Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/060afa88-c689-36bf-8da3-d16c2159ba5c.roa
File:                     060afa88-c689-36bf-8da3-d16c2159ba5c.roa (raw, json)
Hash identifier:          dL+CLSax1+9bXxjUfBGMDYN1dVjS5FfeH1O95rSTERA=
Subject key identifier:   F4:C6:AB:5D:E3:7B:4F:81:B1:D0:B8:42:1E:3B:4A:D4:18:60:06:AD
Certificate issuer:       /CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
Certificate serial:       010D0C9F4328584B1C36BF8A71C05FB3E0B43FC0
Authority key identifier: B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/060afa88-c689-36bf-8da3-d16c2159ba5c.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     396982
IP address blocks:        64.6.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:36:bf:8a:71:c0:5f:b3:e0:b4:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78ff8a4a-5ee2-475a-b7cc-b971a6288885
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=4d443643-995d-49fa-8120-be62c6eadee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b6:e2:4a:bd:08:1c:b1:4a:67:7c:2a:f3:5a:
                    42:a3:74:6a:52:42:9d:33:39:aa:95:83:15:ff:cd:
                    46:08:29:91:97:6a:7d:e6:01:98:f7:e9:33:42:c5:
                    9a:7e:86:d1:7a:39:44:a6:f2:74:66:b6:66:2c:99:
                    6d:b1:af:e1:b4:c9:02:99:99:9a:a6:88:e6:d9:16:
                    cd:13:10:f2:22:28:96:53:29:50:fa:a8:3a:9f:b0:
                    97:ac:6b:d3:1f:19:9e:32:91:c1:6e:1f:de:2a:7a:
                    ac:df:5d:d5:6d:0b:b2:8e:8c:e9:f3:67:f8:ab:84:
                    e5:ca:bf:9e:22:0e:83:51:eb:c3:fc:c1:84:97:9c:
                    26:22:bf:84:e8:65:17:b1:a4:d9:78:39:6e:7b:ed:
                    a9:51:67:c8:24:94:06:3e:7d:50:24:f7:39:5a:8c:
                    91:c5:15:1a:ba:8e:16:18:51:28:db:e1:5f:53:ff:
                    c4:75:a8:32:07:d7:6c:99:de:a5:70:2e:2d:53:c1:
                    96:19:94:a0:ce:4f:df:43:ec:af:f0:14:ad:b8:54:
                    22:85:78:58:be:d8:97:a2:81:dd:5c:01:97:39:b6:
                    0b:5e:17:d1:be:60:6b:25:14:4d:4a:67:e6:a4:b1:
                    42:51:62:24:3a:f2:92:06:20:4c:78:78:c2:03:ba:
                    54:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C6:AB:5D:E3:7B:4F:81:B1:D0:B8:42:1E:3B:4A:D4:18:60:06:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/060afa88-c689-36bf-8da3-d16c2159ba5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885/78ff8a4a-5ee2-475a-b7cc-b971a6288885.crl

            X509v3 Authority Key Identifier:
                keyid:B0:EB:F0:1E:67:E5:D5:52:74:76:34:42:EE:60:3E:B1:49:63:EA:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78ff8a4a-5ee2-475a-b7cc-b971a6288885.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.6.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:81:ef:99:ae:ac:40:28:ab:c1:53:d4:15:c5:c6:35:b4:f2:
         eb:3b:58:bb:b5:80:0e:f3:d5:59:ef:81:fa:f6:b6:95:46:4e:
         e3:e6:c5:6a:fe:0c:0e:2f:eb:6f:4a:74:46:30:f6:ef:35:1c:
         6b:7e:b4:0e:70:2b:d5:67:5d:51:ed:10:08:f1:e6:e1:84:5a:
         02:29:39:7b:82:5c:83:18:e5:1c:0a:8b:69:20:83:2e:51:03:
         7f:1d:8a:f6:86:47:11:31:ea:3c:5a:4c:9e:9a:16:d2:7c:89:
         43:07:98:2b:c4:14:55:53:a6:a9:01:24:66:84:d0:ef:1e:5c:
         a6:01:76:fe:71:49:11:f4:f3:11:ee:1d:9b:96:99:9d:79:fe:
         1a:1e:f2:db:d4:56:ab:b2:6a:d2:53:93:ab:15:71:29:e7:3d:
         77:94:a8:2f:e7:8d:55:f8:cb:a2:9c:08:b9:02:c8:15:b1:77:
         37:ff:a7:43:e8:4a:96:e3:5a:05:8a:4e:be:74:98:05:13:6a:
         c8:47:3e:1e:96:f5:53:65:0d:58:1d:a0:3d:07:df:b7:82:89:
         44:c8:06:6d:49:3c:1c:c2:5b:d7:26:d0:b1:0e:0a:49:68:40:
         bb:28:cc:f8:87:7e:c9:bc:e6:2f:85:b4:c7:4b:d9:25:6c:64:
         34:2c:0c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 05:37:19 2025 by rpki-client