Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/060b95be-8af9-3284-ad3c-cb3e6f2a93cb.roa
File:                     060b95be-8af9-3284-ad3c-cb3e6f2a93cb.roa (raw, json)
Hash identifier:          ArK9ytlEhVsNoYVXhUtyreNcQUEq5ja1/RoisbDJHPU=
Subject key identifier:   74:F1:9D:05:D7:EE:37:25:8C:A3:80:D3:47:ED:07:3C:8B:89:98:91
Certificate issuer:       /CN=260078ce-082d-4ff4-9558-d1a0f0d1ecdd
Certificate serial:       010D0C9F4328584B9B3CE6385372637F41381474
Authority key identifier: 8E:7C:54:ED:F1:F8:A9:28:D2:4A:B4:AB:87:79:D8:43:18:4B:A9:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/060b95be-8af9-3284-ad3c-cb3e6f2a93cb.roa
Signing time:             Wed 22 Oct 2025 13:00:38 +0000
ROA not before:           Wed 22 Oct 2025 13:00:38 +0000
ROA not after:            Tue 20 Jan 2026 14:00:38 +0000
asID:                     199610
IP address blocks:        162.244.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:9b:3c:e6:38:53:72:63:7f:41:38:14:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=260078ce-082d-4ff4-9558-d1a0f0d1ecdd
        Validity
            Not Before: Oct 22 13:00:38 2025 GMT
            Not After : Jan 20 14:00:38 2026 GMT
        Subject: CN=90da7011-bcfe-4006-89c8-06647f8963e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:0e:cc:2a:96:66:20:38:55:7b:1b:39:98:1e:
                    ff:5f:34:a8:03:6e:ea:0e:d4:6c:db:de:51:92:39:
                    1f:a5:81:93:f6:8d:3f:b7:d6:99:d4:32:91:c1:64:
                    96:5f:07:07:3c:3d:a0:d2:db:db:e2:e4:44:0b:e9:
                    c0:32:93:50:0c:7b:92:dc:6d:34:4a:92:70:35:0f:
                    86:c2:7e:6b:18:30:4e:ec:a7:2c:1c:a0:9f:a3:fa:
                    20:2f:8a:80:9e:b0:fb:19:72:db:07:15:36:92:d0:
                    db:71:4e:21:96:d2:c4:bb:c8:22:95:52:d1:36:8f:
                    e4:0c:2a:74:67:24:d4:5f:4b:48:5d:c4:97:aa:2d:
                    a2:9e:35:c1:0d:b1:06:a3:e3:23:80:49:f5:2a:5b:
                    29:7a:93:e9:8b:48:46:17:60:fe:c2:4c:37:27:f3:
                    28:71:04:bc:97:5a:4e:8c:df:29:8e:18:23:53:24:
                    d4:08:b6:aa:d5:ab:f4:f6:03:3c:3e:64:b1:d4:07:
                    cf:4d:80:c3:5a:9c:5d:e6:81:06:0b:af:e4:ee:c6:
                    89:72:8e:b9:b9:ac:17:03:ba:da:06:04:c6:4e:79:
                    74:74:41:60:60:f0:9f:8c:32:56:22:fc:c3:7b:14:
                    73:9d:d7:15:88:21:ec:64:ad:34:cb:87:48:4d:17:
                    86:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F1:9D:05:D7:EE:37:25:8C:A3:80:D3:47:ED:07:3C:8B:89:98:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/060b95be-8af9-3284-ad3c-cb3e6f2a93cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.crl

            X509v3 Authority Key Identifier:
                keyid:8E:7C:54:ED:F1:F8:A9:28:D2:4A:B4:AB:87:79:D8:43:18:4B:A9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/260078ce-082d-4ff4-9558-d1a0f0d1ecdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e6:86:da:3e:3e:f8:82:00:6c:00:1a:65:22:13:e7:5f:30:
         69:00:95:f9:f0:8a:46:26:da:da:29:1d:1e:4e:a9:f7:2a:62:
         44:c5:ef:5c:08:f8:45:b5:f9:03:2c:40:ca:dc:a1:fd:a7:17:
         68:72:1c:59:04:fd:30:b5:74:95:c3:a5:d7:f0:3b:4d:89:11:
         02:53:33:bb:af:d2:4c:0b:65:5c:59:42:45:1e:36:0d:e8:7d:
         e2:a6:09:52:8b:23:0b:e1:e4:7c:59:60:1d:36:8f:24:2f:68:
         12:9f:93:ff:53:aa:ce:d6:27:a2:96:46:e0:66:8d:f4:60:d5:
         53:fe:57:a1:bf:13:47:92:9c:89:a4:b4:ce:4a:68:8d:63:12:
         0d:6d:d4:f2:cc:a7:ab:c5:66:93:98:f9:d3:35:27:d8:3b:f5:
         57:7d:d6:40:bd:2a:5e:24:91:8a:0e:cf:05:d5:99:7c:9a:2c:
         c5:76:87:89:ce:a5:f5:23:0f:3e:ed:d8:b6:ff:52:16:f6:e5:
         a8:39:e0:ca:a8:b6:c3:ca:1e:2a:93:a6:1a:54:50:35:92:df:
         f8:70:40:2d:f8:37:ec:b6:8a:44:0d:75:c0:24:01:19:ae:04:
         f7:27:bf:22:d5:ca:87:69:7c:c0:56:e3:bb:17:02:ff:0b:b7:
         9d:89:99:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:04:58 2025 by rpki-client