Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d6fd106e-e9cf-3331-8ab8-57fe025a7fee.roa
File:                     d6fd106e-e9cf-3331-8ab8-57fe025a7fee.roa (raw, json)
Hash identifier:          rEgKLt9IOavytBQZX5Nmaphnfk1r+L8V6Hr/CfKVJ9k=
Subject key identifier:   84:95:63:35:96:E2:06:C8:17:6A:5E:63:D4:46:44:D5:BA:1A:EB:68
Certificate issuer:       /CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25
Certificate serial:       010D0C9F4328584E6C6F68CF0B8846DDD5BD49B0
Authority key identifier: AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d6fd106e-e9cf-3331-8ab8-57fe025a7fee.roa
Signing time:             Tue 07 Jul 2026 21:00:13 +0000
ROA not before:           Tue 07 Jul 2026 21:00:13 +0000
ROA not after:            Mon 05 Oct 2026 21:00:13 +0000
asID:                     14618
IP address blocks:        216.24.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:6c:6f:68:cf:0b:88:46:dd:d5:bd:49:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae61ef28-fe03-45bb-a38f-17e4725b6c25
        Validity
            Not Before: Jul  7 21:00:13 2026 GMT
            Not After : Oct  5 21:00:13 2026 GMT
        Subject: CN=14cd9fe9-f503-46b6-8a2e-57db0a7f1d4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a7:d6:cf:e1:ed:d4:1a:87:d5:1b:4d:fe:25:
                    50:64:01:c7:82:15:17:98:56:21:6a:7c:e2:82:33:
                    bd:cc:11:f2:1d:d2:50:37:30:f2:98:e9:8c:cf:a0:
                    ff:c3:0e:07:2e:15:10:71:fe:a9:a0:1b:1f:85:20:
                    99:f6:10:7e:45:e7:0b:8d:13:81:b3:a1:0e:04:82:
                    a2:2a:a3:1d:f8:25:36:5a:a5:79:84:da:10:1d:e2:
                    4d:e9:cc:82:37:b5:cf:5c:ad:cd:52:12:3e:d9:bf:
                    4f:26:08:09:79:6b:63:da:64:e8:c4:22:63:54:85:
                    84:f8:25:cb:df:7f:be:55:6e:99:07:56:fb:02:df:
                    b9:ee:52:52:46:7b:21:8c:a6:b4:6a:d7:c0:5f:a1:
                    0d:2f:60:ff:28:68:5d:cf:6b:c3:00:21:f2:0e:c0:
                    85:44:5c:1c:d5:37:ed:b7:59:c0:36:6c:50:3b:16:
                    22:74:0d:d8:51:24:ca:0e:57:28:aa:21:f4:5c:1e:
                    05:3b:88:9c:ff:c9:14:3f:b4:dd:3f:64:9b:4b:96:
                    c7:33:5d:2a:04:5f:51:4e:dc:59:ce:47:76:27:2b:
                    ec:54:cf:35:8b:f3:45:af:a2:a4:95:a5:9a:91:1e:
                    96:f7:fc:44:f1:66:fc:37:5d:e9:b5:41:32:15:08:
                    a2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:95:63:35:96:E2:06:C8:17:6A:5E:63:D4:46:44:D5:BA:1A:EB:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/d6fd106e-e9cf-3331-8ab8-57fe025a7fee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25/ae61ef28-fe03-45bb-a38f-17e4725b6c25.crl

            X509v3 Authority Key Identifier:
                keyid:AC:9C:DD:19:64:FA:91:50:77:CA:9F:DF:E1:53:16:6B:53:5A:2C:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ae61ef28-fe03-45bb-a38f-17e4725b6c25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:67:ce:3a:a2:b8:3d:73:00:f0:81:fc:87:43:71:4f:f0:6a:
         23:32:f0:60:1a:ad:67:97:16:a5:e6:17:57:67:07:da:e0:e5:
         ca:a5:09:5a:0a:e6:bf:a2:8f:08:de:48:a7:f1:8f:72:8f:7b:
         8c:c1:07:8d:15:9b:da:a1:bc:3f:d4:be:1c:c4:17:d9:56:b1:
         36:2a:aa:61:fd:16:1e:69:71:52:88:e3:d0:44:21:e7:63:dc:
         7a:91:1e:f5:b8:7d:6f:de:02:af:36:34:2a:34:a3:2c:f1:ee:
         2d:e0:09:d3:55:43:f0:47:2e:9a:d0:37:3a:09:0b:be:1c:96:
         88:7e:70:55:ad:60:ee:de:63:ae:cc:b1:0a:a6:31:58:0a:7a:
         a5:04:71:61:ea:1a:cf:d4:73:cb:f4:7c:b8:c8:45:fa:7d:04:
         8b:dc:8c:64:90:78:5b:fa:f0:c2:c2:a5:9e:65:d6:38:9c:3e:
         04:dc:06:43:0f:ac:ba:a0:b7:7e:38:d9:49:3a:35:9f:a2:78:
         cf:94:b4:cd:81:45:32:59:1a:60:ac:f2:97:37:11:60:9f:54:
         b9:84:29:d0:cc:79:8a:f3:b7:f1:3d:34:67:8e:47:62:fe:dc:
         87:2d:27:ed:5e:c7:86:73:c0:09:3a:bd:4f:a3:37:3b:09:31:
         b6:d8:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:36:13 2026 by rpki-client