Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/247b305d-f301-3381-b5e2-e46af1dea532.roa
File:                     247b305d-f301-3381-b5e2-e46af1dea532.roa (raw, json)
Hash identifier:          SbjctCKplTnDLjSXLcIQTvjjGYQI1KCtI6lNGcmxCaU=
Subject key identifier:   18:3C:58:EC:96:FD:F6:BB:A8:4E:F5:70:63:38:DF:FE:40:E0:56:3F
Certificate issuer:       /CN=a01c464d-9d20-46a1-858b-c36c8c1a3776
Certificate serial:       010D0C9F4328584F7BB2F7DF591709C148E6FD80
Authority key identifier: 42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/247b305d-f301-3381-b5e2-e46af1dea532.roa
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
ROA not before:           Tue 13 Oct 2026 01:00:14 +0000
ROA not after:            Mon 11 Jan 2027 02:00:14 +0000
asID:                     6360
IP address blocks:        132.160.0.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Nov 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:7b:b2:f7:df:59:17:09:c1:48:e6:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01c464d-9d20-46a1-858b-c36c8c1a3776
        Validity
            Not Before: Oct 13 01:00:14 2026 GMT
            Not After : Jan 11 02:00:14 2027 GMT
        Subject: CN=853b991b-be56-46c6-806e-e09cd9bf78e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:47:cf:44:08:5c:97:4a:00:c3:bd:3d:b6:45:
                    c2:89:20:82:4c:46:c8:f8:dc:21:96:80:5c:f5:0b:
                    5b:ac:01:3b:7f:f4:14:a7:4e:60:25:24:a4:d6:12:
                    3e:b4:83:3d:a3:c6:5b:b6:ec:4e:3c:45:54:9f:82:
                    e7:1f:7c:f4:a8:1b:86:e6:cc:c7:19:71:cc:fe:00:
                    d5:21:14:43:da:98:1b:d9:72:6a:0e:4c:a5:06:1c:
                    18:ff:5a:3c:8c:d4:0e:82:e4:2e:98:c2:ad:16:7d:
                    c6:c6:52:b4:b3:b8:f7:60:d4:74:eb:96:35:ca:9d:
                    ab:a7:21:e8:12:62:d6:8f:b4:44:0e:b1:6c:de:39:
                    ad:f6:10:3f:d3:96:5f:f4:e0:ef:30:2b:cf:db:b2:
                    21:ab:2a:f0:3a:45:b9:24:d9:ea:97:f4:74:38:05:
                    d6:5c:0f:d9:06:1a:a5:50:8b:7d:5b:10:b3:6a:81:
                    4f:87:4a:c2:78:95:8f:e2:85:6a:2d:bd:b2:2a:73:
                    29:cb:64:23:2e:c1:bb:15:28:7e:f8:b1:66:1f:20:
                    cb:a5:a7:4c:0d:44:c1:9f:df:db:a3:8f:1a:59:22:
                    d2:99:41:4d:45:d4:e9:80:e1:c4:96:24:6c:21:26:
                    21:ce:e0:a3:e1:71:ae:fa:cb:34:ca:02:ab:fa:46:
                    01:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3C:58:EC:96:FD:F6:BB:A8:4E:F5:70:63:38:DF:FE:40:E0:56:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/247b305d-f301-3381-b5e2-e46af1dea532.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776/a01c464d-9d20-46a1-858b-c36c8c1a3776.crl

            X509v3 Authority Key Identifier:
                keyid:42:8D:86:35:2E:D5:21:76:56:74:A3:8F:E2:B7:8A:FC:03:DE:9F:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01c464d-9d20-46a1-858b-c36c8c1a3776.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.160.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:4a:1a:02:08:e6:98:cb:6c:20:5c:90:6b:69:07:86:e1:16:
         9f:26:0e:e3:b3:e5:df:ac:0d:92:ea:3c:19:6d:ee:2b:47:92:
         e1:26:86:ef:86:bf:8b:20:21:dd:94:11:83:72:91:40:cf:b2:
         f5:eb:6d:e0:b4:c6:be:84:be:0e:b2:b3:a4:67:8e:03:29:5c:
         0a:0d:f8:4f:53:03:68:32:c1:15:7b:9f:4c:a3:21:1f:1a:47:
         15:33:41:87:f2:d9:4b:b6:ce:24:57:6d:cf:b0:9e:96:c0:19:
         7f:26:aa:f6:a1:0e:d2:80:e7:a7:e0:e9:43:76:b0:31:23:b1:
         61:6c:b4:51:e5:54:b4:84:ea:f2:18:09:2d:e7:03:1d:26:85:
         47:89:ed:a2:0a:8b:4e:e3:f8:2c:fb:cc:7b:2a:14:bf:f5:5d:
         0a:49:a1:ef:15:ba:1b:e7:ca:61:be:4e:05:1f:0a:1b:04:54:
         c3:5d:8f:84:c9:bd:95:bf:98:c3:a6:c2:1b:66:f3:57:1a:22:
         d8:e1:2b:5c:07:56:3f:0b:22:e3:4f:b8:14:3c:61:87:d5:68:
         14:90:96:82:34:c1:f1:95:c9:79:a6:6d:74:84:c4:f2:9a:1b:
         36:7e:c6:9d:59:48:89:c6:a8:f6:d3:a4:bd:b2:10:f5:35:2b:
         4f:15:6b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 14:29:18 2026 by rpki-client