Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/5939eda3-0f47-30fd-92bf-fd5c1f369cad.roa
File:                     5939eda3-0f47-30fd-92bf-fd5c1f369cad.roa (raw, json)
Hash identifier:          C7928C0PIOvWVsUsqJY0m5AF5KhEuK+lKCZZYOG3hrs=
Subject key identifier:   52:9B:84:37:EE:63:43:5B:75:CB:20:60:EC:29:32:B9:6B:51:37:05
Certificate issuer:       /CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
Certificate serial:       010D0C9F4328584DB4A5B23840C51BB28ADEB980
Authority key identifier: D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/5939eda3-0f47-30fd-92bf-fd5c1f369cad.roa
Signing time:             Sun 03 May 2026 01:00:23 +0000
ROA not before:           Sun 03 May 2026 01:00:23 +0000
ROA not after:            Sat 01 Aug 2026 01:00:23 +0000
asID:                     11983
IP address blocks:        71.18.60.0/24 maxlen: 24
                          71.18.61.0/24 maxlen: 24
                          2605:340:f03a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:b4:a5:b2:38:40:c5:1b:b2:8a:de:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d6338a5-7c60-4dc5-b1d8-1c504a4ef345
        Validity
            Not Before: May  3 01:00:23 2026 GMT
            Not After : Aug  1 01:00:23 2026 GMT
        Subject: CN=eecf0523-72a5-48bc-85da-4fbfff8c7834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:35:3a:77:1c:b2:73:52:81:0b:18:19:22:fb:
                    9a:bf:cd:9a:5b:96:6f:62:e2:0f:6c:6d:f3:f4:57:
                    e0:40:a9:c3:ca:eb:bd:83:e7:60:d8:5a:9b:32:c8:
                    60:73:d6:ee:96:0b:f1:bd:17:ad:f4:be:e3:f5:75:
                    06:a4:4a:90:18:00:b9:36:b4:e4:5e:f0:41:f4:ce:
                    9f:ed:d2:f9:9c:4e:93:70:70:6e:7a:b8:d7:c0:f3:
                    63:f9:35:88:62:48:5d:af:93:14:68:98:9f:1a:d4:
                    41:16:02:35:8e:77:18:78:bd:d2:16:af:fd:9c:b4:
                    a0:cc:67:51:7b:cd:22:a5:7d:0e:96:6a:23:7f:b0:
                    8b:13:2b:5c:a6:e2:ba:4f:ac:cd:1e:cf:3e:ed:b2:
                    e6:da:c2:75:77:0e:03:12:e4:df:20:aa:2c:ad:4f:
                    c6:b9:08:34:0f:b0:98:3e:d5:f8:86:3d:4c:25:52:
                    d0:a8:ff:84:de:a9:f8:d4:a1:d3:7f:36:86:86:02:
                    0f:42:7e:a0:aa:d0:37:30:eb:41:d7:7d:9f:18:14:
                    93:f4:24:c9:60:00:7b:33:19:62:ad:bb:94:50:19:
                    16:19:3f:b7:16:38:0d:31:33:e9:05:7b:3f:0b:92:
                    a9:3e:a6:3b:83:cd:83:47:a5:66:e3:9f:08:59:e5:
                    6b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9B:84:37:EE:63:43:5B:75:CB:20:60:EC:29:32:B9:6B:51:37:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/5939eda3-0f47-30fd-92bf-fd5c1f369cad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.crl

            X509v3 Authority Key Identifier:
                keyid:D9:DF:7B:A3:3A:F3:04:11:93:71:82:70:32:54:EF:82:41:2D:5F:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d6338a5-7c60-4dc5-b1d8-1c504a4ef345.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.18.60.0/23
                IPv6:
                  2605:340:f03a::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:5b:eb:b2:04:f1:dc:df:a8:07:41:d9:c5:12:b7:19:2b:45:
         9b:7c:eb:c1:d1:ae:f5:54:99:c2:a5:59:6d:c6:5e:07:66:f9:
         ba:b4:88:6a:3b:11:41:14:e3:09:73:0c:fa:f5:f0:81:86:01:
         8d:ef:79:42:2c:c7:15:61:21:ba:c1:21:f4:1d:66:b2:b0:67:
         f1:1d:cc:6f:a8:81:e5:f6:85:8a:7f:15:06:ee:0a:15:2a:18:
         b7:ce:ff:17:0e:2c:28:7e:b8:ab:d3:b6:db:6d:67:da:20:a9:
         f4:f6:18:7c:ad:d9:38:ec:b7:51:69:36:e2:9e:76:db:e6:63:
         39:05:07:6d:16:b6:10:ae:4c:83:e6:bb:88:84:ec:41:5e:15:
         de:f3:8b:4d:31:57:8e:cd:a6:a1:25:2c:a0:66:19:49:4e:7e:
         41:0a:8a:36:82:9b:6d:dd:8f:da:53:7f:70:a6:82:4a:82:81:
         c9:49:55:c1:26:89:99:9e:8e:26:8b:28:90:e6:a0:75:ea:c5:
         44:db:76:50:5d:a1:ea:c4:c2:ec:42:bf:b8:33:f9:56:ac:b4:
         19:09:62:22:c8:1b:2c:01:38:68:c3:5a:3a:98:e8:d5:ae:df:
         5f:87:9e:27:c1:06:62:36:00:9d:34:56:b4:30:a8:ba:92:2a:
         71:95:54:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:01:28 2026 by rpki-client