Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/0bc277a5-2872-3d20-ad4e-830604e72c6f.roa
File:                     0bc277a5-2872-3d20-ad4e-830604e72c6f.roa (raw, json)
Hash identifier:          2+xpWwqhXYN8Cstlq2kC+uGVVq0JGkpp6FATGH5o8Ko=
Subject key identifier:   B6:3B:70:25:5A:0B:CE:47:D6:CA:97:EE:4A:D1:FB:1E:36:77:DB:B8
Certificate issuer:       /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
Certificate serial:       010D0C9F4328584D60E4F4A29CDBCDCC15E41880
Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/0bc277a5-2872-3d20-ad4e-830604e72c6f.roa
Signing time:             Fri 03 Apr 2026 01:00:24 +0000
ROA not before:           Fri 03 Apr 2026 01:00:24 +0000
ROA not after:            Thu 02 Jul 2026 01:00:24 +0000
asID:                     55002
IP address blocks:        206.201.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:60:e4:f4:a2:9c:db:cd:cc:15:e4:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52
        Validity
            Not Before: Apr  3 01:00:24 2026 GMT
            Not After : Jul  2 01:00:24 2026 GMT
        Subject: CN=d09b586e-4c5d-40fd-b250-89ab3b7408d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:c2:8c:41:9d:90:c7:40:ab:61:06:6e:7e:
                    44:27:32:d8:9f:9d:87:89:fd:15:ed:04:2a:05:64:
                    ad:2a:e0:26:32:af:4e:7f:de:8f:89:c4:2e:b3:ab:
                    2a:73:e2:f6:eb:2b:cf:51:d7:0a:8a:a0:b2:50:57:
                    72:cb:30:60:ec:5a:41:30:46:2f:72:4f:05:18:88:
                    7b:e0:0a:6d:69:63:b4:ae:fd:40:03:24:bf:7e:28:
                    17:ea:46:72:15:da:b5:70:41:11:df:41:f1:e3:dd:
                    f2:96:c2:42:a8:4a:84:ba:d3:8b:78:83:c7:43:80:
                    34:52:4f:af:76:05:e7:fb:15:d6:02:ca:fa:93:8f:
                    91:f8:3b:b7:4b:58:aa:0b:41:6f:7d:49:22:87:10:
                    02:c4:98:8e:fe:19:43:6d:a8:1b:17:90:49:31:9d:
                    8a:ec:e7:e2:70:82:8e:33:4d:6a:14:b9:43:1a:61:
                    02:a0:82:a1:b7:a2:9d:be:15:56:5f:70:92:8a:0a:
                    3f:53:f0:9a:ec:f7:8a:d3:d6:2f:b5:fe:e0:27:ee:
                    82:d6:ba:28:1f:5e:fd:ea:60:5c:61:58:c5:9a:4f:
                    39:a3:b9:2a:d9:9c:b3:c3:9f:fc:6e:b1:1b:bb:4c:
                    73:ca:82:34:46:71:65:c2:31:55:36:89:30:92:13:
                    8b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3B:70:25:5A:0B:CE:47:D6:CA:97:EE:4A:D1:FB:1E:36:77:DB:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/0bc277a5-2872-3d20-ad4e-830604e72c6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl

            X509v3 Authority Key Identifier:
                keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.201.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:b4:e0:64:08:d5:f8:33:9a:20:35:1e:68:1a:f1:97:51:a8:
         f2:6f:71:9e:d0:89:78:84:68:44:e9:ee:c8:be:a6:be:ee:44:
         4b:01:12:c1:29:49:6f:34:07:87:76:8c:52:5e:d6:6c:a6:2c:
         6d:e2:27:6d:0f:24:0f:dd:a5:e7:c9:b9:a9:6b:fa:e6:6a:f3:
         e2:4c:0c:39:37:bf:1f:0a:cc:56:ec:1e:64:43:57:80:d2:72:
         98:6c:5e:5d:5e:5e:53:9f:a1:ea:09:00:ba:2d:c4:45:a5:ae:
         fe:07:47:b3:70:99:37:d8:29:7f:78:55:95:2c:4b:d7:d9:55:
         b1:b0:5c:bc:fb:30:f7:1f:59:a1:2d:ee:bc:35:37:6e:8b:ed:
         6c:37:27:fc:5c:24:7d:b8:34:ae:6e:92:fa:22:0c:d4:e5:af:
         ca:a2:a3:4f:c8:1b:04:f5:0c:04:ed:71:0e:02:a1:48:2b:9b:
         c0:47:e0:46:97:d7:36:09:2c:11:48:aa:54:fe:8f:86:b9:21:
         9b:ad:28:ef:c2:ca:2e:2a:3a:47:51:af:fe:1d:9c:cb:d4:5a:
         f9:71:12:79:38:68:7d:d6:08:8d:b2:c9:00:84:ce:25:77:8b:
         dd:74:92:36:f6:7f:b1:d7:a2:71:84:59:fa:12:89:d8:77:df:
         e5:a9:65:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:04:01 2026 by rpki-client