Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/9c4c84eb-d702-36ac-8cfe-8def2c97f759.roa
File:                     9c4c84eb-d702-36ac-8cfe-8def2c97f759.roa (raw, json)
Hash identifier:          zYV6l6UvudcMR6Q9fSHzq2uhy18PTvaBohdi6OVNLRg=
Subject key identifier:   26:BC:42:8A:1E:4A:81:26:01:39:6A:21:FD:6B:9E:F1:EA:92:D0:FE
Certificate issuer:       /CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
Certificate serial:       010D0C9F4328584D43B121CB56074DA2E8B26100
Authority key identifier: 84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/9c4c84eb-d702-36ac-8cfe-8def2c97f759.roa
Signing time:             Mon 23 Mar 2026 13:57:38 +0000
ROA not before:           Mon 23 Mar 2026 13:57:38 +0000
ROA not after:            Sun 21 Jun 2026 13:57:38 +0000
asID:                     18561
IP address blocks:        174.128.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:43:b1:21:cb:56:07:4d:a2:e8:b2:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e59c137-0619-407b-87ce-8a4e08dd6c63
        Validity
            Not Before: Mar 23 13:57:38 2026 GMT
            Not After : Jun 21 13:57:38 2026 GMT
        Subject: CN=7176959b-4b7a-4bda-bfc5-ce72a6ec41f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:41:fd:07:6f:85:da:14:3b:83:48:a4:43:56:
                    9c:66:d2:49:d9:80:d9:f6:87:9d:f5:3a:4c:3b:60:
                    2e:c2:bc:75:d0:1c:2d:64:3a:a2:ea:76:05:c4:fa:
                    23:ed:b7:33:22:71:42:6e:66:f4:64:44:b8:c6:6b:
                    b9:14:76:8c:8c:9b:d4:cf:15:97:eb:9c:0c:ef:d4:
                    c9:4c:55:62:70:37:31:48:1c:ef:18:5b:29:77:21:
                    a6:7c:e1:ae:d4:09:3d:5a:ba:5a:45:47:fe:08:b8:
                    27:83:cc:ba:3f:55:72:55:25:6e:09:ff:cc:81:9f:
                    90:81:c5:dc:66:36:ac:00:50:85:ed:27:42:ea:dc:
                    57:ed:35:2d:9f:77:4e:ac:47:02:f6:28:ce:39:72:
                    72:09:dc:6c:05:08:a5:22:c1:ba:02:0c:7f:c4:22:
                    ed:1c:9a:b8:94:09:31:b1:04:69:14:45:05:d8:4f:
                    52:0c:4c:ba:51:bb:b2:79:7e:8b:7a:f8:87:5b:de:
                    a7:05:38:2a:53:3f:47:11:2d:9f:12:61:47:09:05:
                    cd:1e:c0:50:d8:a5:92:9a:0d:b0:99:c6:4e:9a:28:
                    56:d2:a5:78:3b:c2:44:79:79:26:e1:4e:00:90:64:
                    d7:87:23:72:e6:f8:05:cc:bd:49:38:87:85:1b:49:
                    10:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:BC:42:8A:1E:4A:81:26:01:39:6A:21:FD:6B:9E:F1:EA:92:D0:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/9c4c84eb-d702-36ac-8cfe-8def2c97f759.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63/0e59c137-0619-407b-87ce-8a4e08dd6c63.crl

            X509v3 Authority Key Identifier:
                keyid:84:AF:DF:64:43:67:F8:A5:A6:DD:54:5A:6C:A5:73:15:BE:30:5B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0e59c137-0619-407b-87ce-8a4e08dd6c63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.128.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:05:b2:cd:26:8c:80:3c:1f:4b:70:98:5c:db:d1:2b:8b:43:
         4f:3a:67:fd:f3:61:b8:7e:69:a1:cf:be:7a:b2:0e:dc:c5:c4:
         ea:71:b1:8a:b4:f1:ab:26:fb:36:9b:6a:99:72:1f:97:71:4a:
         4d:03:7f:c3:ef:4c:cb:b9:25:b8:e3:b3:1c:d9:3c:dd:5d:fa:
         c1:41:90:12:35:bf:c9:8c:be:4c:a5:9c:b3:4e:8b:59:bf:85:
         54:b5:f8:d6:60:cd:b0:08:a3:51:1f:17:f2:b7:83:65:b5:81:
         f0:0f:8f:0c:67:75:bc:f4:df:9a:e1:b5:0f:c0:60:26:97:9a:
         82:84:42:2a:62:5f:87:c2:b1:2e:8a:0d:9f:06:98:46:62:ba:
         ab:ba:e0:fb:70:fc:d2:f6:30:72:b7:31:82:87:0c:90:76:13:
         66:98:84:64:9d:b0:16:c3:34:25:61:1f:fc:fe:18:89:39:79:
         a8:dd:b7:9f:66:cd:a5:c0:29:5c:5e:09:f0:8e:ba:73:c8:a2:
         4b:ff:f1:de:e9:9c:50:63:4a:e3:87:ef:bd:14:f0:65:d7:48:
         22:18:27:d0:c5:a7:bb:77:81:bc:42:43:31:7c:b8:cf:32:da:
         4e:57:0c:9c:7a:c2:2b:ae:93:c1:8c:21:2c:71:36:15:0c:ce:
         bf:5f:fa:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:21:28 2026 by rpki-client