Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa
File:                     60c05e3f-1816-3cff-8958-8504b17b798d.roa (raw, json)
Hash identifier:          X+vuDViPkngZeTLDiWBmjPtngobdgc445cAfp+4wtzc=
Subject key identifier:   EC:A8:26:1B:1C:5D:F6:52:82:18:1E:3C:95:89:60:33:8A:4D:CE:51
Certificate issuer:       /CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
Certificate serial:       010D0C9F4328584E94EA5695D2A4A3D20DB8F400
Authority key identifier: EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa
Signing time:             Wed 22 Jul 2026 09:00:11 +0000
ROA not before:           Wed 22 Jul 2026 09:00:11 +0000
ROA not after:            Tue 20 Oct 2026 09:00:11 +0000
asID:                     394745
IP address blocks:        170.75.160.0/20 maxlen: 20
                          172.81.176.0/21 maxlen: 21
                          2602:ffb6::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:94:ea:56:95:d2:a4:a3:d2:0d:b8:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
        Validity
            Not Before: Jul 22 09:00:11 2026 GMT
            Not After : Oct 20 09:00:11 2026 GMT
        Subject: CN=b1ec2dcf-0006-4c90-9ef4-0f91f67ebf3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bf:ae:ff:55:cb:66:dd:a9:ca:29:a6:e2:8c:
                    65:0b:07:37:31:bb:64:9a:ec:64:a5:d6:6d:bb:cf:
                    91:dc:ab:af:61:ae:3f:4d:ac:28:51:a9:a0:60:99:
                    89:f0:98:7a:16:ea:bc:4c:8b:4c:76:7c:ff:cf:ca:
                    00:83:05:0b:6a:ee:75:9c:e5:02:4f:27:59:a6:7d:
                    cc:ed:83:18:ac:1a:cf:ef:96:87:e6:e8:96:e2:55:
                    dd:3d:c5:4c:49:09:db:52:8b:3c:1d:dd:3f:ff:24:
                    95:54:c2:8e:5f:62:cd:bb:19:ad:63:3c:61:42:4e:
                    1c:0f:34:d2:3f:1f:35:df:d7:17:63:87:94:c6:5d:
                    51:33:bd:d1:50:c9:24:ce:e9:ff:93:46:ee:03:b3:
                    47:d7:1f:93:88:d0:6b:27:7a:f9:04:04:b3:13:74:
                    88:62:bc:9e:53:b8:1d:88:b0:f7:0c:10:cf:14:76:
                    e2:21:eb:80:b6:f7:24:d7:61:b1:c2:6f:7e:66:98:
                    63:7e:7a:22:a9:17:f2:b0:e8:16:48:9b:05:7e:4b:
                    53:c6:10:9c:39:6c:2e:1c:29:02:ea:bb:ff:3a:39:
                    de:a0:88:74:d5:0e:71:c7:09:10:c8:d8:37:8c:b8:
                    95:20:8f:e4:2a:26:0c:3c:d3:1d:be:40:67:34:07:
                    b1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A8:26:1B:1C:5D:F6:52:82:18:1E:3C:95:89:60:33:8A:4D:CE:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl

            X509v3 Authority Key Identifier:
                keyid:EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.160.0/20
                  172.81.176.0/21
                IPv6:
