Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2f1d7154-3db1-3ef9-ba5d-e8a0a9144506.roa
File:                     2f1d7154-3db1-3ef9-ba5d-e8a0a9144506.roa (raw, json)
Hash identifier:          We0DHc82MnJ/KR54RQgDOb9DHe1lX6H/YVocBTKkmDU=
Subject key identifier:   07:84:37:2A:02:1E:AE:E2:85:D9:77:72:BA:6E:17:29:30:A2:72:C8
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584AF5214845F8018E0383A23380
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2f1d7154-3db1-3ef9-ba5d-e8a0a9144506.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     1742
IP address blocks:        199.94.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:48:45:f8:01:8e:03:83:a2:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=6d2171a3-709a-45f9-aa42-de9332fd34e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:dc:1d:37:89:9e:ee:19:4f:47:be:e4:5d:77:
                    2d:fa:00:c6:5f:57:b1:be:34:e9:81:ad:9c:4a:79:
                    6f:e7:25:6b:ae:59:ae:01:d7:12:ae:34:e3:15:01:
                    64:96:96:54:26:5b:4a:16:1c:15:9f:34:42:9b:75:
                    21:11:11:7a:fd:46:38:17:bf:0a:d5:40:05:2e:ce:
                    c3:dd:b9:0f:e5:85:90:6b:2e:47:55:f0:22:a8:1e:
                    57:df:bc:d5:c7:b5:ee:f3:36:6e:08:9d:9a:1b:be:
                    80:8c:f5:66:89:f1:68:cd:21:a3:cd:14:c3:8c:47:
                    de:1f:f0:3d:66:99:e9:39:68:31:8a:80:83:fa:6c:
                    55:85:2f:9c:8f:6d:b8:d4:33:21:7c:6f:f8:e6:d3:
                    c0:f5:41:e2:7b:5d:ec:b0:3f:98:ec:52:18:fe:2e:
                    6b:1d:e6:80:0d:ce:66:07:07:a1:e5:0a:f3:f4:d8:
                    b9:2a:d9:3e:88:a5:0e:b9:fa:eb:10:20:b6:d7:ad:
                    35:ae:6c:ed:e2:fd:44:f2:9e:86:91:77:34:1c:65:
                    03:10:01:4a:0d:87:9f:b6:82:d2:b0:b2:d3:f3:3e:
                    a3:c9:93:70:7a:06:42:af:8f:15:0a:5e:9d:79:0e:
                    cf:19:2b:f0:a0:e5:d0:de:cc:18:76:8b:88:1d:54:
                    1a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:84:37:2A:02:1E:AE:E2:85:D9:77:72:BA:6E:17:29:30:A2:72:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/2f1d7154-3db1-3ef9-ba5d-e8a0a9144506.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.94.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:57:79:40:33:ac:6f:5d:73:cb:bc:50:c5:e2:37:c6:22:4e:
         a1:86:60:a8:cb:42:4f:ed:d4:89:37:db:97:fe:df:8d:86:a5:
         7f:0b:b7:ce:d8:a5:10:4f:6a:c8:87:9d:f4:a6:36:82:6b:08:
         f2:55:48:aa:30:81:59:d3:5b:3b:23:7c:2e:80:6d:da:72:d1:
         4d:48:91:2a:e1:43:f6:e7:c2:2a:ba:ee:7d:5f:76:03:ac:87:
         d6:f5:4b:4a:09:b5:1e:32:c2:ce:54:2f:4c:aa:ca:e8:b2:d6:
         51:e8:38:2f:8b:99:e3:67:1a:20:c0:21:a1:55:cf:95:0e:1c:
         dc:d4:f7:b6:db:9e:1c:90:20:73:34:8a:33:a9:2b:f4:2f:d0:
         58:b3:c9:80:b8:e1:14:3d:b7:d9:92:31:e8:4b:75:17:57:b7:
         56:f4:6b:fe:a4:41:25:25:93:19:d7:52:d6:3f:92:0d:21:2e:
         43:57:02:31:9e:d7:3d:00:a8:92:1c:e2:c3:71:5d:53:37:05:
         da:88:4b:59:a0:0a:b4:3b:df:bc:1d:33:08:16:88:04:d9:b3:
         35:8c:7f:f7:85:d2:03:a8:50:de:7c:99:ed:a2:f3:23:43:5e:
         31:9e:f7:6c:35:70:7c:b6:98:8c:14:0f:a7:c5:37:f7:20:23:
         e6:97:d3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 00:16:17 2025 by rpki-client