Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea/f2acb7eb-ae5b-3408-875b-e03ecde4231f.roa
File:                     f2acb7eb-ae5b-3408-875b-e03ecde4231f.roa (raw, json)
Hash identifier:          /pfX5KryyhwgtYrphsH19Ssb76VGJsR7VwTcTZjRAGY=
Subject key identifier:   A4:13:81:EE:10:76:E6:5A:C4:16:64:AF:E2:98:0D:BC:59:16:9D:16
Certificate issuer:       /CN=60a3faac-69f1-4258-94e7-1128c7a528ea
Certificate serial:       010D0C9F4328584D93254CCA14DDF2CB44A54F80
Authority key identifier: 93:24:DC:03:34:19:A5:27:1B:7E:95:2B:D7:21:E8:53:5A:F1:42:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea/f2acb7eb-ae5b-3408-875b-e03ecde4231f.roa
Signing time:             Tue 21 Apr 2026 01:00:24 +0000
ROA not before:           Tue 21 Apr 2026 01:00:24 +0000
ROA not after:            Mon 20 Jul 2026 01:00:24 +0000
asID:                     36391
IP address blocks:        142.90.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea/60a3faac-69f1-4258-94e7-1128c7a528ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea/60a3faac-69f1-4258-94e7-1128c7a528ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:93:25:4c:ca:14:dd:f2:cb:44:a5:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a3faac-69f1-4258-94e7-1128c7a528ea
        Validity
            Not Before: Apr 21 01:00:24 2026 GMT
            Not After : Jul 20 01:00:24 2026 GMT
        Subject: CN=fc742b04-f203-4494-9bf5-161d6a2c0e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e2:75:60:78:90:88:fb:92:db:67:99:1d:01:
                    d7:7e:f8:d7:47:a7:79:16:dc:a0:e5:7b:a0:af:74:
                    b1:70:f1:37:e1:5f:1b:d6:75:a6:42:c7:99:3e:86:
                    c7:ef:2d:da:cf:4d:5c:b2:31:70:47:48:d7:15:02:
                    17:f7:b9:6f:3e:ad:c7:48:64:5d:03:3c:4a:03:90:
                    f3:39:3b:42:d9:8c:c0:42:0e:ca:93:14:41:e5:c8:
                    ff:a4:5e:f9:54:d0:48:83:db:40:f7:e6:f5:a0:c0:
                    d1:2f:2f:be:1a:0e:e6:ca:0e:64:d6:05:57:f8:fc:
                    b5:42:18:08:aa:72:be:ae:27:ca:cc:31:7a:ed:62:
                    fe:94:1b:09:c3:98:7d:41:3a:3a:95:80:d0:a0:d6:
                    36:25:a2:58:c4:ad:93:e0:b5:95:2c:50:1c:44:bc:
                    5a:77:26:6c:4c:e0:8d:8c:c5:76:55:bd:9d:ea:64:
                    08:97:1b:e2:a8:cb:52:3d:c8:f7:f2:b1:cd:50:67:
                    1a:c0:9a:97:61:17:71:ae:a9:b7:66:57:64:0b:55:
                    6a:fe:f0:08:0a:28:8c:d4:79:4c:92:42:4c:3d:3c:
                    83:64:c2:f9:6d:cf:53:65:1f:56:96:1e:ef:55:28:
                    69:f7:68:aa:4f:76:49:3a:2e:69:fa:19:01:34:bd:
                    78:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:13:81:EE:10:76:E6:5A:C4:16:64:AF:E2:98:0D:BC:59:16:9D:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea/f2acb7eb-ae5b-3408-875b-e03ecde4231f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea/60a3faac-69f1-4258-94e7-1128c7a528ea.crl

            X509v3 Authority Key Identifier:
                keyid:93:24:DC:03:34:19:A5:27:1B:7E:95:2B:D7:21:E8:53:5A:F1:42:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60a3faac-69f1-4258-94e7-1128c7a528ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.90.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:80:4b:40:44:15:3b:3c:38:16:bb:0c:bb:57:b0:c2:1b:f2:
         b9:96:e5:bd:6f:dd:ef:0c:45:32:81:67:5a:f7:80:b9:34:ed:
         eb:b8:99:ad:a6:f4:1c:d9:c5:7a:8b:d2:09:c9:5d:81:cf:90:
         be:94:7e:03:96:b3:8f:ad:e0:d8:17:26:3f:2a:59:a2:90:fa:
         67:35:bf:71:5a:8b:a0:46:87:47:75:bd:fe:c9:1d:26:38:f3:
         18:a4:b1:9f:50:85:02:77:a7:00:1c:dd:db:28:7a:71:0d:fd:
         fc:94:9f:88:37:5b:04:32:57:21:05:80:94:51:dd:56:4f:20:
         8b:97:db:bd:02:f8:0e:24:d0:29:5c:32:54:07:63:6e:d0:7a:
         8f:09:5b:3b:f4:58:a3:40:3b:91:a7:c7:82:21:d2:74:b5:ea:
         55:ba:8f:b6:ff:53:94:b2:be:85:7c:0a:1d:8d:63:cd:50:7e:
         fd:78:8a:7d:80:05:dc:91:f9:da:b3:6f:85:5d:e1:4c:b4:1f:
         93:2d:6c:ea:8c:38:d8:27:e3:54:13:09:89:84:cf:02:27:4e:
         a1:15:1b:2a:fe:76:21:7b:fc:bc:a5:7f:81:f0:6e:20:4d:e3:
         1d:3f:39:5e:21:11:7e:06:46:24:d9:1c:a4:7e:9e:79:15:af:
         8e:0d:98:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 01:39:54 2026 by rpki-client