Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2c74e43c-fc33-3b95-b27c-cba7c4887ce5.roa
File:                     2c74e43c-fc33-3b95-b27c-cba7c4887ce5.roa (raw, json)
Hash identifier:          /CzCQf60g2LNNd5l83UpOYiFt08CJn/iQf0a3V6vIuM=
Subject key identifier:   85:DB:BF:F4:AA:35:9E:09:C3:FF:E3:8A:43:B5:47:52:45:5B:67:56
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584EF01CA297BA2DAF649EF8D9C0
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2c74e43c-fc33-3b95-b27c-cba7c4887ce5.roa
Signing time:             Mon 24 Aug 2026 01:00:12 +0000
ROA not before:           Mon 24 Aug 2026 01:00:12 +0000
ROA not after:            Sun 22 Nov 2026 02:00:12 +0000
asID:                     23005
IP address blocks:        207.60.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f0:1c:a2:97:ba:2d:af:64:9e:f8:d9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Aug 24 01:00:12 2026 GMT
            Not After : Nov 22 02:00:12 2026 GMT
        Subject: CN=9bed745d-b750-4065-be98-ad89afb11174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:23:f1:b6:1f:f8:bf:de:28:46:30:15:0e:5f:
                    76:8e:68:05:eb:78:10:37:e3:94:10:2c:19:5e:28:
                    9b:36:cf:4a:82:44:6d:01:21:2c:96:cd:51:18:c4:
                    ff:52:76:d8:da:d9:b0:35:9e:18:2d:95:22:65:0d:
                    db:f5:25:e4:7e:c0:0b:d8:29:71:81:b7:f9:b2:b6:
                    ed:6c:23:6e:46:70:81:da:6d:fb:40:23:61:60:ef:
                    6c:c2:a6:fc:77:af:3e:de:3d:80:32:9e:16:4d:c8:
                    04:25:71:81:f8:c1:e9:9f:5d:bd:23:30:cd:b7:96:
                    1c:b5:7f:47:77:b6:91:ff:50:f3:be:9f:bd:e8:9a:
                    24:2f:d8:87:a2:e2:28:f7:04:a4:f2:bf:50:ad:8b:
                    3b:f3:70:c2:0b:6d:58:cd:d2:db:2c:fb:ad:20:a1:
                    36:57:95:d6:1e:01:20:f9:1b:70:8a:f6:3a:3f:e9:
                    ee:ce:77:e3:48:b5:44:88:bd:4a:80:f4:f0:a9:4b:
                    0d:22:c0:77:67:4d:ba:4a:f5:24:b1:de:5d:da:8c:
                    48:92:96:3e:7e:bb:17:4b:66:8d:97:22:ce:43:a6:
                    b6:76:6e:2d:3a:dd:68:39:25:49:7c:e3:ee:dc:8b:
                    cd:90:ab:92:9b:fd:3f:96:49:7c:e8:1c:e3:2d:53:
                    c5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DB:BF:F4:AA:35:9E:09:C3:FF:E3:8A:43:B5:47:52:45:5B:67:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/2c74e43c-fc33-3b95-b27c-cba7c4887ce5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.60.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:f2:fc:69:ee:1e:c5:35:71:a0:56:dd:41:41:9e:9a:ea:97:
         83:ec:d2:9b:29:5c:f8:bc:40:1e:51:86:64:6d:a3:94:cd:40:
         bd:51:ce:09:ef:92:97:60:c4:0e:be:46:cb:82:fa:ec:15:a2:
         35:f4:b0:c2:a5:2c:cb:19:54:ae:61:74:3a:8e:83:33:7f:4f:
         23:86:a6:45:24:ab:94:4b:ec:d3:df:2c:38:a6:8d:0b:cd:d9:
         60:e1:df:5b:7d:2f:65:3d:44:02:cf:8b:48:32:6e:1a:5e:a7:
         1c:f0:d0:0d:2c:28:fb:b3:8d:ff:72:cc:fc:46:8c:eb:65:be:
         8c:ba:32:72:15:05:55:34:4b:7a:03:47:25:6b:97:08:2d:22:
         ca:86:1b:1c:b7:f0:93:01:30:55:a6:33:de:7a:59:fd:45:1d:
         f4:92:2b:ff:79:40:f5:ad:e7:30:d1:09:c1:65:58:bb:e2:60:
         5d:3d:af:92:4c:8e:c1:cf:ea:c7:69:e9:a1:b4:9a:bb:ab:aa:
         e8:71:5b:ae:93:4d:2d:4f:79:46:63:d6:c6:1e:23:c0:31:03:
         0c:7c:9b:96:31:6c:b4:db:b9:c4:2c:70:54:7c:e9:a8:61:9c:
         d3:91:29:3e:9f:6d:47:ae:ab:d5:be:ed:16:7f:76:ff:83:6d:
         46:8d:a4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:13:23 2026 by rpki-client