Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa
File:                     867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa (raw, json)
Hash identifier:          5LqdRwJa1mfYFWUXuYmh8DczqF05cpHhhJEuZ7B9uJA=
Subject key identifier:   FF:A8:46:BC:36:57:38:54:81:97:BB:66:91:FC:7B:1C:C5:2F:58:4D
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F4328584A8575F8215D06702142965200
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        170.114.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:f8:21:5d:06:70:21:42:96:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=a066d6c5-557d-4eb5-afd2-87c58c212e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:c9:a6:f7:62:14:85:c0:c7:09:3f:2a:5d:8e:
                    9c:e0:f9:26:8b:8c:3a:fb:11:dd:22:bf:cd:64:48:
                    6f:f6:65:f1:45:c7:5e:a1:2d:8d:62:18:e4:cf:a1:
                    53:89:8f:6b:c7:54:cd:14:14:1e:9a:b4:c4:a7:18:
                    65:52:6c:2a:ef:6a:2a:60:47:85:66:4a:e7:20:60:
                    66:da:e6:79:56:6f:fb:96:a0:7b:d4:47:78:8c:84:
                    07:3e:b2:75:f0:83:f9:f0:5b:d7:55:f5:c3:17:fb:
                    f7:c8:15:e4:7d:b3:79:bc:59:78:44:4f:59:ee:34:
                    33:e4:99:50:fb:e3:2e:b5:62:b9:f5:7e:1b:8a:80:
                    77:a1:f0:5a:13:03:22:03:18:56:2a:0d:45:31:4c:
                    d9:bc:fd:d8:d2:65:fc:4b:56:06:42:11:ab:35:47:
                    b1:69:a9:92:94:ff:cd:22:b5:05:4c:78:19:7f:0d:
                    85:a6:0e:6a:f3:04:96:71:01:d2:ee:95:63:d3:78:
                    bf:c5:72:ae:69:22:49:b4:b1:0d:b0:67:70:02:c5:
                    75:ac:68:82:ff:3c:37:b0:c6:ba:aa:48:ea:51:d0:
                    cb:c3:ca:6f:df:b3:58:50:94:63:b6:78:82:37:6f:
                    c1:33:af:74:60:0c:54:d6:b8:52:a3:70:b2:9c:7a:
                    32:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:A8:46:BC:36:57:38:54:81:97:BB:66:91:FC:7B:1C:C5:2F:58:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/867ba8c6-b8e0-3c0d-b890-3ac9aa19524a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:ee:f7:19:78:34:ff:45:3c:46:95:da:8a:36:fd:6b:7b:e1:
         bf:86:79:36:dd:ba:6a:a4:47:71:4a:ae:f5:83:dc:65:5a:64:
         f7:37:b2:b9:ee:33:25:a3:70:cb:0c:44:30:13:d6:98:3f:b0:
         82:e9:d1:ba:34:d9:d0:bb:a2:27:d7:af:a6:d9:04:4e:f8:3b:
         75:2e:01:f2:59:48:b7:98:ba:53:45:35:ba:a0:ff:12:da:32:
         0a:48:59:dc:38:b9:d0:a5:f4:1c:d7:a7:34:98:60:f9:29:13:
         1a:a1:b9:79:95:41:64:a7:e3:ee:e9:fe:9a:08:98:0d:f8:75:
         6c:f2:40:19:c2:a2:ed:db:d3:4a:d2:27:a2:14:a3:2f:9f:78:
         9c:dc:73:a3:da:8e:d8:bf:44:7b:35:c1:ba:50:e0:44:7a:6e:
         f5:ee:c1:f3:57:0e:d4:a9:ae:d7:ed:16:a3:71:18:68:1d:02:
         68:4e:e1:b5:d4:55:15:ed:6b:39:7f:38:ed:fc:ee:db:07:58:
         5a:51:4b:99:ef:0b:83:cd:b6:00:32:92:38:b3:32:01:75:54:
         86:18:7b:ad:2d:16:00:65:f7:d9:5f:8d:4a:b0:1e:c7:17:e6:
         02:aa:d6:26:a2:d4:c6:f9:82:16:d9:5c:1b:04:45:f2:52:7b:
         8a:b4:dd:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:12:55 2025 by rpki-client