Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/9ed88ef2-ca8f-3da9-9a8f-6ccca674a6e7.roa
File:                     9ed88ef2-ca8f-3da9-9a8f-6ccca674a6e7.roa (raw, json)
Hash identifier:          tnA6aOqmhM7/+vLXSOuiDD6V2OLc2G5ITwqMKdbhAyk=
Subject key identifier:   73:A4:9D:C3:7B:5D:4F:ED:DC:86:22:7D:57:C4:70:25:41:E0:FC:11
Certificate issuer:       /CN=8d34ec60-03b0-4663-8748-fab291e36393
Certificate serial:       010D0C9F4328584A9BCB6CF031592439FE20AA00
Authority key identifier: 3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/9ed88ef2-ca8f-3da9-9a8f-6ccca674a6e7.roa
Signing time:             Wed 23 Jul 2025 01:00:52 +0000
ROA not before:           Wed 23 Jul 2025 01:00:52 +0000
ROA not after:            Tue 21 Oct 2025 01:00:52 +0000
asID:                     395807
IP address blocks:        199.60.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9b:cb:6c:f0:31:59:24:39:fe:20:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d34ec60-03b0-4663-8748-fab291e36393
        Validity
            Not Before: Jul 23 01:00:52 2025 GMT
            Not After : Oct 21 01:00:52 2025 GMT
        Subject: CN=245dfe9b-c22c-4950-a7b2-460be4c63ce2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:65:a6:28:37:9c:d8:d4:aa:a0:ed:a0:1e:ac:
                    c6:78:5f:ab:d7:34:39:51:2c:7f:d5:31:55:0e:c9:
                    dc:39:24:50:bb:10:fa:a8:73:1a:e7:81:00:fe:71:
                    9f:2d:f5:0e:dc:9a:ad:4e:da:51:a0:3d:fb:bc:9a:
                    38:62:de:7c:95:4a:b9:38:93:eb:4a:d2:84:8c:e3:
                    ec:58:68:be:1e:14:d6:77:aa:52:37:cf:84:cf:eb:
                    12:03:20:a4:63:90:6c:f5:38:5a:23:e5:ef:f0:21:
                    03:30:2b:73:e8:52:93:5b:f9:51:1b:36:97:f5:46:
                    92:cf:8f:8e:88:d2:9c:18:53:08:06:f0:3f:92:bf:
                    c9:f6:a9:6c:2b:a4:95:aa:60:eb:ea:62:95:2c:81:
                    0e:c5:59:7c:72:c3:a8:e3:4c:bb:0c:a0:28:e8:65:
                    06:57:51:5e:11:76:e7:6e:a6:df:4e:d8:28:06:41:
                    03:51:f9:15:95:ab:33:77:de:bf:70:9a:ab:9b:38:
                    4f:2f:41:05:10:1d:9c:08:5c:54:9f:92:5e:07:0e:
                    47:20:de:0f:74:99:f8:d2:79:7c:60:d4:4b:47:3b:
                    2a:e9:91:bc:c0:0e:a7:79:25:d8:e9:72:3c:b4:69:
                    c7:ec:8b:74:7a:b5:a1:9a:b6:6a:ba:1d:15:1e:df:
                    33:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A4:9D:C3:7B:5D:4F:ED:DC:86:22:7D:57:C4:70:25:41:E0:FC:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/9ed88ef2-ca8f-3da9-9a8f-6ccca674a6e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393/8d34ec60-03b0-4663-8748-fab291e36393.crl

            X509v3 Authority Key Identifier:
                keyid:3C:E1:AD:C4:6C:FF:FF:61:D2:6D:75:13:59:A5:F2:0A:4D:07:85:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d34ec60-03b0-4663-8748-fab291e36393.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.60.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d0:ff:eb:78:d0:a9:ae:35:58:0e:3f:80:03:3c:58:8b:96:
         1e:16:48:54:e3:c2:0d:5b:76:4d:48:20:49:b2:e1:54:bc:a2:
         84:0d:79:b4:59:29:45:e6:7b:76:ac:ed:15:4c:d7:a0:4a:d7:
         eb:33:96:34:3d:f0:c2:06:8f:01:4b:d4:d4:d4:81:3c:06:27:
         f5:22:9d:f9:58:7d:ef:e6:ab:29:fa:fa:83:73:b1:b9:32:e2:
         63:e9:f7:c3:1a:56:c8:47:28:0c:6c:bb:00:68:d1:1b:fd:fc:
         40:21:48:7a:ff:b5:b0:8a:c1:e1:7a:85:1b:f3:95:e0:1e:7d:
         4d:be:a3:a0:af:de:22:62:57:20:a3:28:8e:ea:81:63:44:76:
         9c:ba:87:4e:00:6c:46:a4:2f:ce:8f:d9:c3:49:bf:04:df:03:
         ef:fb:29:b4:66:53:3b:d6:6e:bd:fb:59:9a:45:e4:b0:13:d6:
         bb:9e:36:df:e8:d7:84:77:a6:e7:8a:92:6f:5d:c1:9a:70:62:
         f4:fa:f3:b1:85:32:e4:c1:95:27:5f:c4:2e:2f:27:56:93:93:
         91:9e:9f:d8:5b:25:ae:11:28:3d:fb:68:0d:ff:8c:02:92:64:
         00:7c:9d:13:a7:87:dd:51:c9:da:84:c7:e2:de:e6:02:13:bc:
         65:41:76:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:43:23 2025 by rpki-client