Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/60dd90d5-8fdb-3f0b-a2f6-d039a33a51cd.roa
File:                     60dd90d5-8fdb-3f0b-a2f6-d039a33a51cd.roa (raw, json)
Hash identifier:          A2DDcBreKQ3VYYfPWvNEeLXnjxMEtyogz5QgTJqffW0=
Subject key identifier:   2F:7F:AF:2E:0E:EB:68:2E:2C:45:0A:C5:C7:C3:24:02:5D:5D:E7:15
Certificate issuer:       /CN=7801f48a-31fe-43fd-b9d7-b370febfe411
Certificate serial:       010D0C9F4328584DB0757E0B5431DCC35DCDB700
Authority key identifier: F5:7A:0F:85:95:89:C4:A5:83:B5:D2:DC:6C:5A:BF:05:7E:9A:78:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/60dd90d5-8fdb-3f0b-a2f6-d039a33a51cd.roa
Signing time:             Fri 01 May 2026 13:00:30 +0000
ROA not before:           Fri 01 May 2026 13:00:30 +0000
ROA not after:            Thu 30 Jul 2026 13:00:30 +0000
asID:                     399007
IP address blocks:        199.247.176.0/20 maxlen: 20
                          199.247.176.0/22 maxlen: 24
                          199.247.180.0/22 maxlen: 24
                          199.247.184.0/22 maxlen: 24
                          199.247.188.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b0:75:7e:0b:54:31:dc:c3:5d:cd:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7801f48a-31fe-43fd-b9d7-b370febfe411
        Validity
            Not Before: May  1 13:00:30 2026 GMT
            Not After : Jul 30 13:00:30 2026 GMT
        Subject: CN=a87cce46-ec53-48ee-b37c-3ea06fe68fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:48:f4:79:64:3f:11:ba:dd:4b:ae:0c:a9:36:
                    7d:d2:c8:99:d1:ae:8c:30:47:3a:21:29:74:b0:c4:
                    a6:e2:8c:78:ae:f6:76:75:c5:a9:82:b5:85:4d:e6:
                    38:d8:35:53:2e:12:01:e8:e4:c4:29:72:dc:c8:90:
                    b3:aa:57:75:08:9e:ea:a5:94:64:7f:90:9d:cb:a7:
                    4c:52:74:d1:67:9f:c9:5a:98:8b:c1:77:a0:c3:46:
                    29:d9:6a:c4:3b:f7:e5:fc:93:8b:38:51:6c:1f:91:
                    a0:94:ac:3f:43:51:10:fc:49:65:46:a5:d4:99:39:
                    e7:c7:4d:51:a4:b2:6f:7d:c7:b2:62:fc:ec:8f:fc:
                    13:10:5e:20:c0:3c:78:b5:e0:da:13:5a:a3:92:20:
                    90:77:43:d0:9a:73:b8:50:b1:45:b5:fd:af:93:03:
                    71:6e:f4:77:9c:da:3d:68:6a:db:c6:64:98:e3:9c:
                    c7:34:e8:4b:49:07:be:8e:2f:a9:96:4f:09:76:c3:
                    df:1f:26:74:b7:a2:d1:6f:72:6c:6b:b3:85:7e:88:
                    9f:d7:25:c0:f3:38:91:26:71:2f:75:cf:c9:44:ce:
                    a7:a3:6f:c5:68:9e:34:01:d3:33:ac:30:fc:d2:68:
                    8a:2c:d3:44:20:ed:2b:c6:4d:10:3c:d0:92:40:85:
                    fe:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:7F:AF:2E:0E:EB:68:2E:2C:45:0A:C5:C7:C3:24:02:5D:5D:E7:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/60dd90d5-8fdb-3f0b-a2f6-d039a33a51cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411/7801f48a-31fe-43fd-b9d7-b370febfe411.crl

            X509v3 Authority Key Identifier:
                keyid:F5:7A:0F:85:95:89:C4:A5:83:B5:D2:DC:6C:5A:BF:05:7E:9A:78:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7801f48a-31fe-43fd-b9d7-b370febfe411.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.247.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:1d:32:fa:32:25:40:37:75:e2:d0:e4:27:93:29:95:9f:ca:
         68:34:80:f1:20:b6:3d:a8:4e:a0:76:c4:5b:48:25:d9:39:06:
         77:88:58:ac:6a:b9:74:80:57:08:45:f6:95:ca:27:e9:5f:f4:
         8f:dd:c1:da:dd:0b:bf:ca:51:a7:c8:a6:71:34:d5:00:ea:26:
         2b:c7:de:2a:bb:e9:e4:50:57:3c:7b:a3:16:4b:57:18:4a:24:
         8b:60:ac:bb:60:03:ec:78:b1:80:d4:49:3f:82:cd:5d:89:34:
         b2:7b:e7:9f:3e:52:4b:e7:c6:e2:a5:0a:0a:4a:dc:be:40:6e:
         8c:34:05:7b:64:15:6f:7c:b0:31:bc:83:24:e1:5d:f3:b0:41:
         b1:ad:7c:82:45:d6:f6:02:92:7d:26:59:b1:9f:67:9c:99:6d:
         57:7d:0f:6a:4f:55:57:1e:6d:20:c1:e2:7f:25:35:a1:7a:e8:
         ab:a5:d1:ea:62:1e:72:43:01:e6:b4:fa:e7:3a:51:18:a9:bb:
         bf:2c:66:f9:e6:4a:5f:3b:e7:a0:16:a7:a2:04:92:e7:ac:29:
         32:79:c9:0e:42:1c:2f:44:72:f5:06:0e:68:3f:c9:4b:ea:a7:
         37:72:40:12:ed:c6:fb:b1:e7:32:3f:c1:36:c3:72:c5:08:e5:
         d7:2b:5a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:28:36 2026 by rpki-client