Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/7a4db5ff-6d7a-397a-a19e-c533fae8190a.roa
File:                     7a4db5ff-6d7a-397a-a19e-c533fae8190a.roa (raw, json)
Hash identifier:          +BZHPctqoStsve+bg2XxhW4uOek43b4CtrVvfCOsg5w=
Subject key identifier:   FA:11:C1:34:A8:52:40:A9:86:91:7D:DE:9E:9A:71:B7:EF:28:42:0A
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F4328584E5FDF6401E2F462C97632C580
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/7a4db5ff-6d7a-397a-a19e-c533fae8190a.roa
Signing time:             Fri 03 Jul 2026 09:00:12 +0000
ROA not before:           Fri 03 Jul 2026 09:00:12 +0000
ROA not after:            Thu 01 Oct 2026 09:00:12 +0000
asID:                     19107
IP address blocks:        216.234.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5f:df:64:01:e2:f4:62:c9:76:32:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Jul  3 09:00:12 2026 GMT
            Not After : Oct  1 09:00:12 2026 GMT
        Subject: CN=0da6a6e4-f85d-4139-b683-42dac364d07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:7f:ab:50:3d:13:45:75:5a:dc:a1:b8:b2:
                    05:0c:2a:eb:b2:9c:90:21:1f:d6:4d:4d:17:56:96:
                    b1:84:d2:f3:d0:b7:fe:22:3c:26:1b:dd:a2:28:53:
                    30:fe:7f:5d:46:6d:be:7f:9e:b8:5e:d5:fd:65:15:
                    73:53:5c:22:b4:ea:4b:15:9b:9c:5c:f8:73:a1:14:
                    eb:f9:81:8e:1a:1e:17:2d:3d:18:49:ae:a8:2e:29:
                    55:77:d6:5a:27:b1:3e:e4:f0:2b:d7:89:cc:5f:70:
                    92:27:f7:52:97:26:8f:15:af:57:fa:d5:72:37:e5:
                    3e:7d:d0:0a:2e:f7:35:68:86:08:f7:a2:d1:c2:c8:
                    e6:6b:ca:f4:0e:d8:2e:05:b4:94:73:5e:0c:be:73:
                    37:b7:d7:e9:60:2f:93:b5:4b:39:97:4a:65:09:a2:
                    1c:35:d6:52:83:01:16:90:57:70:f7:3f:42:ae:36:
                    62:eb:5e:cb:d6:37:2d:fb:90:5a:cb:2d:48:56:e8:
                    62:56:1f:4c:e0:46:7a:64:0e:ff:7b:0d:1d:82:96:
                    93:07:03:5b:f4:52:5f:ae:82:b9:22:f2:7b:e2:d8:
                    67:08:77:1b:8d:14:ee:25:d1:fa:69:17:8e:f9:bb:
                    a8:cf:57:cd:8f:58:1f:d8:07:45:d3:ab:5f:86:07:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:11:C1:34:A8:52:40:A9:86:91:7D:DE:9E:9A:71:B7:EF:28:42:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/7a4db5ff-6d7a-397a-a19e-c533fae8190a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:ec:16:c4:87:cd:9a:03:42:cc:11:88:42:d3:d4:38:06:87:
         ed:e8:53:7b:66:7e:cc:dc:4d:0e:0f:f0:b3:4b:52:96:08:ae:
         3e:d2:2b:dd:7d:24:c2:97:ea:35:9b:51:96:42:55:a7:ad:e4:
         41:8c:64:de:8e:c6:6b:3b:8b:ea:39:a1:28:e6:94:9a:64:77:
         e3:eb:c7:61:e8:1a:61:ed:6e:de:24:b9:50:c5:8d:2e:81:33:
         cb:8a:fe:f4:ae:12:45:bc:6a:36:2a:42:e2:03:23:3e:1c:74:
         73:4d:c8:c5:8e:0c:ab:34:51:58:62:b6:7c:44:db:96:54:c9:
         c9:42:b7:00:64:e6:90:ab:a1:40:75:1f:68:5c:91:7f:ca:1f:
         7e:9d:97:ff:d3:00:96:7a:4a:f8:41:1c:7d:ae:00:2d:fe:85:
         a0:40:3c:28:b0:be:2c:57:62:a4:59:cb:39:0e:ba:16:8e:fc:
         c6:2a:bf:45:68:35:34:19:5f:e1:40:9d:f9:73:d7:4f:d6:8e:
         ed:04:96:74:88:f5:7e:13:6a:29:23:80:f8:6b:a0:c1:83:b5:
         6d:86:57:c2:57:53:41:41:a4:78:ed:52:49:ef:57:16:0f:d6:
         0a:8d:6e:c1:f9:a2:e6:7a:77:67:81:7c:09:f1:0b:30:d4:fa:
         f1:49:e7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 18:03:40 2026 by rpki-client