Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/f48fe64b-2f72-3d9d-bde2-5ce30f1dfcc6.roa
File:                     f48fe64b-2f72-3d9d-bde2-5ce30f1dfcc6.roa (raw, json)
Hash identifier:          5b253GcC7tmgtD+GHV0hDTHYqGGNfPuBvXKfYoAbwp0=
Subject key identifier:   9C:87:55:48:7A:2F:3F:B9:2B:D4:C8:A5:BD:8B:60:C4:98:14:E9:5F
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F4328584A5B95AC2D9CF364B619E94300
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/f48fe64b-2f72-3d9d-bde2-5ce30f1dfcc6.roa
Signing time:             Mon 30 Jun 2025 01:00:50 +0000
ROA not before:           Mon 30 Jun 2025 01:00:50 +0000
ROA not after:            Sun 28 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        208.83.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5b:95:ac:2d:9c:f3:64:b6:19:e9:43:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Jun 30 01:00:50 2025 GMT
            Not After : Sep 28 01:00:50 2025 GMT
        Subject: CN=fb039a64-69db-41d5-bf6a-31c6a2acc8a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:18:fc:f0:c3:ab:95:ef:e4:cb:4b:45:20:6e:
                    76:2f:36:d4:3d:74:99:04:d1:d9:e5:10:07:ef:89:
                    ca:af:ff:36:ff:15:42:ef:2f:25:f6:e5:a7:44:e2:
                    50:9b:f1:f5:2d:e2:59:84:8a:a0:aa:c6:fd:b8:29:
                    6c:2d:f4:34:d2:8a:7c:d3:c3:44:68:1a:f2:e8:9c:
                    0c:a2:78:4f:fb:bf:7c:d5:6a:43:b8:87:c0:10:0c:
                    1e:20:95:55:72:8e:44:40:1c:f8:dc:ef:d0:8f:c4:
                    e4:d0:cb:c7:7d:de:a9:78:98:2e:27:b7:af:ca:27:
                    fa:77:da:8e:5d:cc:53:67:11:28:5d:8a:c4:de:ba:
                    58:d1:76:7f:53:1b:d8:32:aa:be:75:ea:9c:65:b9:
                    c8:0b:50:20:94:b9:bc:89:47:3c:9f:6f:7d:13:7e:
                    2e:37:96:92:b3:97:87:21:da:59:4f:bd:4e:31:6c:
                    68:59:92:c4:16:a8:52:e5:3e:1b:59:2f:89:fa:7c:
                    f4:b5:e4:ef:21:30:89:87:70:16:a9:f2:f1:39:f0:
                    49:b5:80:06:92:69:83:4a:a5:ac:e9:c0:27:e9:fa:
                    48:e6:e6:9f:de:79:98:0f:81:ec:ca:3c:93:ac:50:
                    b0:3a:97:1b:ed:d9:ce:99:7a:e2:41:78:f5:1f:b4:
                    3c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:87:55:48:7A:2F:3F:B9:2B:D4:C8:A5:BD:8B:60:C4:98:14:E9:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/f48fe64b-2f72-3d9d-bde2-5ce30f1dfcc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:72:1b:f2:8d:0c:66:c0:ac:ee:df:28:c4:2b:5e:32:ee:2d:
         1e:2b:9e:8b:97:c2:02:db:59:84:c8:bd:2c:84:57:ec:ae:45:
         b0:2a:aa:01:28:04:76:69:e5:91:a2:80:37:d4:01:15:24:ce:
         32:34:01:ed:cb:66:06:96:03:b5:04:1d:72:83:81:af:d4:d0:
         38:aa:e5:b8:18:da:17:8d:dd:2a:ad:af:fc:ea:cd:cc:03:12:
         b8:88:75:82:27:7e:84:0a:9b:0e:33:68:1e:96:71:08:80:bb:
         2c:02:dd:53:d0:0c:d0:a6:58:d0:16:11:57:89:3a:5d:60:28:
         c7:81:b5:78:c0:59:aa:ec:13:99:b0:b8:81:b9:6a:a0:54:f4:
         73:32:26:6c:bb:6c:11:f0:43:8e:14:e0:f9:1c:98:18:ec:a5:
         35:21:c6:86:33:e8:f0:f9:7a:c9:7c:6d:8c:5a:30:b7:c1:f1:
         13:14:70:39:95:fc:10:46:98:ac:b5:01:0a:cf:64:a8:8d:71:
         0e:62:98:de:e5:83:87:5c:44:73:03:62:6e:5b:ad:d2:9f:bc:
         15:fa:5f:54:fe:a8:65:c9:42:8f:ae:00:ed:c4:8c:3d:45:af:
         06:8c:2c:e4:64:72:39:d0:a2:76:24:85:dd:30:27:8e:66:29:
         1f:5d:7e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 9 17:26:56 2025 by rpki-client