Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1915eca4-a3d9-4bc7-a6fc-2c900cd0fa1f/8cfb16c2-edee-35d1-aa16-a909c4b28c2e.roa
File:                     8cfb16c2-edee-35d1-aa16-a909c4b28c2e.roa (raw, json)
Hash identifier:          ZeCaQxeoiIZXQlwi/lW5HgAn9MC4Vo+hgt1ULvsINnQ=
Subject key identifier:   2C:10:3C:8B:46:D3:15:AC:39:DA:06:A5:F3:6C:E6:6D:4E:FF:8E:14
Certificate issuer:       /CN=1915eca4-a3d9-4bc7-a6fc-2c900cd0fa1f
Certificate serial:       010D0C9F4328584BBB75A671967446825DD4DD80
Authority key identifier: CA:BF:A9:1A:97:03:5D:7A:80:16:21:00:ED:34:A5:1D:7B:81:C9:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1915eca4-a3d9-4bc7-a6fc-2c900cd0fa1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1915eca4-a3d9-4bc7-a6fc-2c900cd0fa1f/8cfb16c2-edee-35d1-aa16-a909c4b28c2e.roa
Signing time:             Mon 03 Nov 2025 02:00:31 +0000
ROA not before:           Mon 03 Nov 2025 02:00:31 +0000
ROA not after:            Sun 01 Feb 2026 02:00:31 +0000
asID:                     6079
IP address blocks:        66.111.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1915eca4-a3d9-4bc7-a6fc-2c900cd0fa1f/1915eca4-a3d9-4bc7-a6fc-2c900cd0fa1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1915eca4-a3d9-4bc7-a6fc-2c900cd0fa1f/1915eca4-a3d9-4bc7-a6fc-2c900cd0fa1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1915eca4-a3d9-4bc7-a6fc-2c900cd0fa1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:bb:75:a6:71:96:74:46:82:5d:d4:dd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1915eca4-a3d9-4bc7-a6fc-2c900cd0fa1f
        Validity
            Not Before: Nov  3 02:00:31 2025 GMT
            Not After : Feb  1 02:00:31 2026 GMT
        Subject: CN=f4f80f43-6618-4894-87c0-07d52d8cb115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b2:00:97:43:ee:cd:1c:10:04:f4:e1:ca:e1:
                    ac:81:89:68:c9:d9:e5:0e:62:3d:46:2c:38:58:57:
                    ce:89:02:f3:ec:28:4d:6e:a2:4c:a1:58:01:d2:38:
                    a0:a9:31:c5:85:e1:c0:ca:1c:41:91:47:f8:93:df:
                    cb:fd:9c:d5:07:7e:d0:e2:1b:6c:c5:39:f3:46:d1:
                    33:cd:ef:d2:cd:29:85:4b:d9:f5:9b:47:7f:fc:37:
                    0d:ad:4d:19:8c:8e:f0:a5:7d:f5:fc:d6:4f:6c:82:
                    e2:2d:7f:c0:6b:1b:82:d0:48:a6:23:c6:c6:cf:8c:
                    7e:ca:74:0f:d9:e7:cf:c5:77:51:72:f1:96:a9:a0:
                    61:1d:26:41:e4:c2:36:6b:fb:73:33:68:92:85:76:
                    44:92:c0:3b:0e:2d:f4:e1:ee:21:67:ac:54:91:c6:
                    bc:1b:5a:8e:8b:3c:9c:07:df:82:a5:1d:15:27:27:
                    b2:6e:95:75:ca:f6:e8:c2:fe:99:eb:c9:c6:22:95:
                    cf:87:e5:25:bc:ab:78:67:18:07:79:15:6a:ae:7f:
                    0f:6f:98:03:04:fd:57:8a:25:6d:5f:2e:b6:d3:d8:
                    ea:f5:23:05:ea:a4:10:f9:80:7e:92:90:6c:08:a9:
                    58:ba:7c:15:e8:d3:e7:53:5e:b1:91:68:54:0f:08:
                    2f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:10:3C:8B:46:D3:15:AC:39:DA:06:A5:F3:6C:E6:6D:4E:FF:8E:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1915eca4-a3d9-4bc7-a6fc-2c900cd0fa1f/8cfb16c2-edee-35d1-aa16-a909c4b28c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1915eca4-a3d9-4bc7-a6fc-2c900cd0fa1f/1915eca4-a3d9-4bc7-a6fc-2c900cd0fa1f.crl

            X509v3 Authority Key Identifier:
                keyid:CA:BF:A9:1A:97:03:5D:7A:80:16:21:00:ED:34:A5:1D:7B:81:C9:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1915eca4-a3d9-4bc7-a6fc-2c900cd0fa1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.111.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:a1:c0:5e:38:4b:e9:93:47:32:6c:4b:ec:40:d6:89:5a:e4:
         06:5e:2d:84:1f:b4:69:14:a2:93:62:a0:df:de:53:4f:69:e3:
         3b:37:65:59:38:2e:62:d4:b8:8a:f6:ae:e8:7a:85:62:fa:c6:
         63:11:da:85:20:3c:9a:b8:74:0f:92:b1:35:69:65:f2:76:09:
         4c:9c:37:2d:3a:ca:e9:24:4f:c8:1c:91:6d:6d:54:8e:6b:69:
         96:c2:55:4d:6a:fc:96:56:89:3b:03:0a:c7:8a:d4:d2:20:ab:
         5f:a8:8a:3e:d8:28:4a:a2:0a:29:ec:76:21:c2:93:ff:6f:68:
         6d:72:85:43:12:2f:30:34:2c:21:b4:cc:ec:bf:87:9e:ca:02:
         3e:47:db:4f:e0:ea:44:dc:5b:4a:c2:ad:b7:e0:f0:0b:8d:49:
         25:1d:b3:9c:f8:34:7f:7e:bf:86:4b:41:73:fc:13:b3:5e:d0:
         7b:67:cc:2d:f6:f9:20:3e:42:62:37:f8:1d:f0:f8:aa:9e:29:
         f8:79:e4:9b:30:5c:3e:6c:a6:08:95:c8:c0:db:bc:e0:6f:dd:
         63:0d:7c:ec:c9:de:38:03:c4:3d:59:32:32:8b:83:2e:21:7e:
         da:87:a2:87:aa:5e:5a:14:b9:3a:45:71:58:fc:cc:b2:7a:21:
         e1:4c:fb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:34:26 2025 by rpki-client