Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6b6ce62e-ca0d-33e2-a2f7-17dc0954ecdb.roa
File:                     6b6ce62e-ca0d-33e2-a2f7-17dc0954ecdb.roa (raw, json)
Hash identifier:          oU/9hM1FhDuDs+0idvV7ddaPo5uD9Vzvo3XROsbbAIg=
Subject key identifier:   09:E4:4F:90:64:FA:AC:9A:77:77:17:54:62:3B:31:81:D1:BB:01:77
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F4328584E5FDF5E59ECD89DC99BBD8090
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6b6ce62e-ca0d-33e2-a2f7-17dc0954ecdb.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     19107
IP address blocks:        216.234.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:5e:59:ec:d8:9d:c9:9b:bd:80:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=f1943776-b6c7-4ea6-96d0-aaa8a457d74f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:62:c3:92:d8:5f:fa:1f:ff:35:3b:d3:d2:
                    e1:db:5e:be:c2:32:a8:b4:72:3f:bb:02:29:58:76:
                    4c:8a:73:ec:f0:6e:3f:f0:a7:b3:da:81:44:7f:da:
                    86:a8:4c:a9:29:52:f1:e2:0e:06:14:fe:a1:c5:e3:
                    17:5e:b4:12:66:be:6a:27:44:28:9c:c6:45:63:60:
                    fe:f9:2a:fd:0b:f4:93:8b:d5:2f:d8:8e:c3:ec:88:
                    f1:69:0c:6a:71:06:18:2c:74:1b:fb:91:84:70:68:
                    d8:58:41:4f:d4:f2:d3:e4:0a:6c:42:9c:b9:7d:0a:
                    61:a2:09:88:cb:00:2d:ab:28:cd:ad:9a:39:62:e3:
                    4a:34:b9:84:c1:48:48:cc:c4:cf:17:1a:af:d7:e3:
                    00:f7:0a:f4:12:f4:4e:6b:1a:3c:64:0b:82:ce:c0:
                    0a:a9:fb:62:6e:85:43:7e:39:56:91:78:d9:b5:20:
                    81:1d:65:87:34:6a:d0:e4:2b:4a:6a:ef:2a:10:4d:
                    b5:0e:d2:eb:df:b3:d8:a9:d3:6e:ce:88:59:c4:21:
                    5d:2b:dd:ee:6c:1b:ce:03:67:ac:d4:3a:07:5e:68:
                    69:09:7e:05:1b:91:91:91:33:16:4b:a3:3b:54:7c:
                    de:44:2b:e0:6e:fc:98:cf:69:07:3d:7c:9e:ad:4b:
                    f7:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E4:4F:90:64:FA:AC:9A:77:77:17:54:62:3B:31:81:D1:BB:01:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/6b6ce62e-ca0d-33e2-a2f7-17dc0954ecdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:97:16:40:30:cd:f8:30:3e:2f:f3:b3:70:3c:d9:91:be:10:
         d3:73:73:80:64:e6:bd:71:a6:4c:35:54:d9:0b:e2:a9:d0:c9:
         0e:9f:74:52:52:70:17:d0:ab:de:38:a9:e2:f0:9e:88:e2:28:
         b0:b6:f7:13:f8:4b:f2:c9:8b:1e:30:21:55:b6:ae:9a:5b:93:
         2b:f4:37:69:8c:78:95:07:b4:9a:6b:8e:9c:b4:0f:a9:15:1e:
         5a:e5:90:d7:5b:c4:4a:8a:fb:8f:f2:7b:0f:8c:d0:09:6f:b0:
         ea:cf:e2:be:9a:d1:3b:ce:d4:b9:0c:e1:1e:c6:01:21:f5:0b:
         e1:00:a5:5f:a3:dd:e1:b8:09:b8:bb:02:60:e1:d7:ca:19:c2:
         f2:65:64:35:f0:23:f7:88:f2:85:03:5a:ef:b2:65:13:e3:3d:
         c7:49:7f:cf:1d:d9:3c:4f:aa:ec:06:46:e1:de:1e:5f:e0:0c:
         a3:1a:1a:6d:df:72:88:c6:6a:93:ed:52:0d:78:88:1b:bc:b2:
         df:88:64:18:61:03:3d:cc:45:2e:d9:ff:5f:15:14:d5:7b:f9:
         bc:5c:4a:73:42:70:a0:8c:b9:d2:cd:25:54:e0:3d:4d:8e:0b:
         52:29:1f:ee:d0:ed:60:7f:7e:76:8c:9e:ee:48:3c:6d:32:fa:
         5b:44:dc:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:03:11 2026 by rpki-client