Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/b9adabc2-fc08-39d4-aaca-584aaef77c91.roa
File:                     b9adabc2-fc08-39d4-aaca-584aaef77c91.roa (raw, json)
Hash identifier:          SeZve11ZGOjhojXMca+VWRmFgx+pgt4Pc1oMrVN4yEo=
Subject key identifier:   B9:D0:8B:BF:C8:7A:D4:36:A4:F5:5C:70:F8:00:FE:86:D0:E8:66:7E
Certificate issuer:       /CN=60af319e-0c74-40e2-b93c-daa51c45791e
Certificate serial:       010D0C9F4328584B1AD19178E8119871A87760C0
Authority key identifier: 11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/b9adabc2-fc08-39d4-aaca-584aaef77c91.roa
Signing time:             Sat 06 Sep 2025 13:00:41 +0000
ROA not before:           Sat 06 Sep 2025 13:00:41 +0000
ROA not after:            Fri 05 Dec 2025 14:00:41 +0000
asID:                     8018
IP address blocks:        172.82.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 19 Sep 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1a:d1:91:78:e8:11:98:71:a8:77:60:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60af319e-0c74-40e2-b93c-daa51c45791e
        Validity
            Not Before: Sep  6 13:00:41 2025 GMT
            Not After : Dec  5 14:00:41 2025 GMT
        Subject: CN=6bf4ecc0-214e-4ce4-a30a-f8645684ffaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:39:a9:a1:8f:e2:41:83:71:13:a8:53:c0:87:
                    39:bd:af:a5:cd:17:3c:45:99:ba:bc:3c:32:ee:44:
                    1f:dc:4f:f7:88:5c:28:6d:f4:41:d6:a8:5d:de:af:
                    25:68:e5:02:89:04:08:02:ad:df:33:ef:9c:5b:48:
                    07:ce:41:f0:cb:48:af:ca:ea:00:12:d9:c6:81:34:
                    ab:22:56:d8:59:3c:9d:74:bb:cd:a9:41:7c:82:77:
                    13:6a:b6:c6:7c:d8:ff:d8:57:7c:bd:d3:d5:eb:49:
                    9a:d5:60:d7:45:07:8c:87:b6:76:24:23:19:3e:ac:
                    cf:c9:80:a6:71:f5:52:eb:51:7e:a9:10:11:15:95:
                    2b:86:9a:61:d7:96:f5:4a:13:b8:00:fe:8d:54:32:
                    ea:0e:f5:f3:a7:49:52:f2:92:ed:56:10:aa:9e:f4:
                    80:4a:5e:49:ed:27:f3:16:be:09:f2:8c:95:2d:1b:
                    9b:8e:72:c4:e2:a6:c0:08:c7:26:37:ff:97:88:fd:
                    b4:40:64:82:94:e8:02:ce:74:82:0e:ad:fe:b5:07:
                    81:44:b1:3f:65:11:c0:9a:f8:03:02:06:56:f3:65:
                    21:60:2c:5b:26:14:db:ca:9c:49:fa:87:9c:c7:6d:
                    95:5c:70:72:2c:2b:a1:6e:8e:d8:ff:5c:89:f4:2f:
                    5b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D0:8B:BF:C8:7A:D4:36:A4:F5:5C:70:F8:00:FE:86:D0:E8:66:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/b9adabc2-fc08-39d4-aaca-584aaef77c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e/60af319e-0c74-40e2-b93c-daa51c45791e.crl

            X509v3 Authority Key Identifier:
                keyid:11:7A:F7:77:29:9D:64:9C:CE:9C:56:4A:81:6C:42:D9:C9:5F:B3:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/60af319e-0c74-40e2-b93c-daa51c45791e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:d3:4b:65:e3:f7:53:d2:c8:44:a8:f9:f8:18:81:4a:ee:da:
         81:6d:ad:ad:49:cb:97:10:4a:65:c4:b8:a7:fc:19:6b:fa:0f:
         64:d8:fe:04:f9:b8:db:e8:68:3e:08:52:bf:bd:ed:b6:f8:07:
         7a:66:01:3a:89:a0:8c:03:1c:e1:cd:ae:8d:80:de:51:d8:6f:
         b3:6e:00:19:c1:29:4a:ed:5a:a3:d5:4c:05:67:5b:78:48:a2:
         0a:89:46:94:89:a6:24:3b:06:60:bf:91:99:41:2e:5b:6e:b9:
         4f:0e:d9:f9:ad:5b:74:ca:ef:c3:27:d6:69:f9:59:38:4c:16:
         a7:20:6d:1c:21:78:56:5e:4c:51:81:fa:8a:cf:bb:63:3f:83:
         a9:3a:18:97:45:85:b5:95:15:c0:c1:70:f9:4b:a1:ce:25:51:
         d6:2d:a3:bb:2a:9d:06:dc:cb:0d:0a:d7:4c:22:f3:94:de:24:
         46:47:91:fb:4c:17:0a:45:32:71:24:0a:bf:c8:90:15:23:11:
         88:a5:22:20:01:96:98:9a:c7:cd:e2:0c:8d:ad:48:ae:52:e5:
         da:27:ab:e7:41:9a:87:0b:16:4a:ee:76:a7:49:4b:b7:40:30:
         00:cb:f0:b5:96:7a:3f:6a:38:52:f4:f1:55:71:b8:24:24:6e:
         62:61:8a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 15:36:47 2025 by rpki-client