Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/60022824-1bab-3813-aebc-f755a3e45a20.roa
File:                     60022824-1bab-3813-aebc-f755a3e45a20.roa (raw, json)
Hash identifier:          L8S0sTOLrAM0Uu4UmdsSOezsoeXyBY4Pf1vCeJkuTOo=
Subject key identifier:   19:94:AC:4E:96:15:5E:C4:01:07:78:0F:40:6F:6B:4C:11:6D:4C:56
Certificate issuer:       /CN=41911571-6038-4a97-80ce-9611c78f050e
Certificate serial:       010D0C9F4328584AADF1250D9468ACC16FD95D80
Authority key identifier: DF:70:D5:B4:88:0A:71:C0:02:2C:D8:5B:C3:90:48:DE:FF:9B:53:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/60022824-1bab-3813-aebc-f755a3e45a20.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     46455
IP address blocks:        170.62.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/41911571-6038-4a97-80ce-9611c78f050e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/41911571-6038-4a97-80ce-9611c78f050e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:25:0d:94:68:ac:c1:6f:d9:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41911571-6038-4a97-80ce-9611c78f050e
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=62863848-3166-44b1-bed6-6b354dc0de90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:08:3c:1e:9a:21:5d:ea:b1:92:4b:8f:33:60:
                    ed:51:92:c4:6d:2b:e6:53:67:34:51:2c:27:4a:04:
                    85:4a:b6:71:9d:85:17:bd:4e:5c:1c:e4:2e:71:cc:
                    0a:f1:9e:4d:8c:f5:0f:9f:f6:37:e0:2e:5c:58:41:
                    b6:06:4a:9e:3e:4d:53:b6:07:c2:ef:fb:16:35:5e:
                    e0:c6:7d:d0:f4:27:75:c0:04:1c:8e:77:86:2c:2f:
                    af:09:ae:fc:9f:9a:32:95:e3:e5:a3:43:91:c8:01:
                    88:fd:65:00:9b:85:27:2f:55:dd:c6:8f:c1:50:b2:
                    96:30:6c:15:dc:94:31:ac:df:91:b3:ad:9f:43:d2:
                    ff:44:e1:d1:38:6d:fb:d9:c6:24:04:0c:24:ae:93:
                    26:2a:d9:ec:58:9a:cc:35:ad:92:41:b2:fb:77:d7:
                    d1:8b:a9:de:ab:00:39:69:dd:01:0b:ce:7c:a4:4a:
                    dd:f0:0a:63:fc:da:59:fd:8f:b0:70:da:65:38:41:
                    5f:0d:a6:d0:1b:8b:1e:b3:b0:c6:04:50:c5:8f:f3:
                    d3:ff:00:52:25:20:0e:ce:eb:6d:f0:a2:e7:80:f2:
                    66:27:5d:6c:7f:01:90:38:df:72:48:18:49:a0:4a:
                    83:9a:78:bc:0b:1b:11:ae:3e:ed:7b:75:d3:38:4f:
                    34:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:94:AC:4E:96:15:5E:C4:01:07:78:0F:40:6F:6B:4C:11:6D:4C:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/60022824-1bab-3813-aebc-f755a3e45a20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/41911571-6038-4a97-80ce-9611c78f050e.crl

            X509v3 Authority Key Identifier:
                keyid:DF:70:D5:B4:88:0A:71:C0:02:2C:D8:5B:C3:90:48:DE:FF:9B:53:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:bd:ab:61:a9:25:ad:6e:05:95:81:75:66:fa:79:4e:75:33:
         33:d0:ba:d2:32:cc:3f:79:e8:50:1f:f2:4e:cc:df:a9:c3:26:
         98:6b:92:a8:75:4e:50:f0:e5:71:7e:6c:ee:6d:6e:a1:ab:4f:
         5f:b4:24:87:4d:85:ab:0e:6e:8a:9d:ec:4a:56:5e:d9:3b:79:
         ce:71:9a:fc:79:57:db:70:fe:e6:fd:62:9e:e1:95:85:9d:9a:
         85:b2:6f:55:64:48:2b:c4:91:30:09:86:cc:92:e1:94:7d:c8:
         88:e3:bd:77:3c:67:c8:a0:2b:53:b5:bc:1d:e7:f3:b1:66:11:
         77:b6:bc:34:0f:60:b4:65:b6:16:3e:52:ff:ef:dc:53:ee:00:
         b0:ca:81:3c:7b:4d:06:ca:37:b2:48:cf:85:3c:3b:82:8e:fa:
         f7:cc:a4:3a:49:93:e2:19:6e:34:aa:f3:bd:23:5b:b2:fe:0e:
         bf:39:4e:0b:1b:07:88:d7:80:97:7f:c8:90:5d:92:1f:04:d2:
         2b:a1:cb:c3:51:c2:e5:81:4e:c5:63:0f:47:b1:5f:62:40:ad:
         ad:48:07:55:78:54:96:b5:67:b2:b0:49:8c:bf:e6:fc:e6:b4:
         ec:07:52:1c:3a:12:46:36:8b:50:7a:9f:ed:48:e0:e0:15:d5:
         7c:cb:9b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:03:15 2025 by rpki-client