Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/060e0859-9eef-3aeb-a2fd-ecf2e35cb0c5.roa
File:                     060e0859-9eef-3aeb-a2fd-ecf2e35cb0c5.roa (raw, json)
Hash identifier:          cY1xRbDHsLnnN/Ofr0kYLcIYWPliO8sy5TKQ3+LC28k=
Subject key identifier:   3F:3B:0B:9E:29:4A:E0:3F:7B:71:5A:D4:2D:8B:BE:EC:5D:F1:6F:70
Certificate issuer:       /CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049
Certificate serial:       010D0C9F4328584E34538EED10FE3E3B116D8D80
Authority key identifier: 3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/060e0859-9eef-3aeb-a2fd-ecf2e35cb0c5.roa
Signing time:             Wed 17 Jun 2026 18:38:54 +0000
ROA not before:           Wed 17 Jun 2026 18:38:54 +0000
ROA not after:            Tue 15 Sep 2026 18:38:54 +0000
asID:                     55189
IP address blocks:        192.132.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:34:53:8e:ed:10:fe:3e:3b:11:6d:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c2d3359-7bc2-4c3d-9c33-c25034dbb049
        Validity
            Not Before: Jun 17 18:38:54 2026 GMT
            Not After : Sep 15 18:38:54 2026 GMT
        Subject: CN=b7d7c7b9-53b8-4838-ab3f-b2315e799373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:fb:c7:6b:78:de:b4:5c:63:6e:60:eb:7f:6d:
                    e3:d3:b6:41:5d:d6:c0:76:f9:8e:ae:e5:dc:a0:62:
                    60:82:c8:ae:d7:ad:b0:6c:c6:df:fd:c0:e2:87:13:
                    ce:0e:9a:1e:f6:a5:10:ba:34:68:20:9a:de:d6:a6:
                    4c:38:d2:af:74:e2:3c:4f:32:db:c7:5d:cb:13:c7:
                    90:0a:e3:61:80:e6:cb:72:e5:03:7b:c9:ff:42:b3:
                    9d:51:92:ac:c3:43:92:2f:8f:5b:a8:4c:f1:ee:50:
                    85:b2:32:26:4d:41:db:7e:40:db:49:21:d8:91:74:
                    12:c4:de:38:79:ed:c1:99:8c:1b:cf:91:9f:4e:82:
                    3a:20:b1:f5:33:ca:09:96:22:48:b3:69:bf:85:cc:
                    32:53:3a:1b:7b:27:3b:f9:c9:2f:8f:0c:2c:4a:66:
                    55:c3:d4:c9:3f:0c:06:e6:86:f3:59:bb:27:f7:f7:
                    a2:cf:28:0a:2d:1c:cd:52:9e:d0:07:02:f0:ef:dd:
                    b8:4c:de:72:07:64:19:a4:ac:4e:4d:99:1f:10:ae:
                    04:c9:3e:f1:1b:62:76:fe:f5:f7:f1:b5:73:58:8b:
                    5c:c1:8d:2a:bc:38:7a:98:f1:da:6b:1a:4e:85:65:
                    30:a0:7c:b0:d4:01:8c:d4:a5:25:07:5a:41:21:6f:
                    76:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:3B:0B:9E:29:4A:E0:3F:7B:71:5A:D4:2D:8B:BE:EC:5D:F1:6F:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/060e0859-9eef-3aeb-a2fd-ecf2e35cb0c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.crl

            X509v3 Authority Key Identifier:
                keyid:3E:DA:72:32:3B:45:1C:DE:83:A9:DD:72:64:82:D2:19:99:A7:23:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9c2d3359-7bc2-4c3d-9c33-c25034dbb049.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.132.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:da:ac:d3:c8:df:8b:e9:c3:39:4c:1c:6b:db:d9:81:b7:0c:
         6a:cd:da:3d:7d:40:df:9f:5c:bd:fe:7f:26:aa:e0:5b:4e:cf:
         93:74:67:76:d6:a3:c7:af:05:5f:e7:de:b1:01:f8:35:66:f7:
         16:cf:4e:f8:02:d6:8f:20:64:14:5f:fc:6d:c4:0d:06:cd:96:
         40:e5:67:3b:5d:c2:65:84:75:ea:09:aa:38:47:56:97:47:fd:
         72:d3:cc:2b:57:13:1e:e2:b3:c3:b8:c2:31:2d:8b:26:0a:41:
         d4:48:bb:1d:ce:77:5a:81:db:a4:75:42:33:b0:8d:26:b8:09:
         03:99:d0:34:62:a0:dc:1f:b0:b9:1d:2d:47:bb:b6:16:f0:93:
         85:43:16:de:f2:06:4c:fc:31:1a:f4:c4:86:75:1f:7f:17:87:
         2d:33:e2:22:dd:64:b3:74:cc:07:b8:8b:fc:cd:71:2d:6f:57:
         32:ff:e7:da:7a:30:4a:b2:3a:a6:4d:21:27:e0:3a:8b:d2:b0:
         26:cd:f7:bb:b1:5f:d2:d8:22:57:02:1f:28:e3:db:cd:48:62:
         ac:85:51:5d:25:00:f1:b3:c4:c1:d9:65:8e:c2:dd:85:24:0e:
         4a:4f:98:74:87:2c:8e:97:b3:23:ae:d4:63:0a:f9:e2:30:00:
         e8:9a:7c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:09 2026 by rpki-client