Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/60f189cc-6325-30c7-b494-18d58e826679.roa
File:                     60f189cc-6325-30c7-b494-18d58e826679.roa (raw, json)
Hash identifier:          OQ1XOnkRYrIjtVJrMCUnpAfxgHdQoEL7wSGk6GFdaU8=
Subject key identifier:   98:A4:E3:89:37:7B:D0:5D:9D:7E:CF:FC:7F:1F:66:A5:CC:58:A0:A3
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F4328584B80B75528C71006C9B5C43F80
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/60f189cc-6325-30c7-b494-18d58e826679.roa
Signing time:             Mon 13 Oct 2025 01:00:29 +0000
ROA not before:           Mon 13 Oct 2025 01:00:29 +0000
ROA not after:            Sun 11 Jan 2026 02:00:29 +0000
asID:                     6994
IP address blocks:        64.201.240.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:80:b7:55:28:c7:10:06:c9:b5:c4:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Oct 13 01:00:29 2025 GMT
            Not After : Jan 11 02:00:29 2026 GMT
        Subject: CN=cf094b80-d529-453a-9068-1283f498deff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:06:ca:e5:47:ff:73:a2:54:5b:d0:61:f8:29:
                    28:9f:66:b4:e0:dc:79:c9:e8:82:23:c3:11:cc:cb:
                    89:8f:83:66:eb:a8:ac:03:22:82:4f:f0:b9:9a:68:
                    f8:b2:85:97:61:2b:94:32:eb:9b:fc:2b:0b:b5:21:
                    a3:44:dd:94:b3:dc:22:10:60:19:27:40:af:36:a4:
                    79:9b:05:8d:ae:4c:35:47:ad:6e:c0:4f:e4:68:0c:
                    0d:af:31:8a:6b:81:f7:49:2e:62:5d:ea:21:e2:dc:
                    a5:90:9f:81:95:88:23:64:49:5a:83:ff:82:47:9f:
                    f4:19:55:c4:b8:3a:89:b5:f6:88:58:77:b0:b4:4b:
                    20:8f:1d:bd:78:38:a7:b7:cb:51:21:57:b9:e5:b2:
                    6a:42:bb:f4:eb:24:36:61:25:28:55:30:be:ba:db:
                    ba:2d:b4:43:ac:25:77:a2:39:21:bb:89:b0:c9:31:
                    3a:92:ca:d3:9a:9b:67:71:f3:64:28:33:bd:d9:ed:
                    e8:b5:fb:3e:a2:c1:70:d6:a5:c1:9d:5e:04:ee:a2:
                    5c:1d:fd:0a:07:d0:cd:97:04:1e:ae:38:7a:19:62:
                    77:a6:73:ee:4f:c9:0e:3d:02:03:d2:45:8c:75:1d:
                    ea:14:23:d7:0c:4d:00:35:08:de:45:38:0c:7e:a8:
                    fb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:A4:E3:89:37:7B:D0:5D:9D:7E:CF:FC:7F:1F:66:A5:CC:58:A0:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/60f189cc-6325-30c7-b494-18d58e826679.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.201.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:85:f5:45:54:07:aa:be:ee:f1:d9:2e:54:80:2a:e2:c0:71:
         ee:01:3d:72:a3:ba:91:0e:5d:d3:cb:8e:06:63:ac:f9:a9:93:
         a1:e8:04:8b:8f:b4:06:7e:3c:7e:c3:88:fa:b8:d9:fc:54:1c:
         82:a6:01:a8:77:d2:08:3a:63:b4:73:22:1e:11:4d:b4:bd:d3:
         0a:2a:16:7a:46:d7:65:4b:0c:1b:23:40:08:47:80:2e:24:42:
         91:a6:46:c5:67:05:2d:9c:5d:8a:4e:63:3a:b9:06:9c:75:88:
         f1:cb:5e:d6:01:21:65:0b:d7:e6:ec:8c:6f:a0:b5:6c:1d:1c:
         25:d7:ab:ec:5d:69:61:44:32:6d:78:a1:48:04:09:ae:69:fc:
         c4:be:4a:31:c4:1a:7d:72:4b:02:91:3f:4f:f2:d5:d0:5f:6e:
         10:15:b7:23:b8:8b:d8:72:8d:c1:a3:47:f3:e5:a4:3f:e1:49:
         1d:31:c4:ad:90:0e:d4:5e:8a:7c:50:a0:21:47:a6:3f:fd:42:
         4b:f2:2c:6f:95:6b:fe:55:b0:cf:f2:79:76:d5:97:16:a1:07:
         11:e8:8b:dd:3c:58:cc:a3:16:c9:31:29:be:eb:6f:01:8d:66:
         78:1f:18:6c:f2:3a:b6:d2:ca:93:f3:39:f6:35:79:d9:a2:e6:
         f0:32:ec:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:05:55 2025 by rpki-client