Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/3f6a5fee-ec64-301f-a0e5-14c1947ec0b0.roa
File:                     3f6a5fee-ec64-301f-a0e5-14c1947ec0b0.roa (raw, json)
Hash identifier:          F3IFTSAjx+8AD4ihWZsm4g54P+tXcU+HaChqeuc04t4=
Subject key identifier:   90:FE:BC:BD:A9:6E:47:1B:16:92:1B:B3:61:EE:8E:CA:55:82:77:3D
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584A5FC5D1BB4C5E10448B64CA60
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/3f6a5fee-ec64-301f-a0e5-14c1947ec0b0.roa
Signing time:             Tue 01 Jul 2025 13:01:04 +0000
ROA not before:           Tue 01 Jul 2025 13:01:04 +0000
ROA not after:            Mon 29 Sep 2025 13:01:04 +0000
asID:                     19165
IP address blocks:        208.87.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5f:c5:d1:bb:4c:5e:10:44:8b:64:ca:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jul  1 13:01:04 2025 GMT
            Not After : Sep 29 13:01:04 2025 GMT
        Subject: CN=b3317793-c339-4c80-9f16-40ff41a75a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:51:0b:ce:8f:c6:e2:11:c8:62:51:f7:40:e9:
                    96:59:9b:6f:d8:81:c4:25:e2:84:66:af:41:ba:b1:
                    cf:cb:54:32:e4:c5:99:68:77:88:b6:21:07:c3:aa:
                    15:17:18:4a:8b:db:5a:04:49:af:d5:7b:24:85:cf:
                    56:89:a7:96:6e:0d:f3:7e:34:31:04:fd:21:42:8c:
                    a8:81:ab:fe:93:36:c5:5d:89:58:ed:41:83:bd:2c:
                    91:05:ac:0c:77:e3:a4:3a:65:dc:f1:d4:f7:92:1a:
                    22:c0:70:1d:77:8f:48:a6:ac:ba:47:a6:40:57:99:
                    eb:8d:78:7c:fe:14:36:79:91:37:da:73:8e:ce:42:
                    eb:fb:01:6c:e8:40:3b:73:fd:5a:a1:d1:19:f2:9e:
                    d0:9b:24:51:4f:26:39:2f:62:2d:8a:3b:eb:68:be:
                    6e:44:40:cd:cd:df:9f:ac:5e:b9:07:79:cf:be:8e:
                    1e:d0:ac:9e:79:cf:a0:bb:7a:b2:51:8a:24:72:e2:
                    25:fc:9b:95:8d:00:de:05:22:47:67:67:3e:9c:e4:
                    1b:97:6c:0f:9b:38:2b:a7:59:cf:6e:97:f7:82:e9:
                    03:5a:08:0d:9a:4a:a8:69:cd:74:df:4b:71:70:bc:
                    fe:b3:e3:26:04:a0:a6:fc:a1:1c:64:42:45:71:b2:
                    a0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FE:BC:BD:A9:6E:47:1B:16:92:1B:B3:61:EE:8E:CA:55:82:77:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/3f6a5fee-ec64-301f-a0e5-14c1947ec0b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.87.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:a2:bc:93:12:55:af:e5:f4:ba:d8:e9:cd:33:5d:d5:02:41:
         cd:80:d8:93:92:1b:5c:76:e4:ed:3d:f1:b7:b6:ce:0c:bb:69:
         bb:fe:ba:dc:c4:99:9b:20:0b:18:49:5c:0a:37:0f:27:44:96:
         03:f7:ac:f3:d8:f5:26:6f:02:d4:f4:4e:22:e7:e4:78:7d:52:
         cd:28:35:bc:9a:a4:ca:63:3a:38:62:86:52:89:7e:23:e5:fe:
         cb:1e:f2:2f:5f:5e:c4:47:75:9c:93:9b:ec:52:d8:0e:81:3e:
         df:fb:c8:5c:97:13:8c:5a:0a:0c:a1:21:5f:66:e3:94:64:51:
         0e:e7:58:7c:7c:05:c1:29:1b:8c:56:a5:f7:9a:07:31:f9:d0:
         aa:7d:d3:c3:ae:7c:a0:11:d2:91:ec:c2:39:67:71:d5:3a:b9:
         c6:de:0d:18:e3:8f:53:bf:6c:42:d2:ba:a2:ad:90:11:1e:29:
         5d:8e:a3:41:b8:2f:b5:cc:93:f5:36:d8:82:17:cd:4a:2e:0a:
         ca:19:4e:e4:65:74:da:04:f2:59:15:32:83:02:16:6f:3a:41:
         b1:b2:52:75:e4:2d:ab:3d:be:1d:33:92:09:09:8d:a1:7c:31:
         db:76:eb:0d:6c:33:0c:1d:74:6d:77:82:e8:e6:fe:dc:ed:05:
         5e:9f:e4:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:50:08 2025 by rpki-client