Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa
File:                     60c05e3f-1816-3cff-8958-8504b17b798d.roa (raw, json)
Hash identifier:          3Piuz8yDz/nZLE/if7/LZhzccjylKNpYVTaGLSfIbHE=
Subject key identifier:   DB:15:71:F5:E0:92:B0:1F:D5:72:A4:40:A4:3F:8A:CB:49:66:E3:FF
Certificate issuer:       /CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
Certificate serial:       010D0C9F4328584DB4A57E878CBF4F3A2A11E080
Authority key identifier: EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     394745
IP address blocks:        170.75.160.0/20 maxlen: 20
                          172.81.176.0/21 maxlen: 21
                          2602:ffb6::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 May 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:7e:87:8c:bf:4f:3a:2a:11:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=005937cd-17e9-40bf-8493-bdfd5c850467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:67:e0:15:9a:5d:cd:4f:b2:d7:19:63:6a:59:
                    2c:d5:1f:20:df:f8:2a:3b:2e:69:04:36:ba:ee:04:
                    4e:b3:fb:7b:8a:6d:c9:9d:24:eb:69:f7:5e:a2:66:
                    18:9c:3e:8d:d2:a1:2c:74:3b:96:ea:89:e6:54:31:
                    8d:61:3f:47:cd:b1:3e:17:5f:24:33:51:c7:03:ec:
                    14:53:92:8f:ea:f5:ec:7b:03:55:72:5a:72:13:d2:
                    1c:eb:23:4b:19:0f:1b:88:ee:0a:ad:88:63:0d:41:
                    86:53:2b:d4:d8:09:b1:43:d4:cf:9c:35:7e:fd:3b:
                    a4:ce:18:c1:65:4d:7b:17:ab:9a:e5:34:be:db:06:
                    fd:5d:07:21:0b:a9:2c:03:1c:c3:1e:ad:23:d7:4a:
                    a1:f6:4b:12:fb:9a:63:d9:1f:d2:e4:e7:54:39:a0:
                    b7:f8:e0:5f:5d:dd:cf:7c:7b:f7:3b:f0:e7:67:f3:
                    50:3c:6d:25:fc:ed:0d:27:cc:ef:b3:26:32:2a:de:
                    79:e2:97:f1:d8:fe:de:b4:90:e3:15:cc:3e:9d:73:
                    4c:61:bf:86:58:9c:4e:0a:e2:d8:7b:b0:cc:3b:bd:
                    52:88:b1:24:a3:2e:aa:98:73:17:2c:0b:ec:90:da:
                    0d:a2:94:78:e2:0c:12:01:76:00:f1:9d:ce:ae:16:
                    1e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:15:71:F5:E0:92:B0:1F:D5:72:A4:40:A4:3F:8A:CB:49:66:E3:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl

            X509v3 Authority Key Identifier:
                keyid:EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.160.0/20
                  172.81.176.0/21
                IPv6:
                  2602:ffb6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:5c:37:fe:73:c2:a5:4a:84:37:18:b5:5d:86:a2:7d:30:04:
         b8:9b:4b:ef:9c:7d:d7:a8:f9:1e:20:31:d6:bd:f6:6b:ec:50:
         0c:86:a8:11:e2:9b:b9:18:6e:f4:c4:4b:7b:6a:47:83:b9:32:
         d1:78:84:0a:67:bd:25:60:89:d0:d7:e5:58:58:89:f7:71:17:
         19:da:54:10:b0:5a:ee:72:5f:a6:b6:20:16:e8:52:8b:8d:98:
         a4:ec:e8:92:81:f9:7f:09:98:9c:f0:8f:75:3e:7f:05:7d:f3:
         60:e4:47:5d:ae:2b:11:cf:13:21:52:bd:2a:6d:19:a9:96:23:
         b9:c7:74:e2:78:8f:cb:56:dc:df:b4:4e:80:71:53:ad:f9:f3:
         d5:4c:43:38:f3:d9:d9:14:6c:1b:0a:0f:00:03:4e:e8:69:73:
         92:e8:b6:99:0e:a1:f6:71:96:c3:e1:8a:30:22:68:61:90:62:
         43:31:46:42:c3:5f:72:da:5b:c9:44:3b:54:32:00:4f:08:e1:
         09:2b:79:56:8d:23:eb:71:13:bc:44:f8:8d:58:e8:1a:1a:d4:
         ee:04:63:87:0b:9a:53:4d:46:d8:e8:fe:50:58:60:b4:fc:27:
         78:40:f8:4b:77:54:6c:dd:1f:cc:6f:67:10:75:42:8f:0a:cc:
         07:d5:d9:5f
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE20pX6HjL9POioR4IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZhNjA0YzItYmQ5Yy00ZDBlLWJmYjAtZGFhYzhjZDFj
M2ZjMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk
MDA1OTM3Y2QtMTdlOS00MGJmLTg0OTMtYmRmZDVjODUwNDY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2fgFZpdzU+y1xljalks1R8g3/gqOy5pBDa6
7gROs/t7im3JnSTrafdeomYYnD6N0qEsdDuW6onmVDGNYT9HzbE+F18kM1HHA+wU
U5KP6vXsewNVclpyE9Ic6yNLGQ8biO4KrYhjDUGGUyvU2AmxQ9TPnDV+/TukzhjB
ZU17F6ua5TS+2wb9XQchC6ksAxzDHq0j10qh9ksS+5pj2R/S5OdUOaC3+OBfXd3P
fHv3O/DnZ/NQPG0l/O0NJ8zvsyYyKt554pfx2P7etJDjFcw+nXNMYb+GWJxOCuLY
e7DMO71SiLEkoy6qmHMXLAvskNoNopR44gwSAXYA8Z3OrhYeKwIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFNsVcfXgkrAf1XKkQKQ/istJZuP/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZmE2
MDRjMi1iZDljLTRkMGUtYmZiMC1kYWFjOGNkMWMzZmMvNjBjMDVlM2YtMTgxNi0z
Y2ZmLTg5NTgtODUwNGIxN2I3OThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWZhNjA0YzItYmQ5Yy00ZDBlLWJm
YjAtZGFhYzhjZDFjM2ZjLzFmYTYwNGMyLWJkOWMtNGQwZS1iZmIwLWRhYWM4Y2Qx
YzNmYy5jcmwwHwYDVR0jBBgwFoAU6uuVQNAUCiOlEBgO4kiYg3XNvEgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZmE2MDRjMi1iZDljLTRkMGUtYmZiMC1kYWFj
OGNkMWMzZmMuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQEqkugAwQD
rFGwMA4EAgACMAgDBgQmAv+2ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmXDf+c8KlSoQ3GLVdhqJ9MAS4
m0vvnH3XqPkeIDHWvfZr7FAMhqgR4pu5GG70xEt7akeDuTLReIQKZ70lYInQ1+VY
WIn3cRcZ2lQQsFrucl+mtiAW6FKLjZik7OiSgfl/CZic8I91Pn8FffNg5EddrisR
zxMhUr0qbRmpliO5x3TieI/LVtzftE6AcVOt+fPVTEM489nZFGwbCg8AA07oaXOS
6LaZDqH2cZbD4YowImhhkGJDMUZCw19y2lvJRDtUMgBPCOEJK3lWjSPrcRO8RPiN
WOgaGtTuBGOHC5pTTUbY6P5QWGC0/Cd4QPhLd1Rs3R/Mb2cQdUKPCswH1dlf
-----END CERTIFICATE-----
Generated at Mon May 4 16:57:43 2026 by rpki-client