Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/60bec10b-da12-3d94-aa7d-77d6d985bbcc.roa
File:                     60bec10b-da12-3d94-aa7d-77d6d985bbcc.roa (raw, json)
Hash identifier:          Asoy9behzvjYgG/AuXWBIWdolU+TxEtb5yrKm819QDM=
Subject key identifier:   EA:E3:C0:EB:0D:21:03:3D:4C:B7:1D:8F:89:BF:A1:EC:32:A7:6E:C2
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584B13D6E1A08009C7F3F0B3CBC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/60bec10b-da12-3d94-aa7d-77d6d985bbcc.roa
Signing time:             Thu 04 Sep 2025 01:00:33 +0000
ROA not before:           Thu 04 Sep 2025 01:00:33 +0000
ROA not after:            Wed 03 Dec 2025 02:00:33 +0000
asID:                     54113
IP address blocks:        172.111.73.192/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:13:d6:e1:a0:80:09:c7:f3:f0:b3:cb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Sep  4 01:00:33 2025 GMT
            Not After : Dec  3 02:00:33 2025 GMT
        Subject: CN=625e12f8-ec46-48e6-8230-b783ad05d81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f9:ca:72:45:9d:d5:bb:35:3e:26:3e:02:55:
                    43:d0:98:71:1e:52:13:83:25:fa:26:b3:0f:d6:0c:
                    7b:87:48:01:26:5b:8c:fe:53:e6:03:64:5e:60:05:
                    46:fc:f5:f4:e0:96:1f:48:fd:77:c8:d0:00:52:58:
                    9c:c9:38:4f:9d:bc:6a:39:3f:bd:17:40:89:18:3c:
                    3c:c5:8f:8d:1b:af:00:bf:0b:8f:21:1f:38:13:3f:
                    10:0d:22:57:a9:36:85:de:5f:e6:ce:66:ef:4d:c3:
                    14:6b:52:0f:2c:25:2f:a4:55:46:92:68:fb:92:a9:
                    89:c7:49:4e:92:eb:5d:e3:7d:59:6a:80:3b:5a:22:
                    95:e6:e0:87:4c:51:cf:5a:bf:66:43:31:a1:49:64:
                    96:7a:73:94:b3:88:ea:ae:e4:6e:be:93:6d:b1:0a:
                    7a:d0:12:2b:9f:53:43:78:82:73:6b:59:5e:5d:29:
                    b4:ad:77:e9:c4:3e:4f:98:07:6b:86:44:a1:65:c9:
                    f0:15:81:49:82:c6:5b:ac:67:50:57:2e:fd:0f:07:
                    81:2a:19:f3:37:d1:d7:b0:b3:f8:2a:71:3e:a4:63:
                    11:70:5b:09:b2:0c:c8:17:9e:35:4d:ae:5a:6b:0c:
                    ed:c8:e0:9f:7f:39:6d:fc:ce:75:cf:ff:fb:ed:93:
                    ab:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E3:C0:EB:0D:21:03:3D:4C:B7:1D:8F:89:BF:A1:EC:32:A7:6E:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/60bec10b-da12-3d94-aa7d-77d6d985bbcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.73.192/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:cc:21:4e:b3:74:5d:e7:68:bf:d7:68:10:78:f8:14:86:22:
         68:d2:76:7a:9b:f6:83:91:cf:6d:f7:60:e4:dd:da:74:a9:c2:
         72:8a:ef:04:ef:8d:37:be:50:01:4b:79:9d:9a:f0:c8:de:bb:
         54:e6:7e:d5:1b:24:f1:13:f6:c7:0a:5c:34:8d:07:cf:86:a3:
         d8:9f:63:df:d6:76:37:61:f7:da:ad:77:99:be:f8:72:0b:20:
         d4:bd:c1:3b:df:a2:2f:3f:ba:46:c0:76:86:40:97:9b:13:99:
         64:04:b4:a2:6e:3e:1b:45:7c:fa:99:14:cb:c0:76:d8:da:93:
         97:8b:98:4a:72:7b:5a:25:a4:89:6a:8a:93:de:ac:d9:16:e9:
         65:e7:cf:74:8c:0e:56:21:1d:d0:68:fc:d7:8e:2a:d8:fd:e5:
         6d:ad:ee:22:b6:75:88:25:ae:62:9c:8a:a8:ca:73:4d:4b:54:
         d2:5d:04:a7:54:24:de:2a:67:d9:ac:37:75:fc:1b:9c:34:dc:
         a7:0e:f6:d1:3f:27:06:2a:9b:59:f1:8f:ed:1e:37:02:d2:8c:
         44:51:f3:53:1c:e8:d3:91:0f:9f:29:0c:ca:2b:55:51:f3:54:
         a2:31:a7:d2:fa:55:79:61:04:b2:88:ee:59:74:7f:33:71:17:
         47:c1:0f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 05:46:06 2025 by rpki-client