Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/60e73e07-f4ae-3c71-9e25-99a3e612e843.roa
File:                     60e73e07-f4ae-3c71-9e25-99a3e612e843.roa (raw, json)
Hash identifier:          jwpVrLXDF6DqCTdLrOHYusOjEoxkSnhQr7Qrfq7Mvug=
Subject key identifier:   FB:52:75:69:EE:E3:6C:A7:95:99:7E:5C:5D:B6:0D:82:24:23:B8:C4
Certificate issuer:       /CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f
Certificate serial:       010D0C9F4328584B0746C222B258D25C7CE90E40
Authority key identifier: 67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/60e73e07-f4ae-3c71-9e25-99a3e612e843.roa
Signing time:             Sat 30 Aug 2025 13:00:42 +0000
ROA not before:           Sat 30 Aug 2025 13:00:42 +0000
ROA not after:            Fri 28 Nov 2025 14:00:42 +0000
asID:                     16509
IP address blocks:        199.233.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:07:46:c2:22:b2:58:d2:5c:7c:e9:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc90ca9e-6412-4bd6-8621-eeaf44930b1f
        Validity
            Not Before: Aug 30 13:00:42 2025 GMT
            Not After : Nov 28 14:00:42 2025 GMT
        Subject: CN=f27bb0ba-4018-412b-b3a5-7d1fc3afa072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:56:c5:2d:b7:3d:c7:63:8d:a1:a8:23:fe:
                    f0:e1:e6:72:35:20:d4:b0:86:63:6c:c5:8b:af:71:
                    70:dd:d9:e9:49:91:82:16:3b:42:13:4b:78:18:a5:
                    1d:9a:23:34:e8:a6:64:77:7d:ae:6a:7e:48:cb:51:
                    bc:a8:cb:79:a6:fa:0a:71:77:17:62:12:0f:c5:9e:
                    38:11:a2:e1:e1:21:3d:71:63:cd:f3:82:2a:c8:09:
                    b7:14:6f:ae:42:55:3b:64:a6:b3:64:ce:4a:50:d1:
                    44:0e:e3:cc:a3:f4:37:7f:48:04:67:e5:8f:f4:02:
                    11:9c:e6:67:5c:a9:e1:94:6d:99:bc:ca:4c:67:c0:
                    f2:36:12:84:70:b2:52:0a:35:a6:ea:93:09:bf:f8:
                    26:b1:f6:d3:36:ec:15:df:39:61:3a:c3:8e:99:9f:
                    f9:41:d1:b8:51:72:68:df:6b:61:96:a1:ad:1d:e4:
                    2e:1e:e4:77:32:9e:fd:43:30:e1:d7:ca:62:bd:df:
                    65:c2:87:5a:0e:69:cc:b7:48:00:f5:6e:39:13:62:
                    2a:1c:10:79:1d:b4:59:64:b3:9d:65:c2:5e:21:40:
                    c1:65:03:74:c5:ea:41:a7:a8:2a:c7:0d:36:21:06:
                    a5:8e:5d:eb:ba:36:ff:ef:97:a3:87:62:9d:4c:e8:
                    07:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:52:75:69:EE:E3:6C:A7:95:99:7E:5C:5D:B6:0D:82:24:23:B8:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/60e73e07-f4ae-3c71-9e25-99a3e612e843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.crl

            X509v3 Authority Key Identifier:
                keyid:67:58:20:6F:26:16:0E:17:5E:16:42:F0:93:FF:27:C8:4E:B7:89:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/bc90ca9e-6412-4bd6-8621-eeaf44930b1f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.233.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:6e:b6:95:97:a2:df:49:3b:6f:ab:0b:67:25:81:30:8c:5e:
         bc:f9:a1:62:94:4f:66:0e:57:f0:20:c7:e5:1a:f8:cd:f2:69:
         23:fa:d8:98:e9:c1:fa:d3:ad:3c:70:c8:43:ae:72:16:f8:2b:
         48:6b:73:6d:2e:51:b9:1e:bf:1e:54:24:18:21:64:db:14:de:
         e0:2a:47:be:af:d8:2f:74:a6:8c:64:9b:d3:44:d9:92:db:1d:
         65:65:4e:70:87:da:63:4e:38:8f:71:f2:46:ed:7f:78:c4:52:
         ad:2e:84:53:b7:af:8a:0f:eb:b2:5c:a7:c6:0d:29:1f:02:7b:
         da:72:1b:93:5e:6f:83:15:1a:a5:1c:aa:70:c3:72:df:e6:83:
         9e:35:0d:84:89:4e:12:0a:1e:0b:c7:b1:85:0d:26:e6:ff:e2:
         20:f4:e7:c6:d2:bb:51:55:ca:7a:5d:0a:07:cb:07:93:d0:84:
         19:92:88:53:ad:56:d0:85:d0:3a:74:10:3f:d5:b3:dc:e0:ac:
         65:99:07:db:41:71:94:ed:d4:6e:85:e5:97:07:e8:8e:a0:88:
         ad:d8:ab:4f:86:dc:ce:1d:04:0f:a4:70:4a:4f:34:ca:45:09:
         e3:f8:9d:40:71:24:1d:b6:ed:dd:9d:bd:b1:39:2f:d1:41:ae:
         dd:00:2d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 02:28:53 2025 by rpki-client