Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/3eadf9e7-91ee-38b8-893d-de0aa65b396b.roa
File:                     3eadf9e7-91ee-38b8-893d-de0aa65b396b.roa (raw, json)
Hash identifier:          Liff1ix8SOLAPdHW7dskCPgnZ1F8gFVQHvCvzh3AAb0=
Subject key identifier:   F2:2D:24:AB:C0:5B:A2:40:71:69:5B:8E:77:8A:6D:5B:D3:FF:12:B2
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584E6F3A37C8D17190720A557080
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/3eadf9e7-91ee-38b8-893d-de0aa65b396b.roa
Signing time:             Wed 08 Jul 2026 21:00:12 +0000
ROA not before:           Wed 08 Jul 2026 21:00:12 +0000
ROA not after:            Tue 06 Oct 2026 21:00:12 +0000
asID:                     13713
IP address blocks:        144.49.60.0/24 maxlen: 24
                          144.49.61.0/24 maxlen: 24
                          144.49.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6f:3a:37:c8:d1:71:90:72:0a:55:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Jul  8 21:00:12 2026 GMT
            Not After : Oct  6 21:00:12 2026 GMT
        Subject: CN=7f59f0b9-8508-4568-ba55-157895ecc53b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:14:69:25:9c:89:57:58:1e:80:af:94:7e:3e:
                    13:2f:b6:2f:82:35:63:cf:46:c1:f1:bb:6e:30:46:
                    d9:46:0d:75:4a:1e:f2:dd:79:2e:6e:99:e0:6c:5d:
                    8a:4e:f2:51:c7:6a:a0:2a:80:52:3e:7f:38:87:e7:
                    dd:47:b8:e1:40:09:14:b5:34:9b:58:d9:7f:03:f5:
                    21:c7:2f:bb:12:60:8a:38:06:98:29:ab:cf:fb:ec:
                    85:9c:ec:23:b5:6e:7b:a7:a8:3b:61:44:f4:04:2b:
                    82:7a:b6:14:f4:48:16:e4:e8:da:6e:28:6b:6f:6e:
                    e2:be:9a:68:e8:35:e2:a7:bd:51:c5:11:ca:21:fe:
                    fa:14:44:5d:a2:03:a2:72:63:d2:92:25:6b:80:83:
                    9a:51:cc:93:57:c0:b3:c0:11:a8:49:53:db:0f:6d:
                    18:5c:b1:05:87:ce:d9:75:77:6b:43:ad:91:1a:11:
                    46:59:b0:e6:63:72:bf:50:fa:80:85:65:7e:24:e0:
                    83:8b:26:07:9e:b3:21:3f:f4:8f:0b:a8:0d:6a:29:
                    c8:6c:bd:66:a3:53:ed:ac:89:eb:eb:b6:32:a5:3e:
                    8a:6f:2b:a4:02:4d:4d:25:29:69:bd:42:2d:e8:bd:
                    18:12:db:65:c7:fd:ce:12:62:e4:f1:ae:90:b3:ee:
                    1b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2D:24:AB:C0:5B:A2:40:71:69:5B:8E:77:8A:6D:5B:D3:FF:12:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/3eadf9e7-91ee-38b8-893d-de0aa65b396b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.49.60.0-144.49.62.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:5d:54:a0:a5:a9:8e:6d:78:ad:3c:5f:9e:34:26:2e:09:a7:
         5e:b8:15:ef:09:c3:be:d2:32:ee:c7:fd:4a:a8:ac:ba:2b:cf:
         55:ed:58:b2:55:fc:be:31:0e:c8:72:9e:dd:c2:4c:5d:5c:c9:
         76:cf:ec:a3:07:66:d2:c6:54:cc:b5:5a:ca:b9:15:d9:d7:44:
         18:d1:bd:ae:2e:8c:af:c1:59:1e:4b:29:92:fe:90:3e:cc:39:
         d6:98:66:d8:53:f9:d1:0d:12:af:fc:5e:87:2e:ba:8e:35:ce:
         08:d9:a6:fb:40:55:66:ff:e1:6d:4b:97:f7:cf:b2:f9:94:8a:
         69:91:f2:3e:37:b4:69:22:f4:7d:33:ef:97:0b:5b:67:f2:c2:
         29:75:4a:22:51:8f:7d:4c:ee:36:d7:bc:ce:af:0e:e1:3e:66:
         9a:b6:28:8d:19:38:b6:a4:d4:9d:9b:3e:6a:09:a6:dd:1d:50:
         aa:c9:af:25:01:ad:54:4b:c3:94:ce:83:3c:ea:da:d5:c8:c5:
         89:4f:95:82:12:be:ce:db:6f:79:a5:03:ec:20:4f:a3:3e:6b:
         b0:e7:b4:3c:51:5e:fa:98:c7:81:b4:93:76:ef:02:75:bb:bc:
         f8:fa:52:04:1d:41:93:b7:bf:bb:cb:f4:d5:c3:53:e7:0f:e5:
         36:0a:d8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:29:56 2026 by rpki-client