Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/81aa012f-28a9-395d-8dc8-8ff9a31db9e3.roa
File:                     81aa012f-28a9-395d-8dc8-8ff9a31db9e3.roa (raw, json)
Hash identifier:          goF06SuQCrJ2bA2bb/A3K6cx+bgF6ZJf5LqIbDkfzmo=
Subject key identifier:   B5:F2:08:D8:BC:72:7F:62:4A:6A:DA:CC:FF:8F:45:F7:4B:CB:F3:0C
Certificate issuer:       /CN=60af319e-0c74-40e2-b93c-daa51c45791e
Certificate serial:       010D0C9F4328584B1AD19164D95188AAF0EE9580
Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/81aa012f-28a9-395d-8dc8-8ff9a31db9e3.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     8018
IP address blocks:        162.251.169.0/24 maxlen: 24
                          162.251.170.0/24 maxlen: 24
                          162.251.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:91:64:d9:51:88:aa:f0:ee:95:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=a3efe42f-3d4e-4935-86c2-2493392ee76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:24:4c:44:f7:df:3f:65:84:fd:7a:a2:c1:e9:
                    c8:a6:06:7b:26:43:1f:a0:4e:48:36:a2:c6:a4:12:
                    c1:ae:b1:a4:f4:7c:65:43:fe:94:4d:b3:03:88:3a:
                    b3:7c:dc:10:28:85:ae:c1:b3:88:8e:0b:46:d5:48:
                    6a:13:98:d6:01:02:49:e4:61:db:92:fd:24:1c:52:
                    cf:aa:04:33:db:05:7a:89:b5:34:4d:ee:48:bf:ac:
                    fc:b3:46:65:57:dd:3f:9b:8f:27:e2:eb:94:cb:b0:
                    4c:b0:ea:7a:05:31:23:e6:10:e1:40:14:01:3e:fb:
                    79:9f:74:b6:e9:3f:91:81:f1:7e:b9:c0:44:f3:2a:
                    6b:ee:0c:a5:8f:85:9f:9e:96:67:e9:7e:f0:6a:29:
                    17:75:e0:3b:d0:9a:38:7c:09:2f:b2:f8:37:6a:8c:
                    98:6a:1c:b5:2c:ad:a7:93:be:48:ff:e6:8f:9c:cc:
                    ea:22:f2:1b:eb:73:e0:00:75:06:66:98:ff:92:54:
                    e6:bc:e5:fb:a6:c1:77:c0:e1:c6:c4:db:e3:76:2c:
                    d5:90:60:6d:cf:2d:ca:94:9b:06:6b:b2:03:60:94:
                    87:44:c0:f6:74:79:26:43:71:b4:f9:6b:3b:df:b5:
                    6a:81:75:f4:87:1a:0c:f3:a9:72:a0:ff:f3:bc:11:
                    9c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:F2:08:D8:BC:72:7F:62:4A:6A:DA:CC:FF:8F:45:F7:4B:CB:F3:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/81aa012f-28a9-395d-8dc8-8ff9a31db9e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl

            X509v3 Authority Key Identifier:
                keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.251.169.0-162.251.171.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:96:9f:c1:71:3c:10:2d:8a:48:00:fb:e9:94:af:d4:d9:ba:
         e9:35:43:fd:9c:b7:5b:ea:fe:bc:14:e0:91:b4:92:2e:31:66:
         71:b8:cc:b6:59:37:2f:d3:69:c5:40:6a:84:7d:53:5d:7b:d1:
         4e:8b:2f:34:c4:07:a2:c4:ec:f2:f3:2a:85:40:eb:92:bb:70:
         4c:b7:59:ce:ff:ce:d1:79:00:b0:f4:23:a3:d7:da:02:0a:e4:
         49:a7:9a:f9:34:ea:79:40:9a:7f:c5:90:d2:5f:d2:0d:12:b2:
         78:98:31:b5:65:9d:a6:2e:b5:ae:e3:b9:a0:88:4b:3d:44:70:
         f3:b8:b7:7c:bd:1f:1d:35:dd:97:b7:71:cd:b3:86:70:1c:d3:
         cf:bc:04:36:ff:33:38:7c:22:2e:89:61:6f:1d:62:e9:3b:27:
         a6:cd:0d:a4:7f:75:c8:1b:09:60:af:46:91:4d:e0:b1:fb:b8:
         c7:72:2b:5b:70:cd:f5:9c:6b:21:af:6d:f0:3a:e9:eb:81:9a:
         16:81:e6:c7:ed:87:17:54:dc:97:7b:7a:6f:1e:3d:c1:10:0b:
         73:2c:fd:ec:4a:0a:59:51:16:ee:a1:b8:89:0c:e0:36:4a:6b:
         da:75:55:0e:d5:d6:4f:36:26:af:90:cf:b1:c3:39:07:81:0e:
         4e:01:ff:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:57:40 2025 by rpki-client