Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/7e3a53c0-ae0b-364e-9083-496c27cf871f.roa
File:                     7e3a53c0-ae0b-364e-9083-496c27cf871f.roa (raw, json)
Hash identifier:          qxSb7fupDBobUZd8DocP4BxOMRIHVX7XTQ5EGKQ2F7Y=
Subject key identifier:   41:9E:B7:75:82:10:6C:E4:9B:51:FF:27:E4:BF:05:B0:3F:45:85:15
Certificate issuer:       /CN=3364015a-cbd4-4063-84a8-a6b77c470bce
Certificate serial:       010D0C9F4328584E50849E3CF307FE3CE868D6A0
Authority key identifier: 22:CB:26:11:CA:C0:7D:01:DE:58:59:94:FC:53:FF:79:C8:34:48:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/7e3a53c0-ae0b-364e-9083-496c27cf871f.roa
Signing time:             Sat 27 Jun 2026 21:00:12 +0000
ROA not before:           Sat 27 Jun 2026 21:00:12 +0000
ROA not after:            Fri 25 Sep 2026 21:00:12 +0000
asID:                     396073
IP address blocks:        198.135.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/3364015a-cbd4-4063-84a8-a6b77c470bce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/3364015a-cbd4-4063-84a8-a6b77c470bce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:50:84:9e:3c:f3:07:fe:3c:e8:68:d6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3364015a-cbd4-4063-84a8-a6b77c470bce
        Validity
            Not Before: Jun 27 21:00:12 2026 GMT
            Not After : Sep 25 21:00:12 2026 GMT
        Subject: CN=1a600ddc-5121-4bc3-9674-0a18e7513ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:87:6c:e0:a2:d4:ec:e4:62:85:6c:5c:e8:3f:
                    c2:db:24:f0:5c:41:92:2a:ed:ed:1b:fc:f2:e7:5e:
                    5f:db:0d:c9:29:21:4c:87:d4:9f:b9:fb:b2:62:e1:
                    b0:0b:4f:67:bf:db:65:71:77:f1:3a:ff:84:ad:09:
                    09:c8:a2:d9:88:b7:b0:e2:3e:1f:9a:8a:99:b4:99:
                    26:74:8b:b2:4f:7f:9b:3f:e1:f1:2b:d6:44:9a:76:
                    07:6f:82:a0:2b:53:29:f9:e7:fc:64:b0:41:c6:5f:
                    cf:e1:3c:61:52:62:21:a5:2f:1a:4c:1f:f3:3d:36:
                    3f:43:cd:47:42:b3:c2:6b:f9:48:9a:23:93:f3:4b:
                    f1:5c:dc:6b:bf:22:74:d9:27:fd:5f:08:61:ba:90:
                    ef:fa:82:d5:bf:f2:ca:3c:3f:12:9e:46:96:04:4c:
                    56:ee:b2:56:5c:7c:42:58:4f:3b:64:4d:eb:19:c7:
                    71:f0:79:43:3f:9c:4e:b2:c1:d7:64:4f:b2:7f:b1:
                    af:70:c3:4a:9d:30:9c:b1:a6:2d:fd:aa:5a:a8:1b:
                    bc:d7:28:ee:71:3b:ce:82:fe:41:51:3a:df:4e:bf:
                    77:87:ea:a0:8d:03:18:a6:f1:cd:43:fc:35:4a:d0:
                    e2:55:7e:82:a6:ee:0c:6b:53:68:82:3e:ad:a6:2b:
                    e2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9E:B7:75:82:10:6C:E4:9B:51:FF:27:E4:BF:05:B0:3F:45:85:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/7e3a53c0-ae0b-364e-9083-496c27cf871f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce/3364015a-cbd4-4063-84a8-a6b77c470bce.crl

            X509v3 Authority Key Identifier:
                keyid:22:CB:26:11:CA:C0:7D:01:DE:58:59:94:FC:53:FF:79:C8:34:48:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3364015a-cbd4-4063-84a8-a6b77c470bce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.135.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:47:db:a8:04:23:0d:34:1e:0d:75:be:bf:0b:2d:d1:75:57:
         fb:d2:8c:cf:7c:f1:30:3d:4e:38:bc:cb:9f:ee:dd:20:5d:72:
         4e:e8:3f:26:cc:6f:27:88:73:04:ab:21:4f:f3:6c:b3:8f:e4:
         34:7c:2a:6b:76:df:6b:34:0f:c6:75:dd:4e:c9:a9:c7:92:96:
         9a:ef:8d:83:d5:57:c1:40:f9:97:76:02:e6:e7:a3:fc:8e:44:
         69:88:d3:f4:1b:e5:aa:03:14:57:74:7d:5a:80:5f:11:19:35:
         ab:e5:b8:1f:77:ee:ca:4e:ad:2b:e5:15:d1:1a:9e:dc:7b:94:
         eb:0e:da:b3:ef:67:13:b3:79:e3:4e:63:8f:2f:76:c9:06:29:
         56:c8:20:09:02:25:d4:bd:28:be:19:9f:19:e3:92:38:f4:cb:
         de:ba:48:52:9f:8b:56:71:50:6d:63:9e:f7:8e:bb:fd:b2:e4:
         ba:64:7b:91:28:3e:19:82:cf:a5:7d:68:7c:b3:de:de:4c:47:
         4d:ad:8b:da:5a:d9:c9:3b:f8:2f:a4:f9:a5:46:6d:7b:ed:aa:
         15:99:7f:2e:86:51:4a:dc:37:1d:7e:bb:8a:94:a2:18:ec:ee:
         94:2c:ee:f8:08:40:73:51:89:54:82:96:c9:f5:74:9e:18:e9:
         b9:f3:67:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:40:02 2026 by rpki-client