                  2602:ffb6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:22:13:b7:84:f1:57:d4:47:9a:0c:b7:16:dc:bc:d4:4b:11:
         5f:86:66:ed:ca:9c:a6:81:fd:33:fe:60:d0:34:a9:29:54:07:
         09:c2:d0:58:ef:b9:8c:1c:10:11:61:eb:7e:85:37:93:7d:64:
         29:b2:0f:1a:66:14:a4:cf:c9:4d:0a:bf:3a:32:4b:a9:37:8e:
         d7:be:f6:f3:be:98:05:ad:a3:3a:ae:78:24:31:00:bb:58:d3:
         28:83:c9:7b:47:4b:9d:5f:04:ce:b4:e8:24:e4:35:ed:d5:9b:
         57:11:1d:dc:83:ab:0a:22:80:83:0f:b6:45:fc:d0:38:6a:72:
         8a:f0:50:f4:b3:0c:f4:71:bf:3d:c0:9f:ea:26:23:16:e8:d7:
         2c:f7:8c:1f:30:4f:0c:16:3a:93:cf:44:24:85:42:64:fc:aa:
         b1:f2:58:24:e4:7e:a5:dc:b4:27:ee:59:33:1e:6c:7d:55:49:
         4e:ff:a0:57:3c:6b:2d:4d:16:e0:fa:c1:ed:ed:80:54:9a:67:
         10:74:57:32:dc:ce:39:9b:16:15:fc:7b:71:44:3b:a7:70:8f:
         ea:61:d1:d1:01:b0:ae:8a:dc:da:73:e5:0b:a1:d7:8d:71:73:
         bf:df:44:fc:19:20:93:aa:99:9a:b1:79:df:2f:60:8b:9c:85:
         b7:d3:f7:56
-----BEGIN CERTIFICATE-----
MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE6U6laV0qSj0g249AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZhNjA0YzItYmQ5Yy00ZDBlLWJmYjAtZGFhYzhjZDFj
M2ZjMB4XDTI2MDcyMjA5MDAxMVoXDTI2MTAyMDA5MDAxMVowLzEtMCsGA1UEAxMk
YjFlYzJkY2YtMDAwNi00YzkwLTllZjQtMGY5MWY2N2ViZjNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL+u/1XLZt2pyimm4oxlCwc3MbtkmuxkpdZt
u8+R3KuvYa4/TawoUamgYJmJ8Jh6Fuq8TItMdnz/z8oAgwULau51nOUCTydZpn3M
7YMYrBrP75aH5uiW4lXdPcVMSQnbUos8Hd0//ySVVMKOX2LNuxmtYzxhQk4cDzTS
Px8139cXY4eUxl1RM73RUMkkzun/k0buA7NH1x+TiNBrJ3r5BASzE3SIYryeU7gd
iLD3DBDPFHbiIeuAtvck12Gxwm9+ZphjfnoiqRfysOgWSJsFfktTxhCcOWwuHCkC
6rv/OjneoIh01Q5xxwkQyNg3jLiVII/kKiYMPNMdvkBnNAexawIDAQABo4IDazCC
A2cwHQYDVR0OBBYEFOyoJhscXfZSghgePJWJYDOKTc5RMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZmE2
MDRjMi1iZDljLTRkMGUtYmZiMC1kYWFjOGNkMWMzZmMvNjBjMDVlM2YtMTgxNi0z
Y2ZmLTg5NTgtODUwNGIxN2I3OThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWZhNjA0YzItYmQ5Yy00ZDBlLWJm
YjAtZGFhYzhjZDFjM2ZjLzFmYTYwNGMyLWJkOWMtNGQwZS1iZmIwLWRhYWM4Y2Qx
YzNmYy5jcmwwHwYDVR0jBBgwFoAU6uuVQNAUCiOlEBgO4kiYg3XNvEgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZmE2MDRjMi1iZDljLTRkMGUtYmZiMC1kYWFj
OGNkMWMzZmMuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQEqkugAwQD
rFGwMA4EAgACMAgDBgQmAv+2ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7IhO3hPFX1EeaDLcW3LzUSxFf
hmbtypymgf0z/mDQNKkpVAcJwtBY77mMHBARYet+hTeTfWQpsg8aZhSkz8lNCr86
MkupN47XvvbzvpgFraM6rngkMQC7WNMog8l7R0udXwTOtOgk5DXt1ZtXER3cg6sK
IoCDD7ZF/NA4anKK8FD0swz0cb89wJ/qJiMW6Ncs94wfME8MFjqTz0QkhUJk/Kqx
8lgk5H6l3LQn7lkzHmx9VUlO/6BXPGstTRbg+sHt7YBUmmcQdFcy3M45mxYV/Htx
RDuncI/qYdHRAbCuitzac+ULodeNcXO/30T8GSCTqpmasXnfL2CLnIW30/dW
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:05:14 2026 by rpki-client