Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/98a04760-96c2-30fa-a4d0-fd2e850ed79e.roa
File:                     98a04760-96c2-30fa-a4d0-fd2e850ed79e.roa (raw, json)
Hash identifier:          8m4X0cHpm2QZty5S8Fwn3xpu0tQvwS+o2ZIL3oz0IUA=
Subject key identifier:   17:74:A2:7C:8B:36:E1:3E:7D:CC:BF:6B:64:01:DF:21:28:87:66:B6
Certificate issuer:       /CN=1e6b1e4c-be11-4e48-a0ee-190ac58209a6
Certificate serial:       010D0C9F4328584B35570A8518E6E66EDB578200
Authority key identifier: D0:82:5E:7A:13:B9:A3:5F:2A:3B:B6:C3:D7:42:91:8D:C4:EB:3D:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/98a04760-96c2-30fa-a4d0-fd2e850ed79e.roa
Signing time:             Tue 16 Sep 2025 01:00:33 +0000
ROA not before:           Tue 16 Sep 2025 01:00:33 +0000
ROA not after:            Mon 15 Dec 2025 02:00:33 +0000
asID:                     20454
IP address blocks:        206.168.60.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:57:0a:85:18:e6:e6:6e:db:57:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e6b1e4c-be11-4e48-a0ee-190ac58209a6
        Validity
            Not Before: Sep 16 01:00:33 2025 GMT
            Not After : Dec 15 02:00:33 2025 GMT
        Subject: CN=f1acedc2-87e7-4f0b-a36a-b0d385a33864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d2:56:d1:f5:fb:49:c7:44:7d:1a:42:98:5c:
                    ea:1b:ac:bb:85:db:06:0e:04:19:92:29:8b:53:d0:
                    39:48:03:57:dd:9a:a4:65:e3:da:6a:e6:af:b3:e9:
                    21:2a:81:b5:c0:5d:61:c9:1a:f8:97:bc:d5:46:c0:
                    04:35:fa:98:8c:3f:2b:6c:c7:59:f0:38:bc:78:5a:
                    0c:cb:d6:6e:9e:85:4a:33:d0:f1:53:c2:1b:d2:65:
                    01:f8:6d:c2:2e:41:2e:d9:6d:dd:1a:3c:55:21:fe:
                    d1:83:45:d0:9f:a7:59:8c:19:d0:58:c2:0b:9c:4f:
                    94:0c:e4:d3:6b:95:8c:2d:a1:4d:23:f2:33:b1:00:
                    6d:9c:23:75:eb:54:e9:ad:29:12:a8:25:a5:a1:94:
                    ed:bf:c5:f0:8a:ea:29:2e:bb:55:69:44:e4:fb:c1:
                    f7:82:20:1a:c1:13:1a:ad:ea:e3:3c:be:e6:77:b3:
                    8c:82:34:e6:99:aa:d4:fb:6d:0f:f9:58:43:9d:dc:
                    21:30:f9:35:30:7f:ad:ac:e3:ad:f5:6d:a0:22:a7:
                    f6:9e:fc:bb:b8:35:8d:68:36:5a:54:6f:69:1f:51:
                    50:15:37:1e:bc:fc:04:2b:65:ce:3c:59:78:90:1d:
                    aa:32:04:b4:88:9e:c1:6d:6a:63:91:32:d1:c5:27:
                    59:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:74:A2:7C:8B:36:E1:3E:7D:CC:BF:6B:64:01:DF:21:28:87:66:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/98a04760-96c2-30fa-a4d0-fd2e850ed79e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.crl

            X509v3 Authority Key Identifier:
                keyid:D0:82:5E:7A:13:B9:A3:5F:2A:3B:B6:C3:D7:42:91:8D:C4:EB:3D:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1e6b1e4c-be11-4e48-a0ee-190ac58209a6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:bb:19:29:7b:26:84:1a:69:64:58:0a:6d:98:a4:79:3b:a0:
         4d:b7:f9:41:f8:33:7a:08:8f:61:f5:5a:3d:39:4e:c0:cc:ac:
         35:6a:7d:88:bc:66:1d:9a:72:7a:b3:5a:fa:aa:20:b5:de:61:
         b6:fa:92:7b:e8:21:d9:cd:05:6e:6c:6c:2e:df:29:bd:f7:e5:
         77:4f:33:2a:27:ef:c8:dc:29:bd:3a:61:26:d5:9d:e8:9c:07:
         7f:38:b5:25:8a:db:3a:fc:77:ba:12:1a:b9:f2:15:fa:a6:de:
         2c:3a:e3:c1:ce:ce:ed:78:47:a9:9f:d9:e6:36:5b:ba:b0:f3:
         11:a3:f7:2f:9c:ec:1c:25:08:d6:e2:5e:cc:5c:3e:0c:e6:61:
         9d:55:ee:d6:d6:f0:e1:c5:2d:be:af:36:6f:e4:74:b3:0a:78:
         eb:e3:6e:19:e0:c9:fa:40:d5:67:1c:17:a9:c9:83:d9:94:b9:
         9c:bf:95:4e:0c:cd:1a:d5:41:db:2b:dc:b8:48:68:b0:47:53:
         ab:7a:d9:60:2a:79:59:58:1b:9c:17:12:64:da:18:e9:62:53:
         82:8f:2b:d1:70:9d:1d:85:6a:eb:c8:18:50:36:84:8d:fa:ad:
         b0:35:08:46:ff:ad:87:87:ea:6f:85:3a:e0:7f:1f:7c:ab:8e:
         3f:d0:65:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:49:50 2025 by rpki-client