Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/dff172bb-2dfe-3af7-bf2e-cf7887fc0f2a.roa
File:                     dff172bb-2dfe-3af7-bf2e-cf7887fc0f2a.roa (raw, json)
Hash identifier:          fQ3mFYO3RRF3tc/oHTlREmRrAiDR+oDaJRxbMyGdQEU=
Subject key identifier:   A9:AC:74:FA:41:AD:B7:23:6A:B3:61:19:24:C1:E9:31:CD:84:D7:DD
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F4328584AADF1005B85D4FE6CAE945C80
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/dff172bb-2dfe-3af7-bf2e-cf7887fc0f2a.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     19197
IP address blocks:        69.41.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:00:5b:85:d4:fe:6c:ae:94:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=b653648a-94f4-4123-bb57-a3712938062b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a6:2e:b7:1c:7b:ae:11:9c:c7:94:c7:ab:10:
                    bc:08:55:11:da:28:67:6a:dd:ff:3f:bb:1b:c1:8f:
                    14:ea:54:ef:2e:a6:d7:49:e4:0b:7b:fa:b5:b8:f9:
                    4b:7c:c7:b7:b4:fd:7b:2f:f8:31:82:02:b3:3d:3c:
                    42:a6:50:e9:6d:33:a5:4b:ce:d4:56:c5:57:e1:5d:
                    17:89:ba:e7:53:93:f4:78:a9:bd:50:5c:4b:57:f9:
                    9a:7a:4e:87:13:26:33:ea:18:af:d8:07:3e:81:52:
                    28:53:8b:fb:55:65:48:77:68:8c:f8:6d:5b:ad:e7:
                    1e:8a:e0:6b:a0:73:5b:47:50:4c:e7:ac:09:23:c5:
                    78:aa:78:6c:5b:a5:66:3c:39:eb:31:36:6d:57:96:
                    96:3e:ea:0c:f2:43:26:55:a4:bc:cd:5b:19:ca:b1:
                    ab:2d:1a:4c:a4:bd:29:de:07:c7:c6:a0:0f:47:9c:
                    8b:3e:d4:1e:c7:7b:c7:48:7e:7b:00:a4:e1:6d:24:
                    dd:bf:22:5c:0b:28:55:ca:39:02:c1:e0:8c:3e:46:
                    23:95:0c:b2:2d:a3:7b:38:b4:2f:07:10:f6:61:f3:
                    3c:cc:f1:6e:64:4e:0f:13:8f:a5:1b:4e:29:77:09:
                    37:1d:d4:74:f5:9c:38:19:d3:1e:59:59:ad:e5:b0:
                    66:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AC:74:FA:41:AD:B7:23:6A:B3:61:19:24:C1:E9:31:CD:84:D7:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/dff172bb-2dfe-3af7-bf2e-cf7887fc0f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:6d:e2:61:bf:ca:9a:63:9d:68:f5:75:2b:a4:e7:5c:60:32:
         22:fd:08:7a:f3:a9:46:a6:91:9b:0d:aa:bf:f6:cd:99:8a:38:
         ae:56:69:b8:57:4a:69:73:61:5a:1d:80:fd:d3:3b:48:5f:7c:
         31:ce:b4:1f:ba:88:77:bd:bb:7c:b5:47:e0:65:a3:2a:28:3e:
         7c:88:e2:6c:57:af:c1:94:81:1c:6a:8f:9e:a2:1a:f3:49:4c:
         2c:78:c6:90:d8:fa:69:a8:bc:f2:54:41:0d:17:29:d4:68:11:
         81:78:3a:d7:74:b4:2a:59:e0:7f:92:91:f8:67:46:4f:a7:56:
         e1:01:23:05:af:bc:6a:92:e6:29:5c:d5:f2:76:88:5b:36:7e:
         ee:92:a4:38:8c:e6:c4:97:9e:25:e2:19:b9:4c:aa:95:70:79:
         71:cc:16:c7:c3:aa:ef:ca:05:b6:0a:d6:af:cc:4f:07:6c:e4:
         9b:b1:8f:b5:c6:da:75:3d:9b:74:7f:1c:31:d3:1c:6c:85:96:
         99:72:91:b0:bc:86:22:de:d4:47:cc:4e:21:10:5c:43:e1:7c:
         39:ff:16:5f:87:67:7a:51:87:44:67:ed:1e:85:c0:3c:2d:e7:
         df:4a:29:6f:ff:04:fd:a1:76:24:b0:7b:b8:a2:c7:e2:e5:58:
         cf:6b:74:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:34 2025 by rpki-client