Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b/58f7027f-2e90-3b82-ba93-327d80318abe.roa
File:                     58f7027f-2e90-3b82-ba93-327d80318abe.roa (raw, json)
Hash identifier:          y96vgEWwMzVBQrPE0ULwXxdwre0uO2HRJ18kVfM+nMw=
Subject key identifier:   98:D5:3A:11:6A:A6:CB:72:60:42:B1:AD:A1:0E:CF:A2:1A:54:8E:86
Certificate issuer:       /CN=b60417b1-df61-4bc2-b63c-b72bdcc3bb3b
Certificate serial:       010D0C9F4328584F498770CAC676C98444BDB580
Authority key identifier: 86:B6:C0:54:40:BF:F2:4B:9E:1E:FF:9C:11:2E:DE:71:15:17:6C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b/58f7027f-2e90-3b82-ba93-327d80318abe.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     394117
IP address blocks:        207.90.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:87:70:ca:c6:76:c9:84:44:bd:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60417b1-df61-4bc2-b63c-b72bdcc3bb3b
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=5c5b1f8d-2513-4638-85db-1c4245c06597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:98:78:c6:9b:af:81:94:11:86:93:fc:30:2e:
                    3c:52:9a:25:8f:b7:07:b7:73:3d:1f:3a:c6:ec:5f:
                    47:4b:9d:b7:f9:fc:4c:58:e0:e7:1d:d3:3f:cb:cd:
                    34:bc:97:f5:7c:4b:62:1d:76:aa:a1:1d:0b:fd:65:
                    af:1b:34:09:8e:89:13:09:9a:a2:f0:b7:f7:82:92:
                    97:95:e0:8f:f6:d8:02:59:c0:d5:ca:b3:c5:90:07:
                    35:d0:f5:9d:50:1a:79:9b:e1:aa:2e:4c:6f:32:47:
                    9c:f7:5d:4e:58:84:83:93:c3:c8:52:27:c5:74:ac:
                    2e:68:9d:39:10:af:2f:3e:0a:57:e3:8a:3d:2e:f1:
                    a9:8a:66:ed:14:d5:49:1f:30:a8:32:df:53:66:3a:
                    8f:40:45:15:bc:4e:25:89:b5:b3:67:02:78:b2:03:
                    28:58:9e:9b:e2:b1:7d:e0:b5:8f:97:22:5d:af:fd:
                    5d:41:6e:52:de:02:e2:28:ad:49:a9:2a:31:d7:7c:
                    fc:85:4a:49:58:cf:cf:b9:a0:1b:38:b5:bb:e5:0e:
                    02:83:63:50:75:3d:78:d3:de:99:e2:d3:ff:1a:ec:
                    75:34:76:b2:f8:a3:8b:e1:f8:9c:97:4e:44:bd:9c:
                    e6:65:02:23:93:ef:a0:1d:64:d9:8f:df:2f:51:fc:
                    91:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:D5:3A:11:6A:A6:CB:72:60:42:B1:AD:A1:0E:CF:A2:1A:54:8E:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b/58f7027f-2e90-3b82-ba93-327d80318abe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b.crl

            X509v3 Authority Key Identifier:
                keyid:86:B6:C0:54:40:BF:F2:4B:9E:1E:FF:9C:11:2E:DE:71:15:17:6C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/b60417b1-df61-4bc2-b63c-b72bdcc3bb3b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:fd:9e:94:0a:9b:58:ed:3c:10:42:df:2e:37:39:08:aa:28:
         3b:ff:03:4b:b7:c8:6e:e7:81:9d:22:a8:a6:1f:a2:eb:a8:7b:
         03:b9:81:9c:03:f8:a2:03:80:fe:59:f4:4a:ce:57:46:c1:ed:
         3b:3e:eb:a2:87:ed:14:d0:2e:1e:0f:70:f2:09:37:6e:d9:5e:
         c2:79:87:33:06:29:3e:24:c6:f3:96:78:ee:98:8e:ba:f0:58:
         02:6e:bc:14:0a:30:39:dd:e6:7f:92:bb:44:fe:49:a5:d2:29:
         3b:a5:c4:6b:4b:5b:57:ec:8e:00:6e:5d:c2:cf:11:52:36:ee:
         bf:01:73:29:7b:4c:7a:9e:70:da:d2:3c:e5:11:24:74:51:bc:
         45:84:b2:89:b7:6b:fd:87:19:6e:cb:a4:1a:f0:15:a7:75:f4:
         23:a0:fb:79:1c:35:72:f4:d6:6d:28:04:67:c1:7d:d0:c8:37:
         32:fd:39:f6:b6:25:e8:95:db:95:a1:2b:1c:9a:ec:3e:d3:e9:
         f3:86:24:1f:64:58:a7:92:26:6f:56:a6:ef:47:94:ef:55:55:
         7a:45:33:47:fe:b8:06:f0:fd:0d:e0:90:9e:49:25:ca:b7:6e:
         62:75:83:f1:62:f5:02:60:99:ff:8d:d1:f3:a1:07:b1:4f:3d:
         68:48:1d:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:39:13 2026 by rpki-client