Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9c036de7-b945-349f-9b08-84cb67f78755.roa
File:                     9c036de7-b945-349f-9b08-84cb67f78755.roa (raw, json)
Hash identifier:          zoxMR1ZxNDk+R/0FYoEB/GnUUOx1s2U5JnwWAAF48wc=
Subject key identifier:   97:F8:FD:71:B0:FD:B2:13:7D:48:AF:DE:90:9B:9F:E3:01:D3:A3:D6
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F4328584D20AF7D3D27D50ABA1BFCED80
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9c036de7-b945-349f-9b08-84cb67f78755.roa
Signing time:             Wed 11 Mar 2026 01:00:32 +0000
ROA not before:           Wed 11 Mar 2026 01:00:32 +0000
ROA not after:            Tue 09 Jun 2026 01:00:32 +0000
asID:                     268707
IP address blocks:        198.242.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Mar 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:20:af:7d:3d:27:d5:0a:ba:1b:fc:ed:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Mar 11 01:00:32 2026 GMT
            Not After : Jun  9 01:00:32 2026 GMT
        Subject: CN=484e80a1-9ce1-4378-8a75-234d5ceec0f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:b2:1d:65:6a:81:9c:b5:4b:c5:63:9a:db:
                    dd:bf:95:3e:5d:f2:2a:47:c2:a4:18:cf:21:3d:33:
                    39:e4:e5:26:1e:c5:ba:8d:e1:71:34:22:84:83:46:
                    aa:e9:3b:6b:74:c4:cf:9d:67:69:26:b2:9f:ec:45:
                    8b:9d:95:4f:f3:b5:bf:33:4e:71:4c:e1:a7:ba:2f:
                    1b:17:6b:92:d9:06:d8:e1:0d:b6:26:04:dc:67:9e:
                    dd:5a:b2:d7:a6:41:27:9a:04:fe:5b:6e:c5:51:6c:
                    4a:2e:b5:26:d3:ee:03:1f:4b:f7:1e:88:91:39:23:
                    d7:ef:f2:75:fe:e4:f5:72:2c:b6:35:67:a1:d4:51:
                    2e:09:96:da:ac:b1:92:b4:2c:46:ee:01:8f:09:26:
                    1b:34:89:cf:bc:6a:b9:70:5a:47:52:8b:64:df:37:
                    b0:a0:04:46:8b:0d:db:6c:15:7d:e3:1e:31:3a:44:
                    60:f4:63:af:07:d2:e6:38:87:6f:6f:99:13:67:44:
                    aa:d5:28:0e:64:79:45:aa:91:c0:3f:f5:ce:43:65:
                    d7:18:22:c0:6e:58:3b:53:31:cc:8b:68:48:d2:0b:
                    86:72:16:a4:6d:a4:d4:38:e4:fd:34:0a:49:f6:67:
                    0d:46:ce:98:d7:09:99:20:10:9a:e9:f7:07:e9:48:
                    fe:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:F8:FD:71:B0:FD:B2:13:7D:48:AF:DE:90:9B:9F:E3:01:D3:A3:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/9c036de7-b945-349f-9b08-84cb67f78755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.242.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:0e:6a:e1:d2:60:5b:d2:ac:e9:8f:f2:c0:63:89:7d:f9:11:
         c0:66:2f:c7:29:f9:46:35:20:bc:88:57:08:5e:8d:6a:f6:d0:
         e7:56:20:9b:11:a4:6e:72:8a:61:a2:1a:82:44:84:2b:bc:12:
         d2:39:9b:21:66:4a:3c:d5:5b:d7:1b:64:35:3e:aa:b2:60:57:
         f8:a2:34:84:0f:73:d5:ef:56:20:cf:01:5b:39:91:cb:09:7c:
         1b:4c:98:b8:ce:39:0b:b4:a9:4b:c5:2c:c8:51:c7:b2:b1:67:
         b6:20:77:95:4f:c3:2b:29:93:ed:18:87:0b:1d:6f:96:5d:fd:
         05:8a:30:2c:ad:e2:ff:97:27:21:d9:bc:8f:58:1e:c4:fb:ff:
         8b:62:c2:22:d5:f3:25:bf:48:11:d2:a2:81:14:cf:52:16:58:
         c0:bb:a6:d4:c3:52:aa:b7:28:18:0b:57:6b:9a:90:5f:0a:9f:
         fa:0e:a7:23:1f:3b:9a:17:2d:5e:48:d0:a8:f4:c8:07:f0:75:
         5c:a6:03:d7:6f:1f:2d:f0:5b:3f:01:92:a9:30:24:49:fb:7b:
         8f:02:15:d9:3c:b4:8f:47:1e:c8:ac:07:5d:95:38:3a:d2:ce:
         ac:96:29:8d:9f:e4:06:30:f2:15:90:09:aa:6d:ed:8e:fb:70:
         b8:12:b2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 18:22:13 2026 by rpki-client