Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/3eadf9e7-91ee-38b8-893d-de0aa65b396b.roa
File:                     3eadf9e7-91ee-38b8-893d-de0aa65b396b.roa (raw, json)
Hash identifier:          cVYn+g2T2i3GW1bxBMenDRxCJ0WfjGrexuVA91bjwSM=
Subject key identifier:   14:8B:F8:BF:E4:F2:6A:2F:3D:2C:0F:D6:4B:28:FC:16:34:32:A0:7B
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F4328584F119D068A653952A3ED2A41B8
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/3eadf9e7-91ee-38b8-893d-de0aa65b396b.roa
Signing time:             Sat 05 Sep 2026 01:00:12 +0000
ROA not before:           Sat 05 Sep 2026 01:00:12 +0000
ROA not after:            Fri 04 Dec 2026 02:00:12 +0000
asID:                     13713
IP address blocks:        144.49.60.0/24 maxlen: 24
                          144.49.61.0/24 maxlen: 24
                          144.49.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Sep 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:11:9d:06:8a:65:39:52:a3:ed:2a:41:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Sep  5 01:00:12 2026 GMT
            Not After : Dec  4 02:00:12 2026 GMT
        Subject: CN=ebf30634-d8b6-4823-a98f-9c3de803c157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a4:4c:3b:8b:e8:e2:be:09:45:53:06:d0:6b:
                    61:6a:6b:8f:63:f3:d0:0f:7d:00:36:74:79:32:8d:
                    9d:a0:5e:c9:2a:8c:dd:71:d3:b7:b7:59:f5:0c:a0:
                    82:bb:4e:08:0b:ba:6a:f8:ff:4b:c9:04:59:25:5e:
                    89:6b:69:66:44:a4:7e:9d:bf:2c:42:71:03:8a:d4:
                    80:51:2f:23:f2:48:b7:8d:c5:e7:a6:59:84:ef:72:
                    77:6c:2a:d2:76:f3:a6:8b:19:da:3e:b8:17:78:b3:
                    6c:e4:58:f3:e4:f1:fa:86:42:84:7d:f7:0d:15:bb:
                    93:86:3b:6d:07:ce:14:41:a6:c3:7f:78:65:68:6e:
                    bc:ec:80:11:a7:80:97:34:0f:1c:cb:f2:4f:95:e2:
                    19:cf:45:35:a3:ce:91:c4:d9:a0:19:08:e0:65:fa:
                    05:c9:cd:13:d4:61:5d:77:b9:c5:04:54:56:81:92:
                    a1:61:54:8e:48:1b:5e:b2:cf:b3:3f:a5:80:e0:69:
                    ee:48:91:82:f3:d4:b0:48:e7:9f:d2:00:12:4c:07:
                    63:59:3d:bb:82:e4:80:8e:94:aa:71:f7:f9:c0:06:
                    df:dc:06:9c:22:22:f6:df:d4:23:28:e1:cf:00:07:
                    72:bf:4b:ee:bc:8e:00:82:47:80:77:02:5c:4e:67:
                    87:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8B:F8:BF:E4:F2:6A:2F:3D:2C:0F:D6:4B:28:FC:16:34:32:A0:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/3eadf9e7-91ee-38b8-893d-de0aa65b396b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.49.60.0-144.49.62.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9d:bd:af:4f:f5:e2:4e:b4:b8:a6:4b:34:c5:ab:9f:ef:85:
         00:bf:b7:c7:62:70:ab:6c:da:a0:9f:80:31:ed:4e:92:5a:f0:
         8a:cb:4f:fb:91:65:c5:0c:2e:3a:e6:bc:9f:be:1d:18:2a:d2:
         96:95:27:27:64:da:41:f3:56:c6:b4:b5:df:a3:9e:10:d6:15:
         fa:d4:c6:a4:63:22:63:94:47:c0:4c:00:30:17:2c:65:1a:9b:
         2b:7c:f4:95:d2:17:20:94:92:74:be:f8:57:a6:ed:76:7e:c3:
         ed:0d:9f:54:c0:5f:45:81:38:ff:a9:63:48:b7:3a:5f:da:c7:
         49:43:e3:13:75:28:cc:24:2e:1c:72:a2:12:84:09:d3:05:dc:
         59:5f:eb:b5:26:04:2b:6b:2c:aa:2e:f7:80:2f:4b:63:e1:59:
         be:b8:e7:3f:16:6d:f9:c0:e3:44:79:21:bd:87:11:e6:9d:75:
         bd:fc:89:37:a5:2f:44:62:08:c4:b5:f2:9b:9f:cd:27:a7:81:
         30:f3:6a:ba:90:a8:66:95:fa:57:4c:1e:9a:47:38:36:b3:9b:
         91:bf:e4:34:95:ca:f7:18:8c:65:0b:0d:44:0e:98:e1:f1:a7:
         35:11:29:ca:9a:26:42:f6:93:2b:54:90:e0:c6:d1:92:54:5b:
         ff:9c:ae:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:10:48 2026 by rpki-client