Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa
File:                     60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa (raw, json)
Hash identifier:          cQFmppFGNmDZ+/fZ7qgiRhn4TxvUpBLxV72QrbJVoNs=
Subject key identifier:   C6:A8:8A:8A:74:0C:89:FD:D3:C6:88:D7:F3:67:75:89:22:D2:E5:95
Certificate issuer:       /CN=31663e0d-961a-43ac-8a01-d43efc01bea0
Certificate serial:       010D0C9F4328584F0242279163F72A306F7B0440
Authority key identifier: 7B:F3:59:98:1D:7C:59:F4:71:50:EF:F2:7C:BA:A7:98:14:DA:40:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa
Signing time:             Sun 30 Aug 2026 13:00:11 +0000
ROA not before:           Sun 30 Aug 2026 13:00:11 +0000
ROA not after:            Sat 28 Nov 2026 14:00:11 +0000
asID:                     395555
IP address blocks:        170.10.64.0/22 maxlen: 24
                          170.10.72.0/24 maxlen: 24
                          170.10.84.0/22 maxlen: 24
                          209.206.64.0/19 maxlen: 24
                          2604:4c40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:02:42:27:91:63:f7:2a:30:6f:7b:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31663e0d-961a-43ac-8a01-d43efc01bea0
        Validity
            Not Before: Aug 30 13:00:11 2026 GMT
            Not After : Nov 28 14:00:11 2026 GMT
        Subject: CN=d1fe8815-b314-453e-b599-438371a72fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:19:52:5d:52:01:81:19:11:d9:7d:49:c0:55:
                    e8:16:ab:93:fa:4e:9c:46:3a:5c:63:99:86:6b:5c:
                    85:ec:09:78:23:10:ab:a5:2a:fa:75:db:75:c0:e8:
                    a4:05:78:f3:25:06:a2:ca:43:03:fd:c2:1b:6e:f8:
                    c2:35:5a:0c:95:5c:2f:4f:a4:63:ac:9c:cf:a3:b8:
                    7a:53:6b:1d:1e:9c:08:27:f8:70:b9:4b:33:62:bb:
                    66:8d:3c:6c:33:2e:b6:d3:9c:e8:ef:f8:7e:74:01:
                    18:b4:cd:16:ae:19:a8:db:a4:20:86:e6:fb:f6:36:
                    4e:8a:95:92:4d:99:70:71:18:d5:45:a3:31:e0:95:
                    65:fd:80:b5:39:07:58:9b:f0:32:2c:ec:62:16:11:
                    dc:ef:62:f3:62:94:cd:95:8b:25:4f:cc:75:ed:fe:
                    92:93:e1:f8:ce:99:d3:e8:e6:f3:61:01:41:81:e3:
                    6b:88:5d:4e:65:5f:e5:c6:cd:c7:21:bf:13:a1:85:
                    0c:dd:e1:51:94:84:4b:d7:ed:03:eb:fd:ac:ad:c1:
                    b5:8f:6f:3b:e0:97:41:e2:41:40:b5:4b:2a:21:0e:
                    e2:ac:e9:0e:5a:ea:69:c9:5c:59:67:c9:84:94:7e:
                    68:61:df:ab:34:48:83:07:39:74:3d:aa:a2:d7:66:
                    f6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A8:8A:8A:74:0C:89:FD:D3:C6:88:D7:F3:67:75:89:22:D2:E5:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/60b0efca-2ff2-35d3-bccd-0cd0eb1fa0b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0/31663e0d-961a-43ac-8a01-d43efc01bea0.crl

            X509v3 Authority Key Identifier:
                keyid:7B:F3:59:98:1D:7C:59:F4:71:50:EF:F2:7C:BA:A7:98:14:DA:40:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/31663e0d-961a-43ac-8a01-d43efc01bea0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.10.64.0/22
                  170.10.72.0/24
                  170.10.84.0/22
                  209.206.64.0/19
                IPv6:
                  2604:4c40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:1e:24:07:0e:2f:2e:9b:5e:7f:d3:b4:f5:ff:bb:11:49:65:
         48:44:13:49:73:ac:44:f7:81:04:94:11:7b:16:3e:6b:26:92:
         45:25:1f:44:3c:8f:cb:06:3d:25:cd:6d:1f:bc:88:65:b6:88:
         62:a0:77:a4:80:4c:be:82:60:4b:63:da:4c:72:c6:b3:c1:51:
         59:f2:ae:3c:ac:21:c4:11:0c:e4:d1:07:f1:b1:00:70:c7:4a:
         86:c6:c2:17:5d:59:85:b4:3f:40:70:fc:75:c2:11:09:93:27:
         70:37:33:6e:7e:e9:80:cd:6a:8f:17:2e:45:72:0c:c0:ab:9e:
         28:20:d0:f3:b2:19:24:97:df:d1:5f:aa:68:11:82:83:1f:43:
         c8:fc:6a:43:2a:5e:ae:28:6d:e3:38:bc:15:2b:18:b4:7f:4a:
         9a:c6:55:a5:52:41:a8:50:a4:b8:23:ee:0b:84:3c:4f:2c:3f:
         c1:21:26:a5:5d:42:ed:46:11:70:a6:e2:44:84:e6:05:4b:fd:
         43:76:f5:39:3a:11:28:21:9c:c5:e4:5d:8a:ea:38:e1:8b:c6:
         d5:68:29:d0:1c:16:40:2c:87:c8:e7:b9:5e:55:6b:9b:f4:ef:
         55:ed:43:b0:72:eb:45:df:d7:b3:58:1e:19:9c:36:32:3a:a6:
         5c:6a:b3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 10:18:36 2026 by rpki-client