Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/47fee39f-06f2-4714-a822-50bdbfad9dd4/d1483cfe-f036-3a3f-a63b-8538d61a93c6.roa
File:                     d1483cfe-f036-3a3f-a63b-8538d61a93c6.roa (raw, json)
Hash identifier:          fNfHOuTNmyW5z+DTslnBz7EA900tmnrCPtOBzdrqWRo=
Subject key identifier:   79:EC:F2:60:34:DF:81:B7:1D:B7:AA:3B:B3:B5:2E:E8:D5:05:D2:C8
Certificate issuer:       /CN=47fee39f-06f2-4714-a822-50bdbfad9dd4
Certificate serial:       010D0C9F4328584B276177C6C3E4CDB5370A8C00
Authority key identifier: 54:1B:9D:D7:68:0C:1A:3C:1E:E8:DF:FF:77:FC:78:79:66:FA:A4:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/47fee39f-06f2-4714-a822-50bdbfad9dd4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/47fee39f-06f2-4714-a822-50bdbfad9dd4/d1483cfe-f036-3a3f-a63b-8538d61a93c6.roa
Signing time:             Thu 11 Sep 2025 01:00:33 +0000
ROA not before:           Thu 11 Sep 2025 01:00:33 +0000
ROA not after:            Wed 10 Dec 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        162.136.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/47fee39f-06f2-4714-a822-50bdbfad9dd4/47fee39f-06f2-4714-a822-50bdbfad9dd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/47fee39f-06f2-4714-a822-50bdbfad9dd4/47fee39f-06f2-4714-a822-50bdbfad9dd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/47fee39f-06f2-4714-a822-50bdbfad9dd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:27:61:77:c6:c3:e4:cd:b5:37:0a:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47fee39f-06f2-4714-a822-50bdbfad9dd4
        Validity
            Not Before: Sep 11 01:00:33 2025 GMT
            Not After : Dec 10 02:00:33 2025 GMT
        Subject: CN=394589f8-5376-41f6-b21b-02060517817e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d9:17:31:12:29:bd:d7:35:7f:23:e4:45:e3:
                    8c:9c:ee:63:d3:42:2c:b1:c6:6c:0e:a5:6b:1d:0d:
                    aa:22:7c:c8:94:d8:1c:a8:bc:18:f6:86:c1:c4:79:
                    0a:2c:58:5e:ab:4f:fa:7a:0f:15:7b:93:b2:a1:c6:
                    0e:c2:33:ae:19:eb:00:65:eb:1c:91:1e:67:d8:78:
                    d8:6a:e1:6d:9a:42:ef:b0:b7:e6:19:f4:cc:79:d6:
                    70:1b:75:5a:a6:3f:43:77:d9:f0:37:a2:13:d4:f3:
                    58:47:96:f4:8c:e5:84:62:8e:ee:9a:ff:d0:55:50:
                    19:a1:db:8f:7b:89:d1:a2:58:c3:41:ae:4b:24:e9:
                    25:99:fb:49:9f:45:a5:af:8d:e7:83:a5:72:eb:ea:
                    85:64:74:b0:25:4b:00:67:c8:47:5b:eb:91:02:71:
                    a3:b8:31:d2:a2:75:c7:4c:7e:ca:32:6e:4e:fa:da:
                    68:97:43:92:ec:45:fd:78:a1:49:11:65:16:c9:ce:
                    83:12:7e:8b:59:c8:f1:80:5c:08:bb:44:86:29:09:
                    fa:01:0f:85:0a:c8:bf:44:41:be:48:3a:0c:3b:00:
                    4e:c7:da:55:5a:7a:5c:05:68:fe:02:44:57:f9:89:
                    10:15:4c:0c:18:bb:d7:82:0c:9a:87:93:22:1c:ce:
                    01:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EC:F2:60:34:DF:81:B7:1D:B7:AA:3B:B3:B5:2E:E8:D5:05:D2:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/47fee39f-06f2-4714-a822-50bdbfad9dd4/d1483cfe-f036-3a3f-a63b-8538d61a93c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/47fee39f-06f2-4714-a822-50bdbfad9dd4/47fee39f-06f2-4714-a822-50bdbfad9dd4.crl

            X509v3 Authority Key Identifier:
                keyid:54:1B:9D:D7:68:0C:1A:3C:1E:E8:DF:FF:77:FC:78:79:66:FA:A4:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/47fee39f-06f2-4714-a822-50bdbfad9dd4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.136.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:35:37:7f:8e:9d:23:b5:7a:86:b0:7c:24:4f:79:ac:28:39:
         7c:30:8b:0e:e8:61:b6:60:77:33:42:9e:1d:d2:e2:41:92:e5:
         b4:9c:f5:c5:30:c6:94:df:f3:aa:55:29:a5:44:fb:c3:c3:e0:
         5c:2f:bd:c7:3a:0e:74:d7:ec:b4:4a:81:1f:0c:78:57:9a:38:
         c6:cb:c8:3b:6f:cf:4d:18:0e:67:d8:d0:23:17:00:f6:aa:b1:
         7f:1a:33:2f:ba:21:bd:c8:bd:f6:76:1d:4b:cc:f3:f6:2b:87:
         65:e4:15:10:59:fc:ea:49:5f:10:00:7c:e1:37:e9:02:63:af:
         9c:22:53:f9:b3:e8:bd:df:9a:35:e2:11:79:cd:b0:e7:36:6e:
         b1:d4:c9:fc:00:a4:6a:d3:e4:4c:85:b1:0a:47:78:b8:4a:a0:
         8d:fb:66:21:44:1e:af:c8:01:b3:49:ca:2a:90:f7:08:af:a4:
         97:eb:00:ae:a4:3b:92:7d:ca:04:75:09:9a:eb:17:76:b1:8c:
         bd:e9:c5:64:12:6c:34:9e:a7:97:b3:eb:84:b8:5a:b5:42:19:
         60:b9:45:74:f5:e8:4e:0a:d9:39:0a:17:9b:16:99:08:8c:0f:
         59:f9:5c:44:14:8d:2d:a5:45:3b:50:c2:7f:77:d2:ce:99:54:
         29:18:a1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:11:55 2025 by rpki-client