Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa
File:                     60c05e3f-1816-3cff-8958-8504b17b798d.roa (raw, json)
Hash identifier:          2g1ovsC8NhuZUcKpbbHKcLso/6sjibMZFPX/qxJO6jc=
Subject key identifier:   C0:5E:ED:6B:44:83:39:2B:BD:B5:C6:B9:AD:7F:36:81:70:1C:FF:4A
Certificate issuer:       /CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
Certificate serial:       010D0C9F4328584B13D6B7889A3D16EC5714ECA0
Authority key identifier: EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     394745
IP address blocks:        170.75.160.0/20 maxlen: 20
                          172.81.176.0/21 maxlen: 21
                          2602:ffb6::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 15 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:b7:88:9a:3d:16:ec:57:14:ec:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=ec6e4811-6ee5-488f-83d9-24db1b1ec27f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ec:c9:8a:f8:dc:d7:43:5d:f8:b3:4e:4e:7d:
                    f1:af:bc:30:0d:b7:1c:0f:f2:da:84:ac:08:ea:56:
                    6e:8a:7c:80:f1:e0:cb:56:91:03:54:ca:db:9a:91:
                    5b:41:25:5e:a7:5a:10:d8:d5:d9:53:66:66:34:19:
                    6c:88:f1:5f:73:81:38:34:ce:dd:f9:8e:29:76:e1:
                    78:23:89:3a:11:d4:ac:0e:99:af:ed:3d:0f:14:87:
                    b9:40:78:63:c5:02:67:95:16:87:4e:19:8c:e9:9e:
                    d1:6c:0b:82:de:a1:39:03:b5:55:72:7b:ba:43:5f:
                    80:e5:e0:7d:b5:ff:64:8c:4e:bd:d2:04:28:ba:a1:
                    5b:6e:fc:a8:b5:cb:7e:3d:56:c7:67:15:3f:02:bc:
                    a2:4e:fc:bd:8e:f4:3e:5c:2c:56:f3:7e:1a:8e:ff:
                    23:1e:83:9c:b5:61:70:d3:b7:b2:83:d0:b1:5c:99:
                    f4:a2:3f:fe:be:fb:07:08:a4:f8:b1:85:6f:74:b2:
                    ea:aa:a1:6c:79:b7:e6:c2:00:3a:dd:10:82:a1:65:
                    df:8f:0d:b5:fb:a6:87:1f:49:ee:bb:0f:2d:68:27:
                    5f:76:3e:89:c5:b5:1d:6f:59:e5:77:d4:d0:ab:fc:
                    aa:05:72:fc:95:2f:2c:9c:4f:61:91:bd:a1:b3:5e:
                    21:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:5E:ED:6B:44:83:39:2B:BD:B5:C6:B9:AD:7F:36:81:70:1C:FF:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/60c05e3f-1816-3cff-8958-8504b17b798d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl

            X509v3 Authority Key Identifier:
                keyid:EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.75.160.0/20
                  172.81.176.0/21
                IPv6:
                  2602:ffb6::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:b2:19:55:a6:2b:2b:84:be:28:74:03:7d:af:4a:39:ef:7c:
         93:f5:76:24:50:4c:0e:85:45:ae:3e:cb:0e:47:2f:5d:d4:ca:
         b2:8d:23:34:48:1e:84:8a:ab:2a:41:5a:0e:97:9f:22:c5:46:
         a1:46:af:14:7b:f1:f1:21:b0:b1:9f:d1:65:8f:55:fb:44:27:
         3b:16:e4:16:14:53:af:ad:c1:2c:15:72:5d:c1:ac:94:f2:88:
         8c:11:09:28:2d:6d:e6:e6:ef:64:43:07:60:88:10:9b:dc:f3:
         b0:1b:0f:28:13:17:1a:f8:f6:2e:60:f2:41:2a:1c:f5:7f:0a:
         7e:3d:84:86:3d:85:b2:c7:11:e3:45:c7:9f:22:43:cc:fc:7f:
         98:4a:a7:4a:ca:c6:a6:91:74:66:ab:06:c0:4a:f6:5d:fe:c9:
         2d:d3:ea:0c:91:de:74:0a:98:3d:fa:cf:bf:08:5c:79:fc:6a:
         55:f5:c4:da:4f:7d:3c:c9:16:95:46:61:0f:89:02:97:7b:70:
         c0:4c:3b:27:28:0a:a7:50:6c:dc:f7:81:74:c7:fb:36:c4:eb:
         e2:af:94:de:ca:05:88:a3:6f:00:c7:9b:cb:a0:fc:48:bc:7d:
         a9:5a:3b:ea:7c:e8:08:93:e3:39:d8:c0:60:53:be:12:96:a7:
         9d:c2:f6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 03:21:13 2025 by rpki-client