Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/eae757c8-21af-3b58-a16e-8062e109686a.roa
File:                     eae757c8-21af-3b58-a16e-8062e109686a.roa (raw, json)
Hash identifier:          nMBn74pvWAO6rXGhIwyN5iUNy3FmNZeV2RPtiS7vnh0=
Subject key identifier:   20:E2:7F:43:72:21:B6:F1:FF:54:CE:74:91:21:99:4F:97:F0:C1:7A
Certificate issuer:       /CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
Certificate serial:       010D0C9F4328584DD0906E4495D8DAB4FF44A400
Authority key identifier: 74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/eae757c8-21af-3b58-a16e-8062e109686a.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     14618
IP address blocks:        159.172.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:6e:44:95:d8:da:b4:ff:44:a4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b90f7d-2bc6-4942-a304-98a91a506d72
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=27ef4136-d6cd-440a-8b52-cabed0e76e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:11:88:d4:36:e8:16:21:e0:85:83:a0:55:5b:
                    0e:32:95:04:e6:cd:a5:cb:e3:ac:01:fa:ee:db:2c:
                    9b:bf:ce:43:2f:c0:16:8f:3e:51:50:cb:b6:f6:18:
                    9a:a9:3b:aa:a2:46:82:98:a9:34:a3:78:ef:21:08:
                    f2:f9:1f:ce:65:48:3a:51:60:54:64:fb:bc:77:6b:
                    fa:f5:04:bf:be:d4:eb:35:db:34:35:3f:ad:51:9f:
                    5a:55:e8:34:04:e2:77:54:92:32:47:86:33:17:2c:
                    30:2a:9c:d6:19:a2:d2:f8:57:cc:76:e7:d9:92:7f:
                    0a:ca:dd:2e:7f:98:c0:7f:8a:37:6c:00:76:90:a3:
                    d9:04:8c:99:8b:49:2a:69:48:6e:41:f7:9b:b6:04:
                    c5:cc:59:37:20:08:82:06:55:1f:04:d8:6b:c2:10:
                    bb:f0:46:7f:44:89:00:f6:e8:f1:3f:f4:81:de:7a:
                    12:7a:6b:a7:18:bd:f2:ff:e0:86:c8:50:9f:9f:c1:
                    63:93:22:d2:e9:38:24:30:54:c1:5b:09:65:4e:62:
                    3a:12:93:ab:1a:11:34:ac:d6:b1:cd:93:18:76:32:
                    b7:60:9c:3a:d3:f8:aa:97:31:16:70:08:46:e3:8b:
                    53:ff:37:a3:2c:50:ff:b4:25:ca:bd:12:3d:f3:a5:
                    5a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E2:7F:43:72:21:B6:F1:FF:54:CE:74:91:21:99:4F:97:F0:C1:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/eae757c8-21af-3b58-a16e-8062e109686a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72/c3b90f7d-2bc6-4942-a304-98a91a506d72.crl

            X509v3 Authority Key Identifier:
                keyid:74:A3:87:96:ED:2D:AC:91:89:C8:22:8F:14:E3:D7:00:37:35:D8:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c3b90f7d-2bc6-4942-a304-98a91a506d72.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.172.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:02:94:6d:51:27:aa:c6:6c:74:e4:7d:80:25:63:85:83:b6:
         31:63:9f:07:6f:c9:1d:98:ee:3b:fe:b9:db:c9:01:93:61:84:
         5d:32:7c:c2:77:e4:13:ba:ab:3d:a0:fc:d1:f4:7f:42:fc:fc:
         7c:c8:5d:7f:36:2e:ad:c5:e1:3f:32:ee:8e:4a:a9:f2:ae:32:
         b3:40:aa:17:95:33:05:51:82:39:f1:56:20:17:cb:9c:8c:68:
         72:8a:15:b2:d8:d0:e1:71:51:eb:e1:be:fc:0e:34:11:b9:9d:
         0e:de:ff:ff:bb:e9:20:c2:8d:53:f3:d3:5d:9f:47:56:3c:ef:
         93:08:39:0f:af:c1:71:d1:af:15:aa:1b:e9:57:27:4d:3b:41:
         16:11:23:32:91:57:a7:2c:62:fb:47:42:a7:90:1b:04:63:48:
         ab:3f:a1:50:66:8b:bd:61:d8:a4:a7:f0:54:fd:5c:af:06:63:
         4e:2f:bc:d0:a7:33:c2:3b:87:2a:ac:a8:1e:5e:b6:4b:22:21:
         5b:77:04:63:5a:71:ef:ad:b0:a4:c7:eb:73:af:35:73:ae:01:
         1c:ed:23:55:be:be:b7:37:89:07:a6:b4:0c:2a:c2:cf:72:0d:
         0f:f5:2d:a3:fa:ad:13:5a:da:55:07:87:25:5f:82:3d:67:4c:
         91:92:17:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:05:21 2026 by rpki-client