Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/a577f700-7717-3ca8-a375-ae22682b18ed.roa
File:                     a577f700-7717-3ca8-a375-ae22682b18ed.roa (raw, json)
Hash identifier:          ayQZNAIyKyta3Azh6h352voWn1din1Y1CqPcGdo/4dc=
Subject key identifier:   7D:83:7B:43:B8:EF:22:F6:EA:72:46:60:1F:C5:24:70:E8:23:69:2D
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584B3C51B490A766D13C80A6F280
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/a577f700-7717-3ca8-a375-ae22682b18ed.roa
Signing time:             Thu 18 Sep 2025 13:00:41 +0000
ROA not before:           Thu 18 Sep 2025 13:00:41 +0000
ROA not after:            Wed 17 Dec 2025 14:00:41 +0000
asID:                     23280
IP address blocks:        208.83.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3c:51:b4:90:a7:66:d1:3c:80:a6:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Sep 18 13:00:41 2025 GMT
            Not After : Dec 17 14:00:41 2025 GMT
        Subject: CN=86b7ef99-5a06-4c67-8141-507f5ecb2dd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c2:3e:70:de:9f:53:93:30:77:4f:07:af:8b:
                    e6:64:02:53:8f:62:8c:85:eb:cb:84:6c:95:0b:56:
                    be:62:f1:89:cf:19:c0:39:97:a8:e0:e4:97:9c:cc:
                    05:f8:25:30:24:53:ec:01:70:d4:55:11:0b:19:65:
                    7f:9b:ce:f5:02:e9:c9:a8:14:a3:a2:65:74:e3:f5:
                    5a:dc:26:18:da:ea:77:3b:b4:32:24:3b:ad:27:31:
                    da:a5:88:69:71:4f:60:9c:58:af:7f:b0:af:5c:59:
                    dd:ea:1e:4c:8b:7b:10:f2:c8:64:22:67:5d:55:31:
                    6e:a7:ca:33:3e:38:ac:bc:ae:5b:fb:dc:6b:f7:88:
                    1f:70:2d:9b:b7:1c:15:ea:06:4e:d7:f3:9a:98:19:
                    5b:97:e3:54:9e:db:f0:f1:93:a4:92:46:d2:f8:4b:
                    22:e4:49:c7:de:71:58:02:7d:d4:cc:a9:a0:29:04:
                    e6:80:b7:1e:83:da:ea:ea:d4:ee:9d:8c:75:a0:11:
                    6b:f3:b4:59:f3:3c:82:9d:3f:0f:51:86:46:67:bc:
                    c7:3b:ad:29:ac:9b:e1:97:68:25:71:30:25:ac:19:
                    a5:74:fd:f2:1a:1a:f4:5b:16:75:c2:16:41:17:d0:
                    0d:52:3d:05:d4:64:70:e8:04:1d:35:9b:81:bd:e4:
                    97:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:83:7B:43:B8:EF:22:F6:EA:72:46:60:1F:C5:24:70:E8:23:69:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/a577f700-7717-3ca8-a375-ae22682b18ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:51:c4:41:93:8f:0e:55:b1:f7:0d:60:64:8d:7b:a8:48:84:
         00:41:3e:69:68:64:7f:42:c7:0c:25:2e:0c:2c:96:61:1f:01:
         7d:e9:53:36:0c:3b:46:26:e2:5c:ed:fa:70:53:db:aa:fc:53:
         c7:29:6f:58:d2:08:4b:5f:35:17:05:75:74:81:8c:89:6d:22:
         20:fc:d5:f2:d5:e2:38:ce:5b:c7:66:1a:ca:99:dc:9d:10:b0:
         74:32:88:2a:da:83:3a:ca:0a:9d:82:9c:fb:4b:d4:93:8f:ed:
         cf:32:42:40:9e:cb:aa:7e:26:b6:af:9a:00:27:e3:b6:07:22:
         30:60:c4:06:b7:6a:d5:33:9a:6e:22:0e:89:fa:c4:93:ea:ee:
         16:d1:10:c5:04:33:d3:b8:ea:bf:67:46:0d:e9:dd:f2:61:43:
         45:9d:f2:5e:54:3c:f2:ee:d9:d8:7c:0f:74:13:26:39:5c:82:
         07:03:1b:6d:6a:52:19:5b:8c:42:3f:cc:2f:6b:f1:2d:ed:75:
         dc:ba:ec:b8:a6:c5:c6:bf:af:ea:23:f2:27:65:58:d7:0b:a4:
         dd:0a:ec:86:ec:44:01:1b:94:0e:2b:98:99:24:bc:d2:85:15:
         12:9f:30:77:64:75:11:ca:e3:69:26:e2:7a:16:c5:a2:be:a4:
         52:4a:ac:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 00:00:29 2025 by rpki-client