Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/eefdb5f9-9613-38cd-bbd2-d6e08dd9c32f.roa
File:                     eefdb5f9-9613-38cd-bbd2-d6e08dd9c32f.roa (raw, json)
Hash identifier:          HuZ3lB1KNYnJ97Khb4FrdNNI89p9c42JKWxBqfVAPCc=
Subject key identifier:   06:60:70:46:B0:FE:83:4D:95:D7:C0:36:44:2D:06:9C:18:8B:C0:2B
Certificate issuer:       /CN=c6228f86-bf54-49fc-835c-588cd2aadb49
Certificate serial:       010D0C9F4328584E73BE6381B37B9885A2B8C558
Authority key identifier: D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/eefdb5f9-9613-38cd-bbd2-d6e08dd9c32f.roa
Signing time:             Fri 10 Jul 2026 11:50:05 +0000
ROA not before:           Fri 10 Jul 2026 11:50:05 +0000
ROA not after:            Thu 08 Oct 2026 11:50:05 +0000
asID:                     33248
IP address blocks:        209.174.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:73:be:63:81:b3:7b:98:85:a2:b8:c5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6228f86-bf54-49fc-835c-588cd2aadb49
        Validity
            Not Before: Jul 10 11:50:05 2026 GMT
            Not After : Oct  8 11:50:05 2026 GMT
        Subject: CN=44c927d2-912d-429d-86bf-39a9c9351459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7e:28:f7:e0:fe:3d:1f:d2:dd:10:78:bf:8a:
                    c1:38:9a:6b:85:bc:a4:ab:4b:cd:6e:5e:7e:bc:cb:
                    91:34:09:9d:c3:a8:c1:46:52:21:e7:6c:fc:dd:46:
                    54:d4:62:a2:f5:a6:1c:37:3f:ee:44:f1:6b:a2:00:
                    18:6b:88:49:1c:a2:a3:f7:46:cc:a6:5e:6d:03:91:
                    e0:69:26:37:ad:d6:1c:db:7a:59:dc:d4:f8:e8:dd:
                    ee:47:82:61:39:08:3f:d5:fd:93:0f:df:34:98:e0:
                    fc:01:fe:e3:fb:bf:a3:0f:66:93:73:58:87:bc:b9:
                    29:15:37:66:2e:e8:d6:aa:25:92:e4:cb:e0:69:18:
                    45:16:66:e9:3f:57:0e:49:1c:e2:d0:ac:d5:73:7c:
                    13:77:ee:96:d6:29:cd:60:e8:bc:fa:3e:b4:7d:8d:
                    bf:5c:7c:49:ac:74:0f:1c:00:4d:ae:38:35:6a:3f:
                    8b:27:54:bd:65:6f:af:05:69:93:84:a6:ac:30:40:
                    0c:a0:82:2a:c3:e4:6e:c5:82:e3:49:40:c9:82:94:
                    59:e1:2b:91:d2:b1:76:86:58:be:37:ef:0b:5e:59:
                    e4:f5:84:39:13:68:3c:82:28:c5:c3:f5:4c:42:a0:
                    e2:2c:02:4a:f3:1c:06:bd:0a:16:11:08:89:1b:68:
                    ab:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:60:70:46:B0:FE:83:4D:95:D7:C0:36:44:2D:06:9C:18:8B:C0:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/eefdb5f9-9613-38cd-bbd2-d6e08dd9c32f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49/c6228f86-bf54-49fc-835c-588cd2aadb49.crl

            X509v3 Authority Key Identifier:
                keyid:D3:6C:AC:E6:33:A2:EE:D4:AF:82:1E:F5:97:60:89:BE:D8:47:3C:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/c6228f86-bf54-49fc-835c-588cd2aadb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.174.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f6:b6:06:02:95:24:ec:c3:c8:0d:78:34:44:92:ec:b1:03:
         81:66:a0:71:35:95:e2:07:01:27:3e:52:08:ea:85:b6:8f:7d:
         26:aa:d0:d9:c1:b0:47:74:bb:e7:08:85:2c:e0:16:5b:6d:00:
         c2:4a:ff:e4:c4:54:76:b5:a2:d4:27:c7:5b:18:ba:c2:30:f3:
         9c:66:b5:a5:f4:62:b3:9a:8b:f5:2c:e7:b2:f9:87:4d:70:82:
         ae:43:83:53:66:e1:a1:60:74:84:58:23:d8:15:4c:77:0b:57:
         d4:91:56:60:b7:95:83:a2:5d:9d:be:b9:a5:7c:b1:b4:1f:fb:
         07:e3:05:d3:5c:1b:79:29:17:66:8c:e5:a3:64:63:33:d0:5a:
         58:f2:5a:3f:64:17:90:0b:3f:3a:90:0b:f9:81:1b:bc:50:23:
         03:4e:4a:08:06:16:57:6d:f7:96:f3:b5:0f:3e:40:0f:2b:9c:
         9b:f1:7d:92:e8:70:66:69:7b:4b:1b:0c:a8:05:bd:eb:46:2a:
         13:74:78:0a:b9:b6:cd:05:da:fe:e8:f2:82:fc:e2:89:1c:0a:
         de:f9:14:c4:f1:71:1d:fe:71:c3:7a:09:3b:8a:ed:f6:20:0b:
         95:d3:5a:1c:f8:34:c9:ea:bf:4f:74:31:53:c1:af:d6:fc:9d:
         e6:5e:9f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 07:16:08 2026 by rpki-client