Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a60f390e-6c81-3aff-b8e0-e81760b2ce11.roa
File:                     a60f390e-6c81-3aff-b8e0-e81760b2ce11.roa (raw, json)
Hash identifier:          1vJAXQoSs/KUidizz9YgHsT6lP5uoNaf8QF0yM9RZQ8=
Subject key identifier:   4C:7A:80:3D:65:79:16:37:37:D6:BA:B7:A6:E1:C7:95:6A:E9:C1:6A
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584E3A2F72E2908E126226BA1C00
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a60f390e-6c81-3aff-b8e0-e81760b2ce11.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     14114
IP address blocks:        157.133.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:72:e2:90:8e:12:62:26:ba:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=ebb7eddd-f447-4600-b74e-2314113c7c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:48:9d:ba:d8:5d:8e:72:e3:f3:b9:f9:48:a6:
                    37:74:aa:ec:6d:5f:70:1c:92:8b:38:3d:cd:5f:67:
                    6a:3f:ed:90:af:b8:25:f5:6e:d6:67:a4:e2:08:77:
                    7b:2a:b9:db:88:0e:74:5e:58:64:8b:29:36:6b:9a:
                    f0:68:ca:7e:54:df:28:18:21:cf:f7:94:38:a0:8e:
                    36:fe:23:3b:0b:e8:00:fa:53:ee:ca:fa:12:f3:22:
                    d3:aa:ab:fe:70:5d:d8:85:7c:80:b2:c3:9e:3c:31:
                    bf:d0:b2:cd:af:35:e5:6e:d2:44:e5:e2:85:9a:5c:
                    66:25:3e:67:e3:0b:fd:23:92:f2:60:25:bf:32:22:
                    f5:d9:3a:9d:8b:8e:98:e1:57:55:8e:50:de:ae:a7:
                    8d:a5:12:a9:3b:55:36:79:7f:26:55:14:c8:64:6a:
                    b7:17:03:85:fe:08:45:6f:78:31:65:92:d8:d6:63:
                    6b:e6:59:10:35:7f:d3:96:b7:6e:c1:30:6f:53:60:
                    a8:d7:0a:cf:04:39:c3:f9:c4:14:fa:59:94:3c:55:
                    de:82:01:e7:9d:38:62:9d:68:bb:5c:fb:18:a0:6e:
                    26:cd:2c:dc:7b:26:64:af:74:93:b6:81:d9:47:83:
                    cf:2c:36:4c:95:dc:92:ca:4f:53:ed:33:af:b1:62:
                    b7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7A:80:3D:65:79:16:37:37:D6:BA:B7:A6:E1:C7:95:6A:E9:C1:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a60f390e-6c81-3aff-b8e0-e81760b2ce11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:dd:c4:74:28:19:df:3a:c1:9a:81:67:46:c9:51:98:8b:d4:
         e6:dc:89:dd:fb:e6:d0:6c:51:41:0a:2b:b6:31:6c:0f:d3:6c:
         48:fd:50:d3:7c:4e:87:e4:8c:43:2a:e0:44:45:31:bb:8b:9c:
         86:df:0f:1f:1b:ca:e4:04:d2:56:f4:8b:5a:e9:b2:96:43:2e:
         11:0e:4e:b6:01:42:d3:08:57:69:ae:af:d2:1f:83:c3:6b:41:
         89:d8:5e:41:00:63:f9:69:11:ac:85:a5:51:e9:3d:1b:af:2f:
         6e:d1:84:b9:a3:7b:9e:81:17:08:7a:82:be:23:0b:49:f2:22:
         9c:3e:f6:e6:ab:05:14:f9:b1:7c:04:ac:30:6f:12:2b:61:75:
         97:15:d2:fb:20:c9:12:f9:32:d6:f3:52:c9:3a:a5:01:37:86:
         b6:2f:ac:70:94:e3:e4:c6:b8:cc:66:9b:41:62:25:99:a2:cd:
         46:e0:ed:f2:e9:c5:3c:92:07:de:2c:b4:5a:70:c0:93:1c:b3:
         ff:75:87:0c:76:8b:97:8e:9c:11:26:68:30:3b:55:44:a4:64:
         a2:e0:9b:c6:5b:35:83:66:f4:a9:36:e1:40:d5:40:6b:a6:b5:
         ac:44:7f:6e:4f:ed:3f:34:64:d8:5d:f0:ea:14:e5:8a:f8:e0:
         77:76:9e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:59:12 2026 by rpki-client