Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/3a314440-3852-3ede-949e-440ef10c8f34.roa
File:                     3a314440-3852-3ede-949e-440ef10c8f34.roa (raw, json)
Hash identifier:          anQ0ay3Fn5GFnzIyz8t2pC8bCuGNWwunObhzjuDXSL4=
Subject key identifier:   25:D6:63:00:33:72:F7:77:0E:30:00:D2:7E:12:0D:A8:14:45:3A:CD
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F4328584F31B7C0E048D078CE366C5460
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/3a314440-3852-3ede-949e-440ef10c8f34.roa
Signing time:             Wed 16 Sep 2026 13:00:12 +0000
ROA not before:           Wed 16 Sep 2026 13:00:12 +0000
ROA not after:            Tue 15 Dec 2026 14:00:12 +0000
asID:                     14618
IP address blocks:        167.234.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:31:b7:c0:e0:48:d0:78:ce:36:6c:54:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Sep 16 13:00:12 2026 GMT
            Not After : Dec 15 14:00:12 2026 GMT
        Subject: CN=e41fa0a0-ef0e-40fa-98d9-2e8c16acdd3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:94:0f:fb:d2:62:b0:f8:f2:40:9d:b1:30:76:
                    07:d4:02:3e:18:ac:0e:ae:a3:6a:15:70:20:ed:83:
                    1d:b5:86:d6:95:37:d9:79:37:01:b3:34:02:0f:d0:
                    8c:76:1d:5f:4f:2d:f3:3e:ca:4f:dd:66:64:6c:ac:
                    31:2c:aa:d8:18:03:a8:53:f4:d7:df:66:5a:bf:28:
                    03:50:3f:4a:bc:f6:c7:1d:7a:8b:9d:38:32:84:ce:
                    70:27:d6:c3:4a:3e:0a:1c:cc:b2:1d:f6:73:f8:f7:
                    47:e6:60:d9:c4:69:85:d0:03:bd:85:af:36:b5:ca:
                    1d:a9:45:13:ae:ce:2e:b9:a5:00:1c:39:13:ce:09:
                    70:83:1d:2a:5e:d2:07:c7:8b:2d:42:95:37:a7:a9:
                    cd:1e:a1:a4:40:a4:0e:73:11:05:ab:98:f1:f2:c8:
                    e5:7a:6d:65:93:14:58:01:34:1b:11:11:f2:ac:5e:
                    5e:3e:ba:29:0f:cb:e4:f4:23:83:fd:92:2a:f7:2b:
                    d6:13:32:08:ad:1c:73:fd:b8:cc:7e:ff:33:84:e9:
                    b5:53:80:2d:47:72:5e:50:68:b8:c2:78:11:ff:63:
                    07:29:21:e8:b4:5e:ff:49:0d:d0:88:a4:2c:59:84:
                    f6:a1:f8:60:b7:7f:d3:c8:51:d0:ed:59:c7:1c:48:
                    e2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:D6:63:00:33:72:F7:77:0E:30:00:D2:7E:12:0D:A8:14:45:3A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/3a314440-3852-3ede-949e-440ef10c8f34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:49:25:7f:8f:0f:1e:ad:c5:44:1e:70:9a:82:8e:66:4a:0f:
         ea:32:0e:e1:06:bb:c6:f1:09:55:c1:21:d5:67:fc:99:56:16:
         b9:95:67:25:fc:ee:29:2a:40:68:31:71:49:3d:81:3b:9c:15:
         f5:49:75:44:29:b8:3c:a1:ad:9a:4b:72:ec:8b:30:54:ae:6d:
         bb:15:2d:5e:a7:9b:39:c5:7e:c3:7a:5c:f2:19:78:f9:a1:db:
         4a:f2:9e:2e:f5:36:49:d5:2b:93:8a:fb:9b:af:92:a9:2e:f3:
         d5:30:0a:72:6a:c9:1a:30:9c:c4:ba:c0:c3:40:68:66:be:f1:
         81:04:19:e4:10:f8:68:2a:cf:21:bd:07:55:2f:e6:29:ad:42:
         28:6a:73:30:cb:44:be:ec:3e:05:33:eb:5f:d1:21:d5:6c:ee:
         86:6e:ed:0f:5a:44:e7:e8:51:cb:4b:3b:1f:42:e8:ea:cf:ab:
         71:63:ed:98:31:cc:94:c9:6f:a9:66:04:3f:71:f0:b9:eb:71:
         bd:55:af:6e:15:d3:6f:72:2c:ac:db:9c:9b:21:33:13:49:67:
         b9:f0:9c:d7:41:3a:af:0d:a1:ec:92:68:de:3a:33:ad:88:3c:
         fc:e9:bc:bb:fb:66:74:2b:37:4a:7d:4d:0a:c5:ed:20:19:bf:
         37:3b:51:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 21:28:25 2026 by rpki-client