:c4:
                    c2:da:67:f9:7e:98:8b:98:68:34:63:9e:17:92:d8:
                    f1:6d:88:69:8c:95:b5:58:d7:08:92:ab:3c:b6:0b:
                    83:2d:6f:b5:40:6a:c1:99:92:ba:63:42:f2:fd:e4:
                    60:aa:d4:0e:55:b9:ce:60:92:f0:02:cc:09:5d:07:
                    9b:0b:58:ca:37:32:16:44:a9:10:4b:40:1b:4f:48:
                    04:aa:cb:54:2b:f6:d7:d0:d4:72:7e:d6:cb:0a:ff:
                    9a:f9:ff:4b:a3:b2:61:3c:a7:52:b7:09:4e:f7:22:
                    08:51:78:c5:c9:1c:ce:d4:fb:40:59:05:5f:c2:f7:
                    c0:25:94:3d:21:42:3e:13:33:87:6c:48:ad:ab:27:
                    c3:a0:c9:a0:b5:67:2d:b8:0e:74:de:06:79:ca:1a:
                    80:39:87:7b:5d:5e:5e:be:d7:95:69:a8:fd:d7:98:
                    69:75:e2:e3:cd:b0:bd:67:1b:a9:e6:78:74:0a:f0:
                    0d:38:52:5f:7f:3e:fb:e4:d8:90:29:d0:b5:84:18:
                    b4:90:7e:46:02:15:19:09:4c:a3:a2:f6:3d:92:8f:
                    de:18:9f:0f:31:91:c3:9f:bd:d5:13:d2:f7:73:e3:
                    38:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A1:87:7F:7D:6E:69:37:07:BD:68:41:9F:B8:8B:37:78:8B:3D:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/abe5c68f-c2dc-3ea6-945c-60690b54c5e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl

            X509v3 Authority Key Identifier:
                keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.30.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:44:60:22:4f:63:b9:25:19:9e:65:68:53:2b:02:d0:b1:8c:
         94:ef:89:b8:78:b7:a8:91:99:e4:1e:37:ad:71:52:7a:5c:53:
         c8:c8:b5:b5:f8:d2:b1:4a:39:c1:6c:a7:06:0b:18:a0:cf:3a:
         b4:20:66:1c:e2:4a:8d:99:95:81:91:f8:5f:4b:75:1a:37:ab:
         72:a6:8e:d2:0e:5f:bb:71:47:6e:f4:68:51:01:51:d9:13:98:
         59:e9:50:bf:aa:04:ee:9d:5d:df:91:e3:9c:f6:a6:a9:63:88:
         f3:37:f1:13:76:27:17:35:ad:53:ab:ce:e6:4c:20:3d:47:64:
         76:c6:9c:25:6e:d7:21:a3:22:8b:f1:77:0a:1c:0a:1b:74:6e:
         6e:45:d7:ed:38:12:c8:f4:7a:76:a4:94:de:55:c6:21:51:d7:
         21:50:00:a7:b0:1a:9e:29:5c:5d:04:ed:12:af:32:29:5f:cb:
         c2:ad:ea:d5:21:f1:cb:94:6c:84:fc:8f:f0:0c:f2:18:65:eb:
         8c:c8:db:5b:32:c5:66:fd:bb:29:ab:99:96:93:5c:cd:03:f0:
         47:c6:ee:5c:af:b4:bd:a6:d2:d4:e2:99:a7:c7:b3:03:6f:dc:
         14:10:dc:63:e5:2b:f8:9a:2b:4d:f8:fb:7c:be:20:f8:bd:cb:
         41:35:2b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:16:52 2026 by rpki-client