Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60f75817-fd70-4b3f-8187-96d4aa2bdc29/e2deefd4-ec3b-3732-ae29-862806cb0aad.roa
File:                     e2deefd4-ec3b-3732-ae29-862806cb0aad.roa (raw, json)
Hash identifier:          o4wnZ1kH+I1SlDbC0BI4klIoy94eX9VTMj2ufHF1A9Y=
Subject key identifier:   CA:8F:72:52:49:4E:95:1D:6F:AE:6D:EB:3F:2B:D3:1F:81:C8:99:95
Certificate issuer:       /CN=60f75817-fd70-4b3f-8187-96d4aa2bdc29
Certificate serial:       010D0C9F4328584F5FC808798864A1D6F521FEB0
Authority key identifier: 5C:94:32:69:14:8A:95:27:FF:FC:91:52:4B:D4:11:71:EC:6F:ED:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60f75817-fd70-4b3f-8187-96d4aa2bdc29.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60f75817-fd70-4b3f-8187-96d4aa2bdc29/e2deefd4-ec3b-3732-ae29-862806cb0aad.roa
Signing time:             Sat 03 Oct 2026 01:00:12 +0000
ROA not before:           Sat 03 Oct 2026 01:00:12 +0000
ROA not after:            Fri 01 Jan 2027 02:00:12 +0000
asID:                     395999
IP address blocks:        199.120.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60f75817-fd70-4b3f-8187-96d4aa2bdc29/60f75817-fd70-4b3f-8187-96d4aa2bdc29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60f75817-fd70-4b3f-8187-96d4aa2bdc29/60f75817-fd70-4b3f-8187-96d4aa2bdc29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60f75817-fd70-4b3f-8187-96d4aa2bdc29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 Oct 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5f:c8:08:79:88:64:a1:d6:f5:21:fe:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f75817-fd70-4b3f-8187-96d4aa2bdc29
        Validity
            Not Before: Oct  3 01:00:12 2026 GMT
            Not After : Jan  1 02:00:12 2027 GMT
        Subject: CN=2af9f845-8bef-4147-9c1a-281dba89762e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d6:a9:86:a8:2f:ed:a0:9f:c3:ef:a1:d3:3e:
                    77:45:84:e1:54:39:d4:d1:56:a2:f1:18:6d:8e:d1:
                    e2:0d:20:c3:b3:56:ec:cd:67:df:8c:70:25:f6:46:
                    b5:ba:9f:f1:0c:f9:b1:e7:86:d6:bd:6f:ec:f8:dc:
                    71:67:c8:5a:39:f9:77:17:08:35:66:95:6c:9b:81:
                    57:37:7f:c9:0c:c0:19:74:9f:f9:34:5b:17:c1:3e:
                    94:f0:81:8c:8f:21:ce:69:d7:a4:25:e2:a7:2d:fa:
                    22:49:16:9d:ca:74:81:17:f5:23:24:62:bd:c9:37:
                    b2:7c:82:2f:5c:13:20:61:5d:ff:b8:15:23:c5:b4:
                    9f:8b:fc:19:c0:03:85:7b:c1:dc:9f:d8:b9:ef:4c:
                    5d:47:f2:84:89:2a:41:dd:24:3e:c5:a3:2f:f7:af:
                    ac:e9:1a:a9:ab:cd:78:b3:58:b7:db:2c:39:7a:f3:
                    62:34:b4:7b:f2:dd:cc:dd:2c:50:40:1d:b6:56:1d:
                    f1:85:dc:30:ac:15:6e:15:7e:40:7f:fc:96:ab:c8:
                    8d:ce:4d:7d:95:d4:89:20:07:a9:90:a0:64:f0:42:
                    0a:bb:d2:1e:5c:86:63:02:d6:28:12:67:a4:bc:bc:
                    86:3b:3f:08:55:67:97:54:60:7f:08:88:25:f8:35:
                    a5:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8F:72:52:49:4E:95:1D:6F:AE:6D:EB:3F:2B:D3:1F:81:C8:99:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60f75817-fd70-4b3f-8187-96d4aa2bdc29/e2deefd4-ec3b-3732-ae29-862806cb0aad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60f75817-fd70-4b3f-8187-96d4aa2bdc29/60f75817-fd70-4b3f-8187-96d4aa2bdc29.crl

            X509v3 Authority Key Identifier:
                keyid:5C:94:32:69:14:8A:95:27:FF:FC:91:52:4B:D4:11:71:EC:6F:ED:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60f75817-fd70-4b3f-8187-96d4aa2bdc29.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.120.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:a1:76:41:38:4f:9a:b7:ee:ab:1d:2e:b2:ad:73:c8:69:f2:
         74:38:06:3a:88:30:42:4a:83:6b:aa:f6:39:4e:45:e5:13:ab:
         da:99:d8:f1:62:93:ee:ea:8a:f1:03:0c:b4:0a:c6:7e:bb:ca:
         28:3d:8f:93:6f:6f:ae:b7:30:22:d9:2a:ac:63:92:2a:39:3d:
         5c:61:bc:c4:ae:d1:c1:69:5b:7b:7c:c9:e0:ce:2d:de:b5:67:
         94:fd:9d:3a:f2:3e:f5:b0:d1:aa:06:2a:73:ee:ac:66:05:5e:
         bc:11:10:43:be:ff:24:31:d8:77:c6:79:7d:75:0e:43:b8:ef:
         ff:4a:f0:c5:dc:c1:5c:9a:57:ea:f1:25:6e:c4:47:cb:e3:be:
         47:0d:21:14:73:5f:0f:27:1a:62:e0:b6:7e:55:89:dc:8e:c1:
         23:cc:de:36:67:4a:93:31:6f:e5:17:2b:d6:bc:9f:91:5b:ca:
         89:53:60:93:3b:03:06:9d:3a:76:4b:d0:2f:a3:83:47:8a:8e:
         f1:0c:2b:12:f8:c8:b0:e7:16:ed:ad:c1:3a:3d:58:66:2c:73:
         93:68:b2:20:18:56:b8:a3:0d:e9:cf:72:5e:41:1b:4c:f2:ad:
         a5:cd:e5:81:1d:44:6c:59:0b:22:7e:09:10:08:d1:66:4c:9a:
         91:b9:db:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:36:10 2026 by rpki-client