Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/aa5ec19c-f293-399a-961e-f1fe4f6bcafd.roa
File:                     aa5ec19c-f293-399a-961e-f1fe4f6bcafd.roa (raw, json)
Hash identifier:          wcrDimoxFvniZ5fbG8vgdKd2QNPlcC3TLjTEIueZfIg=
Subject key identifier:   B0:28:95:87:D6:8F:8C:40:15:65:1C:D7:DC:0F:1B:37:FA:15:E3:B0
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584DD0905E0FE48A489E21CA5FE0
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/aa5ec19c-f293-399a-961e-f1fe4f6bcafd.roa
Signing time:             Wed 13 May 2026 01:00:24 +0000
ROA not before:           Wed 13 May 2026 01:00:24 +0000
ROA not after:            Tue 11 Aug 2026 01:00:24 +0000
asID:                     46475
IP address blocks:        185.167.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:d0:90:5e:0f:e4:8a:48:9e:21:ca:5f:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: May 13 01:00:24 2026 GMT
            Not After : Aug 11 01:00:24 2026 GMT
        Subject: CN=deac6e3a-32f0-4a54-b507-c59018532cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:23:e9:e9:cb:6d:d6:bc:2d:b9:0b:96:a1:67:
                    56:67:de:f8:51:0f:8a:96:9a:79:f7:2f:a0:b7:ef:
                    75:e4:cb:fd:5c:73:62:d7:0c:25:87:be:5c:22:bb:
                    ea:29:d4:9c:f4:e0:cf:6f:53:50:2b:ff:f5:46:e1:
                    24:76:77:3f:2a:0b:4b:f6:f3:ea:26:36:ec:4a:a5:
                    37:27:1a:6e:c8:d1:f7:be:73:73:a2:bb:e5:15:7c:
                    65:23:1e:6e:ad:4c:c1:4c:2e:63:e2:2a:39:9a:99:
                    04:e7:a7:cc:b5:22:35:a3:2b:d5:eb:24:cc:e4:cc:
                    c2:96:ac:37:e5:6a:db:1a:51:fc:f1:13:11:20:bd:
                    5b:a1:04:98:36:c3:63:63:b1:1c:6b:3f:b4:0f:6f:
                    11:ad:0e:78:ec:2e:dc:71:43:d0:78:83:bc:ef:4b:
                    e0:c0:0e:fd:69:29:be:33:98:4e:e9:69:09:77:0b:
                    08:1d:2c:9d:c9:19:bf:eb:e4:f3:e9:ae:94:c6:51:
                    aa:ad:39:ae:d4:b3:e4:81:b0:6d:0f:45:1f:3b:6f:
                    de:e8:2e:3f:a5:a1:06:06:05:68:81:8a:4b:ff:c9:
                    ad:c6:98:0c:93:20:f3:cb:bd:9a:e7:25:2b:53:ca:
                    24:37:f8:7d:c9:82:18:77:3c:47:d7:f9:88:15:97:
                    8d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:28:95:87:D6:8F:8C:40:15:65:1C:D7:DC:0F:1B:37:FA:15:E3:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/aa5ec19c-f293-399a-961e-f1fe4f6bcafd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.167.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ca:58:4b:9c:e6:4a:84:60:75:1b:58:eb:36:a5:a8:b1:0f:
         59:d6:d1:e1:bc:0f:78:42:34:64:81:90:90:65:56:ba:f4:fd:
         30:a2:04:52:73:ca:7a:b9:fb:9a:79:21:7f:b9:2a:b6:c3:f8:
         c7:06:74:bc:eb:57:0d:a9:3c:ef:4a:33:1b:6d:3a:1e:29:26:
         df:f1:6d:de:90:ca:97:9a:54:12:ad:28:ba:5d:af:fd:de:43:
         cf:43:8d:8e:d0:00:68:b6:c8:3b:8f:e1:b8:59:ea:2b:69:f4:
         67:a1:53:b6:85:86:63:4c:98:2d:eb:cc:43:4b:70:60:ba:07:
         9d:93:2e:91:55:65:0c:0c:64:68:ec:92:b7:40:79:7f:cb:b9:
         47:01:15:7d:54:3e:fb:0c:05:ad:1f:bc:9d:f3:f9:5c:5c:d0:
         a9:48:15:b2:0a:e3:e7:a2:a8:c3:5f:af:20:61:b7:a9:a4:56:
         45:07:47:32:5f:16:6e:8f:af:34:39:6e:5e:b6:4d:13:3d:1a:
         3b:b7:e4:f5:65:f1:a7:e5:8d:4b:fe:9f:7d:18:f8:d3:b0:07:
         d7:5c:a3:3d:87:33:b6:23:ca:e9:57:6a:b1:78:49:7a:d9:31:
         3b:18:b6:02:31:85:b4:54:57:16:48:5a:96:cc:d6:d8:f0:e7:
         73:be:19:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:55:12 2026 by rpki-client