Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/90aad0e9-e036-34da-9fbd-e2d5187f87e6.roa
File:                     90aad0e9-e036-34da-9fbd-e2d5187f87e6.roa (raw, json)
Hash identifier:          uykJJ70FNgW7yCIiM+FvW53uh2/LDcjHUmukOGoPiPc=
Subject key identifier:   56:7D:87:E4:02:19:10:D5:CE:92:EC:53:D2:0A:17:FD:45:A5:B4:A9
Certificate issuer:       /CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
Certificate serial:       010D0C9F4328584D2644A5BFBC4211E66CA603B8
Authority key identifier: 36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/90aad0e9-e036-34da-9fbd-e2d5187f87e6.roa
Signing time:             Fri 13 Mar 2026 01:00:31 +0000
ROA not before:           Fri 13 Mar 2026 01:00:31 +0000
ROA not after:            Thu 11 Jun 2026 01:00:31 +0000
asID:                     7029
IP address blocks:        141.195.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:26:44:a5:bf:bc:42:11:e6:6c:a6:03:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60fd9c87-9dc8-48c2-9c7d-e72412a35e5c
        Validity
            Not Before: Mar 13 01:00:31 2026 GMT
            Not After : Jun 11 01:00:31 2026 GMT
        Subject: CN=f4b12f40-fe59-4691-90ed-907ef5d7d0f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1b:06:b9:ab:7f:8a:75:67:1e:d5:45:5d:07:
                    8f:7d:cd:86:fa:d0:a0:d7:fb:21:4b:c0:03:54:22:
                    2b:94:c0:20:4b:4d:9f:57:46:de:9f:c9:99:2c:59:
                    b0:0a:8b:58:19:ec:4c:5b:3e:0a:52:ca:45:bb:8e:
                    32:ed:e6:e4:91:73:53:22:a1:05:4f:84:9c:04:28:
                    aa:66:ca:cc:2b:49:55:1a:28:8a:31:3a:35:60:4b:
                    fc:b3:db:57:0a:0d:fe:75:e8:68:f4:c4:49:1a:0a:
                    d8:5d:83:bc:50:cc:91:5f:ed:e5:3e:a7:e6:39:36:
                    3f:9d:0f:d9:e4:2a:8f:e7:22:69:b5:7a:80:08:4e:
                    83:d9:d7:0b:63:f5:55:65:f5:16:2c:c8:aa:1c:a9:
                    8b:bc:be:71:c4:dc:b7:bf:fa:97:0d:4f:7d:59:70:
                    13:ed:0d:8b:6b:2b:90:79:96:c8:6d:3e:71:ce:5b:
                    64:ab:23:9d:76:fc:aa:7b:0e:53:9a:ee:8c:8b:bf:
                    4d:39:c2:e6:e9:3f:14:a0:47:b8:3e:45:6f:e3:9c:
                    49:42:39:21:7a:e4:5a:e8:c7:86:0f:e4:aa:32:78:
                    5a:2a:e4:33:31:48:92:56:26:3c:eb:1e:6a:d1:18:
                    2c:9e:30:47:1e:dc:43:2b:bb:3d:05:b4:90:02:96:
                    cf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7D:87:E4:02:19:10:D5:CE:92:EC:53:D2:0A:17:FD:45:A5:B4:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/90aad0e9-e036-34da-9fbd-e2d5187f87e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.crl

            X509v3 Authority Key Identifier:
                keyid:36:2D:DC:65:A7:7A:10:73:E6:16:E3:47:F7:80:FD:D1:89:67:3E:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/60fd9c87-9dc8-48c2-9c7d-e72412a35e5c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d0:3b:13:87:51:cb:03:58:c4:7e:28:10:c3:1c:2b:40:86:
         02:fc:3b:91:df:84:9f:c6:2c:d5:a7:8d:d6:65:60:1a:e9:22:
         b2:d9:74:3e:ce:95:54:e2:82:b0:96:d8:1c:c3:2e:b7:70:c2:
         7b:8f:82:ad:8c:b0:9d:32:4e:9a:2e:5b:14:21:1f:f5:ff:d5:
         d2:e8:b6:ff:8a:f3:0b:cc:9b:75:a6:5b:ed:66:b9:31:d5:ff:
         1d:7c:3c:ff:0e:b4:61:f5:8f:1b:46:a3:24:33:74:c6:7d:48:
         c5:d8:51:a4:f6:00:72:ab:da:f5:88:f4:79:e0:08:41:ed:aa:
         c1:cd:5c:43:eb:40:3e:3e:bd:fc:2e:da:f7:88:82:b6:78:2d:
         49:1f:2c:7f:f9:aa:ac:e5:a5:cd:13:86:bc:cf:b6:9a:05:64:
         16:cc:73:ee:c4:e8:e3:c7:6a:14:c1:1e:f2:74:ea:1c:85:cc:
         51:6a:83:79:13:8b:c5:7c:f7:a8:dd:07:a2:65:4c:c7:4e:e3:
         d5:d9:a2:7a:02:da:fa:95:46:25:99:14:07:b3:d1:5e:89:5d:
         9f:b5:f7:74:a3:81:88:df:a3:ff:4a:09:f8:df:c9:50:a8:fb:
         80:58:ce:c4:38:e2:2e:dc:1b:0f:0b:8b:b6:7f:27:f0:37:4c:
         f8:99:d1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:29:43 2026 by rpki-client