Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/60022824-1bab-3813-aebc-f755a3e45a20.roa
File:                     60022824-1bab-3813-aebc-f755a3e45a20.roa (raw, json)
Hash identifier:          YRGE9ThjrZXfJcb+8bifH+NWhlbk15yAzAF2mlgKiCc=
Subject key identifier:   2B:60:2F:5E:CA:E9:07:65:B3:D3:03:CF:EA:2F:2B:D1:CE:D2:4D:B9
Certificate issuer:       /CN=41911571-6038-4a97-80ce-9611c78f050e
Certificate serial:       010D0C9F4328584B8EACF157CAE190E69BB58C00
Authority key identifier: DF:70:D5:B4:88:0A:71:C0:02:2C:D8:5B:C3:90:48:DE:FF:9B:53:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/60022824-1bab-3813-aebc-f755a3e45a20.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     46455
IP address blocks:        170.62.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/41911571-6038-4a97-80ce-9611c78f050e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/41911571-6038-4a97-80ce-9611c78f050e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:f1:57:ca:e1:90:e6:9b:b5:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41911571-6038-4a97-80ce-9611c78f050e
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=bb426d15-91b0-4a03-9ee2-a7f9996ef3d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ea:33:d9:d9:2c:7e:a1:66:b6:e6:1f:44:99:
                    8b:e3:c3:cd:c4:4a:ba:a5:95:f6:e8:6d:31:7c:0e:
                    a1:5a:81:bf:ac:32:2a:20:d7:70:7a:7b:f1:a9:a4:
                    d4:15:70:42:17:9b:84:f6:ec:d4:5c:dc:da:8c:d2:
                    db:43:df:9d:98:b7:31:6d:67:d7:de:30:f5:e8:1d:
                    78:61:56:41:17:08:d8:58:05:fd:78:a9:a6:ef:8b:
                    62:8f:0b:ee:ee:57:19:cb:61:11:8e:b3:8d:c3:ec:
                    8b:c6:aa:3a:38:a6:c8:9d:5d:cf:bd:d5:bb:67:d8:
                    c4:67:c3:ca:97:cd:71:b2:0f:db:94:14:44:a3:3a:
                    c5:ef:a5:47:b0:5e:b5:73:ec:60:64:d1:e3:9c:d2:
                    b6:7c:17:99:0e:fa:5e:0c:98:3a:c9:96:f4:a3:dc:
                    b5:0c:e0:01:6c:6f:e4:98:0b:aa:93:d7:02:10:db:
                    08:df:6f:a4:86:17:bc:f6:79:0e:0b:07:b1:6f:b8:
                    f8:6e:17:35:85:f1:c3:43:12:c2:9f:08:ba:8d:52:
                    26:ce:50:4a:a9:48:2f:6c:ad:a2:63:ed:59:4b:0f:
                    65:ee:54:84:52:0a:0b:e0:a4:f8:40:ab:52:2c:e8:
                    ec:56:61:30:5d:7a:f6:b5:4e:c3:bf:de:8f:14:40:
                    3d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:60:2F:5E:CA:E9:07:65:B3:D3:03:CF:EA:2F:2B:D1:CE:D2:4D:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/60022824-1bab-3813-aebc-f755a3e45a20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e/41911571-6038-4a97-80ce-9611c78f050e.crl

            X509v3 Authority Key Identifier:
                keyid:DF:70:D5:B4:88:0A:71:C0:02:2C:D8:5B:C3:90:48:DE:FF:9B:53:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/41911571-6038-4a97-80ce-9611c78f050e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.62.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:7a:73:c2:2d:a3:eb:d8:90:4d:f8:2e:24:bd:c8:69:9b:33:
         b9:1b:2c:e3:49:a8:e1:ea:a8:e0:bd:af:0b:ac:04:26:94:63:
         64:d5:25:f0:99:21:e9:86:71:be:a6:3f:33:89:fa:ee:75:9c:
         27:81:33:41:ed:66:65:49:74:5a:14:59:c2:b9:0a:75:18:c5:
         48:2c:7e:b3:e0:b0:77:ad:a9:c5:17:63:55:77:c4:2f:8b:24:
         d3:67:06:96:27:68:2f:c8:ec:73:3a:42:bc:61:a1:e6:66:56:
         d0:f9:7d:7c:d7:4e:b9:f1:d0:5e:37:ae:cc:64:36:ef:e0:07:
         ae:6c:74:ff:43:16:f8:71:a9:01:5f:b7:ad:30:21:97:ea:4e:
         d0:fe:1e:60:a0:ab:f2:15:13:5b:bb:51:2f:fa:1d:3b:b2:18:
         c2:f3:0c:2b:b0:1c:51:36:e2:03:3f:d8:3f:7f:cd:02:f1:27:
         d9:8c:db:92:c0:32:50:91:19:36:0f:31:41:e5:6c:5c:0a:0e:
         b6:a0:e9:e2:96:cf:01:28:bd:25:83:04:78:9f:71:53:ca:ab:
         ca:2b:37:f3:d4:1b:c8:85:bd:02:42:99:4f:11:79:06:22:4d:
         c2:23:7e:75:5d:12:47:10:4c:ac:c0:53:14:ad:a8:db:d2:b0:
         73:68:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:06:02 2025 by rpki-client