Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/60b4ae2d-7e0d-3abd-af33-b80aebb85e91.roa
File:                     60b4ae2d-7e0d-3abd-af33-b80aebb85e91.roa (raw, json)
Hash identifier:          NvdSKIxRNqNljVpK2KHPw1Q16gXoXxRa4iWbTUuMP34=
Subject key identifier:   6D:BB:63:DE:1F:21:30:4A:6F:BB:D0:58:C3:FA:F4:9D:28:F4:0F:E5
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584B047C0E6600B6684A6B175C00
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/60b4ae2d-7e0d-3abd-af33-b80aebb85e91.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     4922
IP address blocks:        184.170.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:0e:66:00:b6:68:4a:6b:17:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=ee672e93-d5f6-43b9-be6a-5061826625e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2f:d4:ef:19:0b:9d:c6:fe:15:de:ac:02:81:
                    d1:a7:06:42:0c:d3:0c:27:e3:4c:e1:6a:9e:56:bd:
                    7f:cb:57:8f:05:92:94:ae:15:6f:ba:3b:e5:49:7a:
                    16:c9:11:84:09:64:34:31:8d:eb:7c:ca:27:d0:df:
                    26:26:54:e5:fc:1e:5d:c6:de:1b:ee:58:85:83:90:
                    f5:fa:42:dd:7c:bd:20:a4:94:5b:58:06:bb:79:a5:
                    4a:34:dc:7f:50:93:95:7d:94:c1:3c:c2:7e:b9:e8:
                    e2:ba:02:4e:10:98:e5:08:a0:6e:cc:63:01:7a:f5:
                    65:95:87:b3:ef:e4:11:5b:03:91:f8:0a:dd:0c:fb:
                    7a:cd:48:1e:3e:fb:07:2c:68:40:97:0b:50:d7:9b:
                    0d:a7:f1:4e:b3:4f:b4:c7:95:5b:19:51:73:3a:20:
                    7e:77:21:f1:ec:32:4e:13:66:a8:62:2f:99:86:42:
                    e4:09:05:ae:55:38:65:77:06:d4:89:49:77:b8:a4:
                    2f:d5:d2:a8:b1:96:82:38:51:a7:96:a3:a4:12:a6:
                    d5:b8:02:2a:ea:67:58:63:f0:63:b8:1e:b4:b4:64:
                    3d:9f:e7:61:8f:88:ad:6c:ca:a5:1b:a1:97:86:65:
                    14:df:35:7c:24:e7:e2:71:8d:a8:c2:cd:22:25:10:
                    48:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:BB:63:DE:1F:21:30:4A:6F:BB:D0:58:C3:FA:F4:9D:28:F4:0F:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/60b4ae2d-7e0d-3abd-af33-b80aebb85e91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.170.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:23:cd:3d:aa:7d:ba:15:4a:b4:cf:0e:c7:b7:c8:82:a2:b9:
         6c:87:b8:29:75:09:00:36:66:e4:b5:1b:1c:ec:b4:ef:1a:a0:
         cc:b9:30:7a:40:31:44:cc:bb:5c:75:99:76:21:ad:cc:fc:7e:
         54:2c:be:a8:e7:d3:15:43:e5:3e:48:a5:3f:a4:05:f9:b9:c5:
         d5:32:1a:fb:36:cc:7b:e7:3c:e7:1f:1d:7d:32:1b:fe:87:ac:
         ab:83:18:e3:f9:41:82:dd:37:f5:06:7e:74:d2:fe:d8:26:07:
         e4:31:43:47:51:8f:73:d3:de:aa:af:59:43:a5:8f:01:37:81:
         25:5e:1e:e4:bb:39:13:0a:64:ab:6a:59:91:32:15:70:05:d1:
         46:79:9e:39:bf:07:8c:6f:f4:2e:88:64:e1:b6:d9:0c:2a:fe:
         eb:30:ec:59:39:2f:91:22:f2:f3:ab:eb:25:9c:aa:c1:84:6b:
         71:fb:15:3e:22:54:21:e7:8e:38:5a:05:86:c4:ed:0a:5c:56:
         4c:bb:fe:2c:8b:49:d9:a3:f9:13:ca:c0:8f:14:80:db:2b:df:
         ad:7d:fc:21:84:9e:51:35:67:fc:56:66:ee:9a:ad:b8:e1:67:
         53:49:99:d5:8f:f3:b2:fa:13:37:ae:a3:53:a8:14:cc:05:58:
         0e:aa:49:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:32:48 2025 by rpki-client