Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/60b44071-8ea6-3d4c-9451-43f93af8ba74.roa
File:                     60b44071-8ea6-3d4c-9451-43f93af8ba74.roa (raw, json)
Hash identifier:          1EmHsPs7liXj/hoBujGAM49vjaFsSEFUxgdavnOXOOc=
Subject key identifier:   59:6F:1E:AE:01:57:CB:90:3D:D9:43:91:0A:48:09:80:76:BF:48:5E
Certificate issuer:       /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial:       010D0C9F4328584E991A5478E2C712C1CCFB5B00
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/60b44071-8ea6-3d4c-9451-43f93af8ba74.roa
Signing time:             Thu 23 Jul 2026 21:00:11 +0000
ROA not before:           Thu 23 Jul 2026 21:00:11 +0000
ROA not after:            Wed 21 Oct 2026 21:00:11 +0000
asID:                     996
IP address blocks:        207.170.172.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:99:1a:54:78:e2:c7:12:c1:cc:fb:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Validity
            Not Before: Jul 23 21:00:11 2026 GMT
            Not After : Oct 21 21:00:11 2026 GMT
        Subject: CN=8605c581-6d70-4e95-9ad5-a01ba1fac4f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:99:1b:e3:36:59:21:c1:45:83:96:67:ae:98:
                    68:7a:87:8d:86:bb:bf:5b:8c:cf:4d:2e:fd:27:21:
                    5f:de:e7:c4:26:20:4a:cc:c6:aa:bf:bc:c4:04:3c:
                    24:67:82:73:e9:a4:5d:8f:6d:fe:e8:6d:54:5b:31:
                    32:30:a9:93:64:e5:59:33:7c:56:5e:13:bc:42:ba:
                    06:8e:64:30:3c:47:cf:7b:fa:6d:65:74:70:a5:06:
                    f9:89:d3:16:b5:98:8c:8c:45:e6:07:cb:0d:25:2c:
                    42:bf:09:8d:57:89:3e:ef:af:1e:35:d5:af:ab:a8:
                    25:d9:c6:e0:96:ed:3d:8c:fe:97:31:f1:72:88:66:
                    7a:d4:09:4e:47:57:ac:5b:98:d5:6c:c2:b3:54:96:
                    7e:5a:7e:1c:0e:73:4f:34:39:9b:b7:6f:56:dc:5a:
                    24:74:04:2e:4d:f7:f3:11:f7:c9:67:35:b9:5a:4d:
                    e8:92:6a:e5:4d:c9:91:25:71:79:8c:ce:63:85:9b:
                    bb:db:43:23:45:1e:86:5c:28:9d:4b:95:65:42:46:
                    ef:f9:72:0c:14:76:ea:e6:25:3a:38:77:ab:f8:21:
                    53:2e:78:3d:08:60:2f:f9:a1:9c:71:09:09:46:c4:
                    7f:c6:10:d3:4a:bb:fd:6b:4f:8a:09:1a:d2:2e:d5:
                    67:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6F:1E:AE:01:57:CB:90:3D:D9:43:91:0A:48:09:80:76:BF:48:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/60b44071-8ea6-3d4c-9451-43f93af8ba74.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl

            X509v3 Authority Key Identifier:
                keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:50:cc:84:73:da:e4:62:d4:a5:84:04:c1:f1:7f:72:fe:e1:
         21:bf:0a:c1:36:89:5a:95:91:bb:e8:1c:17:a6:82:85:3d:c4:
         59:7d:6a:7e:07:12:a9:e5:40:b4:65:5e:eb:cb:c9:9b:78:3c:
         d1:a9:0d:c0:f0:b7:4c:45:bc:e9:db:cf:a2:5b:46:a5:eb:89:
         8d:95:1b:54:81:67:6d:98:ea:be:61:03:a9:23:ba:71:65:19:
         92:fa:fa:1e:c7:c4:bd:fa:01:f7:f0:b2:b4:4d:45:a3:25:1f:
         c1:88:51:3b:cf:53:f5:4c:fa:57:67:35:a8:56:6f:27:31:1c:
         80:0f:1d:ed:aa:15:e9:d7:e3:19:dd:38:53:65:51:a3:64:2b:
         cf:e5:2b:6a:a9:73:0e:60:42:36:14:22:a0:48:f4:b6:ab:c9:
         93:00:a9:bd:92:48:8a:af:e2:12:8c:32:15:4c:0a:df:ca:e5:
         ee:a3:fe:89:3a:a9:8a:dd:72:ec:8a:75:b2:60:c9:ce:2c:3d:
         5a:c0:3d:08:4a:3f:22:1e:2b:0c:85:d2:ea:5a:ae:c0:4f:b4:
         93:9f:c6:3b:db:e0:4c:fa:f3:51:d5:13:52:a6:2a:fb:48:75:
         12:27:cf:6a:87:e6:bd:38:21:7d:36:07:64:e8:85:16:72:d9:
         bd:54:94:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:46 2026 by rpki-client