Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/60d3e01e-54dc-30ae-a2cd-ace458d79c21.roa
File:                     60d3e01e-54dc-30ae-a2cd-ace458d79c21.roa (raw, json)
Hash identifier:          rsXAMkNzChCdpWgA0bfr07Cj8HCJUCtX/2SXyHy/kG8=
Subject key identifier:   2D:E9:5E:F7:85:8A:6C:18:5D:DB:0D:19:6F:32:25:D1:2B:85:16:4B
Certificate issuer:       /CN=00561825-d26a-4ad1-954b-7ae435a3f4a1
Certificate serial:       010D0C9F4328584B775FA25E5E7897EC65AD7C00
Authority key identifier: B0:0D:9C:45:A3:C3:AC:C4:5B:88:EB:6E:EF:E7:EA:71:C4:1A:CE:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/60d3e01e-54dc-30ae-a2cd-ace458d79c21.roa
Signing time:             Thu 09 Oct 2025 16:41:35 +0000
ROA not before:           Thu 09 Oct 2025 16:41:35 +0000
ROA not after:            Wed 07 Jan 2026 17:41:35 +0000
asID:                     1742
IP address blocks:        134.174.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/00561825-d26a-4ad1-954b-7ae435a3f4a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/00561825-d26a-4ad1-954b-7ae435a3f4a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:77:5f:a2:5e:5e:78:97:ec:65:ad:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00561825-d26a-4ad1-954b-7ae435a3f4a1
        Validity
            Not Before: Oct  9 16:41:35 2025 GMT
            Not After : Jan  7 17:41:35 2026 GMT
        Subject: CN=976226e7-ce1d-4491-bcca-758e4ec21e8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:28:98:23:6e:8b:f7:44:cb:dc:9a:e5:12:5f:
                    41:b8:03:78:cd:c8:01:26:65:ac:00:82:34:77:97:
                    96:ed:d2:3f:1a:5d:0e:ff:10:7b:08:44:5e:fa:f4:
                    f9:f6:c2:79:61:4e:53:e1:8c:2e:7f:6a:7a:1c:25:
                    89:44:43:b1:37:21:09:06:1f:5c:bf:1c:4f:ac:bd:
                    af:31:1a:31:c0:85:24:b7:88:1b:c5:a9:db:ec:8f:
                    0f:d2:b0:97:40:95:8b:b8:44:97:80:8a:9b:26:98:
                    b6:60:c1:64:ee:63:98:37:69:60:b6:a9:00:e4:91:
                    65:07:7a:9d:d7:9c:8a:95:56:46:e6:39:74:6d:f4:
                    b9:17:0c:84:ca:e9:dd:39:1f:c7:3f:81:e5:84:97:
                    e4:7c:7c:91:b2:02:7f:0b:e1:c0:3a:da:d7:d5:4c:
                    09:c1:7d:f7:78:f6:88:a5:5c:4b:40:b3:2e:fb:82:
                    99:3b:58:29:16:5d:62:0a:40:83:77:61:c0:13:ea:
                    73:4e:ae:d8:ce:2c:e1:cb:05:db:4d:74:ed:28:04:
                    de:38:7b:95:ad:c4:94:44:da:9e:fa:47:a0:75:a9:
                    57:1a:7a:ff:51:98:b7:d7:29:5e:db:1a:84:f4:48:
                    1a:9d:04:35:64:3b:ce:58:31:9e:ad:5b:54:82:25:
                    fd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:E9:5E:F7:85:8A:6C:18:5D:DB:0D:19:6F:32:25:D1:2B:85:16:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/60d3e01e-54dc-30ae-a2cd-ace458d79c21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1/00561825-d26a-4ad1-954b-7ae435a3f4a1.crl

            X509v3 Authority Key Identifier:
                keyid:B0:0D:9C:45:A3:C3:AC:C4:5B:88:EB:6E:EF:E7:EA:71:C4:1A:CE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/00561825-d26a-4ad1-954b-7ae435a3f4a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.174.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:2a:3b:c5:31:d4:0c:d0:d2:29:a8:a1:0d:e7:d4:2c:c5:d5:
         56:62:07:c3:9a:3f:c7:23:07:bb:7c:0a:ef:39:52:14:76:32:
         26:21:58:6b:99:49:fc:c0:a5:69:6e:63:ed:95:40:f5:6a:4b:
         64:f8:6d:28:42:30:bc:54:70:80:f7:f8:07:2b:1a:82:af:81:
         c5:ae:e7:3c:29:85:8b:2a:b7:ed:a4:8d:f2:6b:ed:aa:79:5e:
         0b:0b:0b:26:ca:3f:d9:c8:c3:4f:57:54:d3:b6:60:a5:08:86:
         21:1f:8c:7a:0d:16:cf:58:62:86:bb:b1:3f:d6:ca:e3:eb:16:
         bf:da:f2:e9:c4:26:9a:21:05:51:30:6c:90:2f:ed:48:5e:2e:
         96:83:6a:ec:58:f4:a5:01:7c:fa:5d:dc:1f:bd:d5:fa:a3:56:
         fb:f7:e3:f2:d3:82:53:2f:c2:c4:51:e8:db:01:3d:b6:61:d6:
         be:2b:14:42:68:9f:2e:e4:13:c7:26:e8:43:a2:1d:bf:99:f1:
         62:1f:ee:de:79:fa:06:af:4b:4e:2b:b4:72:3f:7f:eb:04:b2:
         a7:19:f4:6f:8b:d8:b7:67:b8:cd:47:0c:bc:8c:2c:51:a7:e3:
         f7:bd:c8:ed:e5:2d:2c:cd:e1:ea:5d:0a:c7:1f:d6:06:f9:af:
         9e:d1:76:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:40:46 2025 by rpki-client