Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/211da43d-fda4-33b5-9961-187f3563b2d9.roa
File:                     211da43d-fda4-33b5-9961-187f3563b2d9.roa (raw, json)
Hash identifier:          uzJVtGyFFbNMUw31FAb/xmZCn2MF6QJI2cumYovaMAA=
Subject key identifier:   9B:F1:42:54:DA:21:63:D3:27:B0:22:44:EB:62:BE:67:69:24:20:12
Certificate issuer:       /CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
Certificate serial:       010D0C9F4328584EA795D7F3BB48CDA61FB6EB20
Authority key identifier: 36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/211da43d-fda4-33b5-9961-187f3563b2d9.roa
Signing time:             Wed 29 Jul 2026 01:00:12 +0000
ROA not before:           Wed 29 Jul 2026 01:00:12 +0000
ROA not after:            Tue 27 Oct 2026 01:00:12 +0000
asID:                     6079
IP address blocks:        141.195.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a7:95:d7:f3:bb:48:cd:a6:1f:b6:eb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
        Validity
            Not Before: Jul 29 01:00:12 2026 GMT
            Not After : Oct 27 01:00:12 2026 GMT
        Subject: CN=b63bd605-f516-4874-9869-e64f6355e627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4e:08:e9:11:b0:e2:f0:b0:62:92:24:54:ef:
                    67:69:1f:fb:30:a0:50:11:b7:44:cd:3a:ec:4d:22:
                    20:ff:f5:da:98:62:16:71:0b:d0:5c:1f:8d:cc:bf:
                    5b:6f:fd:66:1c:dc:70:b1:d7:57:b1:cb:ad:46:2c:
                    6c:cd:14:df:c4:f1:a7:15:e0:4a:9b:fb:8d:90:5a:
                    11:86:cf:f6:96:43:10:af:8a:8b:f9:c8:63:60:b7:
                    c1:6a:4d:1a:81:bc:ac:e9:c4:db:45:45:7b:24:12:
                    dd:dd:5a:16:f3:2f:2e:75:93:ec:ac:d6:15:3e:e8:
                    76:c9:9f:85:2f:7c:4b:81:7c:d7:6e:1d:15:fc:d4:
                    b4:9c:e6:70:25:a9:5a:f2:65:38:82:9b:30:bb:72:
                    9d:ca:cf:07:0f:00:a5:84:5c:c2:d8:27:ae:fd:cd:
                    8a:24:c4:c4:c1:26:90:87:47:af:58:5a:dc:e4:86:
                    1f:a5:77:32:df:e3:60:e4:9b:6a:d9:9a:46:99:6f:
                    12:cb:fd:85:ff:5a:a1:ff:85:8e:f0:47:23:81:21:
                    60:f8:90:ef:9a:b3:b4:17:9b:61:51:46:a9:2f:5a:
                    ad:31:df:54:57:6a:d7:a4:8d:54:29:35:ef:13:d5:
                    a2:ab:4b:49:0e:e6:96:10:39:b3:f3:b1:0c:06:10:
                    1f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F1:42:54:DA:21:63:D3:27:B0:22:44:EB:62:BE:67:69:24:20:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/211da43d-fda4-33b5-9961-187f3563b2d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl

            X509v3 Authority Key Identifier:
                keyid:36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:e9:a9:ff:79:22:ee:38:c4:bb:37:39:92:b5:0d:72:4c:61:
         6c:bd:38:c5:4a:84:48:59:56:01:19:f5:c0:4f:0a:22:1a:d0:
         87:0c:4e:76:47:06:8b:2e:3a:3e:9c:ea:27:eb:92:71:78:4e:
         35:5e:67:f3:62:a4:17:dc:ab:20:c9:47:85:a8:35:18:b4:33:
         1e:be:6e:76:87:08:c8:d3:c5:9b:dc:07:bc:c4:3d:00:80:6a:
         8c:59:5d:d7:e7:3e:a8:03:45:90:2c:ad:47:5b:14:69:2a:15:
         55:b0:65:88:4d:e1:93:5c:f6:26:9a:b8:97:23:35:93:ea:32:
         65:1c:7e:a1:e3:b0:de:27:3e:82:00:53:c3:46:c1:85:a9:8c:
         d5:50:8b:4c:c7:5e:0b:92:70:24:df:04:eb:3a:10:10:1c:5e:
         c9:78:da:f1:30:b5:a0:ac:76:b4:fb:eb:6b:d0:63:42:08:ca:
         19:21:aa:d3:2e:e6:a1:64:d8:1c:4e:11:44:ec:f8:98:dc:7e:
         13:95:44:c2:84:5a:12:9b:ce:61:32:55:a4:4e:02:70:3b:53:
         b2:44:12:fa:ce:ad:12:2d:c0:65:72:3c:f3:53:c9:4b:b3:ef:
         b1:73:9a:40:d5:59:10:66:1e:c6:99:62:55:88:77:f4:5f:37:
         97:eb:0a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:46:20 2026 by rpki-client