Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/f4ecff38-e1d9-3548-8fee-f5178babf46c.roa
File:                     f4ecff38-e1d9-3548-8fee-f5178babf46c.roa (raw, json)
Hash identifier:          E8pAQa5K91gFNvras62+hCCwBr/htYYzvmr0fDKGaJY=
Subject key identifier:   9B:FB:92:85:E1:D5:DC:7C:CF:61:0A:E6:EA:79:14:EE:EA:01:09:70
Certificate issuer:       /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
Certificate serial:       010D0C9F4328584A093A96DC905DFF77F35D0D00
Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/f4ecff38-e1d9-3548-8fee-f5178babf46c.roa
Signing time:             Sat 31 May 2025 13:01:03 +0000
ROA not before:           Sat 31 May 2025 13:01:03 +0000
ROA not after:            Fri 29 Aug 2025 13:01:03 +0000
asID:                     57974
IP address blocks:        199.48.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:09:3a:96:dc:90:5d:ff:77:f3:5d:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707
        Validity
            Not Before: May 31 13:01:03 2025 GMT
            Not After : Aug 29 13:01:03 2025 GMT
        Subject: CN=93eb7ac1-0ff7-4668-b32b-fe4495a5e8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c0:23:98:15:0e:8f:bc:5c:40:65:8f:50:eb:
                    89:8e:51:97:86:7f:53:1b:f7:88:39:ad:fd:e6:b0:
                    4b:fe:1f:e0:01:b9:b0:64:5d:41:70:f8:5a:59:34:
                    98:25:90:94:79:52:0c:4a:c2:22:2e:cc:5b:de:6a:
                    15:91:70:6a:fe:f2:23:d1:6f:46:c5:d6:fa:9f:a5:
                    e4:d1:14:d1:54:eb:42:b1:72:8a:ea:c4:bc:f9:76:
                    b0:88:e3:69:e3:2e:69:c2:0a:bb:4a:d2:0a:61:17:
                    0e:fe:ba:cb:36:03:d8:18:2e:64:3e:b6:a9:95:8b:
                    a3:3d:0e:05:f7:d3:34:f3:a6:50:cf:5c:f3:a5:a4:
                    18:0a:39:76:a8:02:23:77:02:21:cc:d5:cb:8a:b1:
                    d8:97:29:3b:68:75:97:d6:e6:34:fe:34:2b:84:33:
                    39:10:08:83:24:ff:e9:32:80:50:61:7f:46:5e:4a:
                    2c:43:c4:d4:39:d2:cd:ea:7a:1d:fe:95:6d:c7:61:
                    1e:10:ed:ec:e5:84:89:b1:df:88:31:a7:4d:cc:7d:
                    69:5a:71:56:e8:37:66:83:37:93:0f:12:ae:5a:e9:
                    0d:75:53:0c:98:35:dd:f5:b7:2f:6c:ab:eb:64:9c:
                    86:6f:4d:75:22:2e:72:73:bf:24:0e:64:c4:e5:86:
                    8d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:FB:92:85:E1:D5:DC:7C:CF:61:0A:E6:EA:79:14:EE:EA:01:09:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/f4ecff38-e1d9-3548-8fee-f5178babf46c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl

            X509v3 Authority Key Identifier:
                keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:0a:38:65:bd:4f:b8:4c:47:d5:b3:fc:28:57:0f:31:f3:e8:
         13:ce:4e:d7:e2:12:bc:f8:87:58:4c:4f:01:02:a7:e6:09:94:
         b0:e7:71:03:c2:50:c3:86:9c:2d:0e:68:f6:ab:93:00:fd:e3:
         56:fa:1e:77:8f:81:23:96:f9:2b:4e:ad:fb:0f:57:8b:c5:b3:
         3d:cd:50:b5:2e:a9:cc:7f:28:1a:81:06:7f:89:61:e1:86:48:
         41:b8:88:18:e4:bd:47:52:c6:d8:1b:9c:50:20:32:01:47:91:
         95:7c:cd:fa:e0:da:81:59:07:1f:91:e6:26:d4:5c:91:42:32:
         f6:ea:9c:e2:39:9b:e0:0b:b2:4b:d9:4f:d2:d6:b2:c8:5d:bc:
         2f:a8:0c:f4:f3:fa:69:fa:76:3f:4d:bd:10:8e:3b:70:5a:f2:
         21:a1:1f:11:17:42:7e:01:08:02:3d:05:82:24:9b:ec:d3:76:
         0d:1f:9a:a8:f1:ed:ba:21:ba:cd:04:0a:9b:d8:4d:33:e5:1e:
         68:82:73:c5:44:62:77:06:c8:b1:50:0b:99:b6:9d:f9:18:0e:
         c9:5a:0d:94:1a:c1:41:9c:c1:9a:d5:2e:c3:37:3c:00:10:d4:
         4b:7d:86:99:aa:61:96:7d:a7:1d:0e:16:d1:f3:07:4f:b6:c6:
         99:84:9b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:49:26 2025 by rpki-client