Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/3220d0a5-cdd5-3f87-b685-9a7a62711425.roa
File:                     3220d0a5-cdd5-3f87-b685-9a7a62711425.roa (raw, json)
Hash identifier:          q3ycJKy81aSb3OXd3LtBarHa/xuqahYXunRDGwMgeN4=
Subject key identifier:   A9:99:FE:9A:A9:BA:8C:56:BF:62:A1:26:32:F8:26:39:8E:48:00:5D
Certificate issuer:       /CN=727f5fcf-eede-43ba-8c8d-c9fe87bf2802
Certificate serial:       010D0C9F4328584AD3A115433CF7D3F29FE07600
Authority key identifier: 1F:56:7E:60:8B:2E:9E:66:63:58:E6:0E:CA:F8:23:A7:C2:7D:82:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/3220d0a5-cdd5-3f87-b685-9a7a62711425.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     400302
IP address blocks:        170.205.60.0/22 maxlen: 22
                          170.205.60.0/23 maxlen: 23
                          170.205.60.0/24 maxlen: 24
                          170.205.61.0/24 maxlen: 24
                          170.205.62.0/23 maxlen: 23
                          170.205.62.0/24 maxlen: 24
                          170.205.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a1:15:43:3c:f7:d3:f2:9f:e0:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727f5fcf-eede-43ba-8c8d-c9fe87bf2802
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=67ffccc9-5f3e-4e8d-9199-262c37634619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7e:8c:af:e3:97:b2:67:00:5e:30:68:85:e2:
                    0b:bd:d5:18:e8:24:30:94:16:98:9d:c3:1c:93:e3:
                    0e:46:57:2e:c7:dc:2d:f0:01:00:50:8d:2d:5a:36:
                    30:45:1a:8d:f7:77:06:b2:e4:47:97:05:5b:8a:3b:
                    3a:ad:32:53:b9:49:4f:e1:05:52:69:fe:a3:d4:ee:
                    b0:14:fb:18:19:2e:b2:ea:ae:11:31:2d:94:97:74:
                    91:08:f5:e2:a8:70:e3:40:66:60:3f:22:88:5c:9f:
                    6e:a2:88:70:b5:00:dd:bf:5a:6a:31:a5:4c:87:ee:
                    cc:b4:7b:2f:bf:a2:74:2f:c6:2a:df:78:9f:1c:85:
                    07:87:77:06:a0:4a:d9:b9:60:a9:80:86:b5:34:19:
                    f5:3c:a8:df:3e:03:03:af:26:56:c8:1b:2c:88:13:
                    35:b0:21:94:3b:c1:06:71:68:42:79:33:32:fe:0f:
                    c1:9d:2a:11:0e:64:d0:ca:2d:11:db:83:07:c4:23:
                    4e:e8:01:f4:7d:3c:21:93:29:e7:be:4c:53:ce:b9:
                    c7:9e:ea:30:20:da:08:aa:a6:4d:e1:47:99:ff:b6:
                    08:8d:59:79:17:33:2b:f9:09:31:e6:30:47:7d:4d:
                    18:e4:75:fa:b2:91:8e:d8:5f:5e:53:b6:ee:c7:4f:
                    f5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:99:FE:9A:A9:BA:8C:56:BF:62:A1:26:32:F8:26:39:8E:48:00:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/3220d0a5-cdd5-3f87-b685-9a7a62711425.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.crl

            X509v3 Authority Key Identifier:
                keyid:1F:56:7E:60:8B:2E:9E:66:63:58:E6:0E:CA:F8:23:A7:C2:7D:82:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:af:88:14:9a:2e:05:44:cb:47:dc:3f:1e:91:55:0b:81:8a:
         39:06:c0:e7:9e:40:4d:b1:de:14:e0:bb:0c:68:a1:32:a7:6f:
         4a:5b:f9:cc:48:b5:43:cf:ae:32:ae:ec:e1:3c:8a:2b:b0:31:
         cf:9f:0f:7b:3a:f2:43:f9:0b:b4:6c:77:04:bb:6b:b5:42:4a:
         23:97:b5:d2:15:98:57:b7:00:77:36:07:88:00:53:ae:60:bc:
         37:8b:2b:60:84:f0:d6:d0:d5:35:1d:de:6b:0a:67:f2:d2:e9:
         2b:06:25:91:56:4d:e3:2b:c7:29:9d:1c:79:36:38:0c:fd:df:
         6d:b2:67:d2:b6:2f:c5:ad:af:ab:0d:56:25:cf:72:7d:1d:3f:
         b9:e6:8a:58:e5:61:52:26:34:0b:30:f0:83:09:52:20:65:17:
         96:bb:ee:18:48:c5:43:58:8a:79:8b:25:ae:4a:6a:b8:71:1e:
         24:a9:3e:f4:48:74:a0:f9:ed:53:d0:8f:1f:12:a2:95:87:a6:
         16:ca:67:f9:c7:03:28:da:d0:8d:51:73:e0:0e:04:99:2a:5a:
         73:0d:c7:a2:90:d7:9b:dc:03:52:6c:6e:70:74:e9:63:5b:4a:
         e8:f9:e7:13:5c:d9:ee:ab:60:95:8f:4a:4e:83:9f:a8:34:80:
         da:e0:05:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:57:52 2025 by rpki-client