Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fca9e42-1910-3931-9b42-2db782e4c86a.roa
File:                     2fca9e42-1910-3931-9b42-2db782e4c86a.roa (raw, json)
Hash identifier:          DyVaT3EcgZe4QUrbZGR1+mpA04+otYQfex0WOhMCNr0=
Subject key identifier:   EA:80:37:69:DD:40:38:B8:39:CB:4C:29:B5:06:60:54:F4:30:03:2E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584AECC15F74BCEEF66C7FF89E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fca9e42-1910-3931-9b42-2db782e4c86a.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     33660
IP address blocks:        71.199.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:5f:74:bc:ee:f6:6c:7f:f8:9e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=d80798d7-cbc6-4e4c-b009-3f68d3e34512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b2:ea:99:5d:f4:1c:3d:ad:a8:dc:26:ed:90:
                    23:62:10:01:5c:95:50:2c:56:1f:23:a1:73:71:c3:
                    2e:54:ba:d0:48:c1:be:02:6b:d8:8c:70:86:30:bf:
                    5b:94:e4:94:e1:70:b1:21:a2:99:1a:d7:7b:85:62:
                    79:19:5e:97:17:a4:87:60:65:b1:9d:5d:eb:ac:da:
                    b1:1f:14:ab:16:04:2c:88:54:9c:0e:d0:b5:6a:63:
                    bb:7f:88:b3:39:c7:38:03:c7:ca:e9:b6:d0:d1:16:
                    4c:58:06:bc:5c:a5:10:bb:f3:4b:40:90:ae:e4:76:
                    08:db:9d:19:bb:c4:89:3b:4c:30:ca:ca:9d:1e:a2:
                    7d:a5:a8:93:ac:c6:54:1d:60:6c:fd:0a:d3:c4:e7:
                    1a:69:51:40:19:39:c1:0d:92:11:c5:8a:1b:3b:2e:
                    b0:b0:d2:1f:0a:00:09:be:d8:ec:b4:c9:77:5a:41:
                    9e:fc:57:2b:a1:ca:fb:50:0c:99:5a:c5:ae:c7:f4:
                    ff:08:67:17:b1:a7:ca:d5:a4:02:fb:c9:48:97:dc:
                    a0:86:33:70:d5:36:cc:85:16:67:de:05:f5:d2:af:
                    ea:16:74:7f:ab:2f:9c:0b:af:ff:5a:10:fb:30:a5:
                    77:0e:18:db:9a:38:40:5b:51:8f:38:ae:e0:87:a9:
                    71:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:80:37:69:DD:40:38:B8:39:CB:4C:29:B5:06:60:54:F4:30:03:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2fca9e42-1910-3931-9b42-2db782e4c86a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.199.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:38:29:4c:b1:43:2d:3b:c3:a8:3d:99:56:ea:fb:ce:9d:18:
         a7:d3:dd:17:cb:f1:41:52:b2:ba:6c:71:99:24:92:40:f9:b0:
         49:7c:d7:aa:5b:fa:a4:c6:c9:09:85:b5:8d:2a:03:65:bb:18:
         16:f4:45:50:cf:e8:1e:29:69:12:35:bd:bc:77:5f:76:1c:40:
         15:f3:69:13:78:e1:08:ed:c7:36:ac:10:0f:90:03:3b:3a:31:
         2b:74:2e:22:8d:02:5b:50:03:25:a5:e0:cf:5f:ce:bf:33:3e:
         d3:d9:ec:52:21:a1:6f:43:81:49:68:e5:54:36:68:85:24:7b:
         4c:3f:c8:89:72:e6:72:5b:fd:2d:a6:a3:82:47:5a:20:75:c6:
         d3:f0:0c:f4:57:be:ed:15:64:48:b9:4b:16:86:4a:66:90:de:
         41:40:16:26:f1:c7:42:19:38:be:61:d4:31:87:98:a1:b6:ed:
         29:64:c1:ff:8d:81:4c:53:a5:3e:9a:9e:4b:59:ff:f7:d1:91:
         53:a4:9b:83:65:52:7c:39:9b:78:25:1a:ef:aa:f3:9d:f8:fa:
         b9:88:dd:de:20:7e:62:2c:95:0f:ab:38:97:69:23:58:58:14:
         27:b6:47:7a:7a:a8:03:3b:58:29:b8:3b:4b:78:62:73:48:43:
         15:66:f5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:31:57 2025 by rpki-client