Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/360c86e4-6be2-3e06-8dae-90e5d3d9eea5.roa
File:                     360c86e4-6be2-3e06-8dae-90e5d3d9eea5.roa (raw, json)
Hash identifier:          OYe4MS2DSFkJYjnSHY7jVwnx/q7aKC0vo1B2zXUF+vg=
Subject key identifier:   EB:BB:20:F3:B0:FA:6B:DE:57:E6:45:FD:AA:29:40:D8:FF:9E:9D:63
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584D468C7A5FB86DFDB531664AC0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/360c86e4-6be2-3e06-8dae-90e5d3d9eea5.roa
Signing time:             Tue 24 Mar 2026 14:31:12 +0000
ROA not before:           Tue 24 Mar 2026 14:31:12 +0000
ROA not after:            Mon 22 Jun 2026 14:31:12 +0000
asID:                     401783
IP address blocks:        207.168.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:46:8c:7a:5f:b8:6d:fd:b5:31:66:4a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Mar 24 14:31:12 2026 GMT
            Not After : Jun 22 14:31:12 2026 GMT
        Subject: CN=71e05ef2-a0fb-4d92-a3f2-10fea89c6a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:86:60:69:2c:16:42:6b:97:ac:ab:80:37:10:
                    54:33:7a:05:d8:86:e6:d3:40:55:0e:d3:19:9a:f8:
                    2a:9d:18:32:44:69:28:0c:e8:24:9e:97:2f:af:8d:
                    05:c9:e2:73:a8:a4:9e:17:49:02:d2:76:77:20:22:
                    08:d7:fd:3c:0a:0c:83:a2:f3:bb:60:9b:b8:aa:bd:
                    fa:88:da:8a:27:0d:23:f0:23:45:da:1b:95:ae:28:
                    0f:9f:d4:81:8a:18:34:7a:fc:e0:78:52:aa:78:d1:
                    a3:88:c3:0a:be:51:f7:ab:1f:c1:ac:30:74:6a:84:
                    84:0c:7e:b8:84:10:2a:b4:f4:a5:cc:ff:49:ae:32:
                    8b:f7:96:72:98:c7:a8:c4:57:24:8f:c3:a6:0e:61:
                    e4:0d:5e:cb:03:1b:be:fa:d8:5b:97:00:0a:f4:13:
                    64:02:a7:e4:82:b1:c4:ad:5a:42:c5:29:70:8f:69:
                    a7:76:52:e7:95:ff:2f:13:43:89:c1:c8:31:bf:87:
                    20:64:12:23:9f:12:8b:df:7c:2e:4d:a3:b7:9d:88:
                    1c:b8:83:14:3c:41:64:61:cb:de:f5:83:f0:00:96:
                    16:36:1a:2c:21:6a:d1:5e:44:32:c7:d6:e1:f3:75:
                    b6:a6:c2:e6:70:97:bc:86:9d:d0:ec:2e:d3:37:ce:
                    60:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:BB:20:F3:B0:FA:6B:DE:57:E6:45:FD:AA:29:40:D8:FF:9E:9D:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/360c86e4-6be2-3e06-8dae-90e5d3d9eea5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.168.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:1f:99:5b:48:5b:a7:dc:50:3d:3c:5b:c6:9a:72:0b:3f:6e:
         c8:2e:b0:bd:87:0c:98:21:6b:0b:6f:00:c0:26:2d:c2:bf:dc:
         eb:d4:4a:ed:86:80:d8:e1:67:d0:96:60:65:f6:f7:7e:95:15:
         dc:1c:3f:59:f1:ba:f3:37:b0:42:4a:42:f2:ee:e6:28:48:5a:
         1c:cc:1e:50:d7:3d:e7:3d:db:52:9e:6a:48:1d:73:f8:46:d9:
         92:55:d5:3a:37:7a:3c:bd:99:4c:e7:9d:8d:ce:0c:c0:a0:28:
         b0:d2:b4:36:e9:1a:ca:bd:a0:27:a3:2b:77:b1:39:1b:ee:28:
         88:bf:b2:5f:12:32:ac:b5:ea:c1:ab:22:02:09:f7:97:45:88:
         05:3d:7e:f2:64:87:54:b4:25:e2:41:8e:c4:f0:29:93:b7:c2:
         f3:9d:44:b2:8e:14:3e:40:cd:3a:f3:9d:fe:91:95:e5:fc:96:
         78:88:2d:34:f3:d7:50:38:0f:a7:55:cd:3a:36:b5:cf:58:2b:
         fc:48:21:84:82:f5:5a:17:4c:5c:2c:58:ef:36:7d:31:80:d1:
         3f:5d:2d:89:90:9c:2d:2e:fb:c8:41:c7:cd:ca:07:95:89:b1:
         16:7b:46:0f:dc:ba:51:45:8d:ba:ff:d9:e0:bd:a0:2f:bd:2c:
         39:35:89:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:32:16 2026 by rpki-client