Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/c919552e-29ac-3f52-af18-4e4fd459a3f3.roa
File:                     c919552e-29ac-3f52-af18-4e4fd459a3f3.roa (raw, json)
Hash identifier:          Ebbfei8NGaki0p5G2HXQx+b49fsBGy/ZRTwX6iOK+I4=
Subject key identifier:   D4:6C:83:C1:6B:9B:22:D5:E9:82:80:58:4D:06:8D:03:8B:91:C3:56
Certificate issuer:       /CN=68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5
Certificate serial:       010D0C9F4328584AAB265D11D295EEA6A8ED2600
Authority key identifier: 46:EA:7F:7E:BF:DE:75:42:C5:75:16:AC:A5:93:F9:06:8A:2E:9E:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/c919552e-29ac-3f52-af18-4e4fd459a3f3.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     14157
IP address blocks:        206.83.160.0/20 maxlen: 24
                          2620:13d:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:5d:11:d2:95:ee:a6:a8:ed:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=968e98c3-9cfe-4f6b-a841-52bfeca9afd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7f:d3:ab:df:c3:e9:4f:8a:93:54:6c:5a:d8:
                    9b:2b:26:55:03:e1:72:ee:aa:01:ea:1a:dd:57:3e:
                    fe:8c:8e:1b:d2:b9:a0:70:44:f9:98:0f:08:72:65:
                    da:41:25:aa:93:83:3b:91:7e:eb:1c:cc:a0:44:3d:
                    2e:33:fc:a2:90:f1:42:52:19:d7:c5:17:ff:53:a0:
                    23:af:d4:8b:0d:84:76:d7:1f:b0:56:f9:f5:57:4e:
                    52:e2:e0:83:67:22:e5:8c:ce:9a:a6:97:d0:5b:01:
                    9c:4b:33:29:45:fc:28:de:a2:d3:32:42:9c:26:ff:
                    2e:c9:56:b2:18:8e:09:a6:e9:d7:d4:80:db:ce:8a:
                    72:73:ca:77:ef:ee:b4:8e:a6:b6:6e:30:d7:0d:c7:
                    58:b5:f2:a3:89:53:fb:01:e4:09:30:0c:e4:ef:b3:
                    5b:55:39:92:4a:86:48:fe:07:2c:15:9d:07:ab:da:
                    25:98:4b:fa:58:5d:ba:64:94:8a:83:1e:20:84:a5:
                    be:4c:51:de:9f:83:1a:fc:05:7b:89:49:df:05:3e:
                    a9:d7:f0:59:c0:43:78:27:fb:55:cb:26:79:74:72:
                    d0:34:e8:17:9d:f1:fd:66:01:45:55:35:20:82:a3:
                    15:b2:bf:a8:1d:99:8d:81:c0:5e:ec:b8:2f:e2:2c:
                    f1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:6C:83:C1:6B:9B:22:D5:E9:82:80:58:4D:06:8D:03:8B:91:C3:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/c919552e-29ac-3f52-af18-4e4fd459a3f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.crl

            X509v3 Authority Key Identifier:
                keyid:46:EA:7F:7E:BF:DE:75:42:C5:75:16:AC:A5:93:F9:06:8A:2E:9E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.160.0/20
                IPv6:
                  2620:13d:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:3d:ce:de:9e:0e:a2:86:e6:73:d8:a2:33:11:b2:05:b2:e1:
         a0:7c:03:d5:79:1f:0d:3b:43:74:e8:66:7c:b1:96:39:94:0d:
         3a:6d:68:37:5c:47:c3:78:1c:db:1f:95:04:e1:c3:49:12:19:
         56:83:35:fe:43:c2:4c:40:c1:6a:30:42:69:d3:4e:16:8b:68:
         7b:08:b1:c7:7b:c4:b8:05:3b:96:f5:7b:f4:1a:56:0f:24:53:
         44:33:a5:da:fd:cd:2c:41:96:17:32:a1:d8:ef:60:a5:73:55:
         b1:cf:52:ee:3d:4a:27:5b:9f:d6:75:79:64:a7:97:79:5a:00:
         10:c4:cc:74:8f:28:23:92:a7:5f:77:b9:ab:af:ec:eb:df:36:
         72:57:00:22:f2:8d:47:db:9b:b1:9c:e7:21:db:c1:d9:62:ea:
         1b:76:93:83:6b:a3:f9:d5:0d:29:87:e7:cc:88:d0:ea:42:97:
         fb:df:d1:09:20:44:99:c8:fb:63:f9:98:5c:a9:d5:4e:16:1a:
         f1:2d:dd:3e:d8:aa:bc:2f:9e:7a:19:6c:b3:2c:c9:27:93:71:
         6f:d9:90:c7:b0:3b:78:b6:1e:f8:ea:d0:b8:18:2f:cd:6c:32:
         06:c1:e1:99:41:eb:66:02:66:c6:1d:e1:6a:2d:e9:b1:8b:5c:
         e3:30:08:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:48:43 2025 by rpki-client