Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/60c5c903-7fa3-3aac-9aee-2ed7e38992d2.roa
File:                     60c5c903-7fa3-3aac-9aee-2ed7e38992d2.roa (raw, json)
Hash identifier:          YdZ68XCfKdGl7aVWry5XSwGC5Aaw3D27W9HjGE9Jv64=
Subject key identifier:   E6:7B:B8:80:05:C0:35:BB:19:34:F1:A2:E7:4A:5F:83:04:E7:58:5A
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F4328584B758C91F3D3A20C3FAED5406E
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/60c5c903-7fa3-3aac-9aee-2ed7e38992d2.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     62610
IP address blocks:        107.151.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:91:f3:d3:a2:0c:3f:ae:d5:40:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=a082f98b-4484-42ea-9bd2-1effd246abd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:57:4e:e0:56:d8:67:d4:38:8e:15:2e:67:84:
                    5e:04:57:0f:86:b3:cc:63:c8:01:60:44:1f:bb:fa:
                    9d:9e:4c:a6:92:2e:73:bc:00:79:98:2a:36:c9:00:
                    bd:02:9f:83:f4:e8:38:d5:df:14:89:28:cd:68:ea:
                    95:6b:45:46:7d:8d:4e:e8:c5:4c:cf:9b:36:78:66:
                    f7:98:b2:c8:aa:fa:92:27:66:7d:d9:8d:b4:c9:d1:
                    23:fa:54:80:4f:03:64:84:10:4b:65:77:71:f9:b3:
                    83:a2:e1:97:e1:0e:08:a2:1a:1a:36:17:66:f5:71:
                    f4:91:88:e9:fe:75:c3:e8:f2:01:30:71:8c:74:a8:
                    8f:c5:e6:1f:22:6a:5e:66:0c:f5:e1:bf:e7:60:cc:
                    52:d4:c4:1c:d6:89:3a:14:ef:a7:18:4f:91:28:36:
                    c1:c3:63:64:ba:9d:11:f4:cb:bc:3b:f3:b6:3e:52:
                    d9:de:8c:cd:d6:15:29:55:80:9d:ed:dc:e2:93:16:
                    93:0c:da:ad:61:95:6a:17:40:78:ce:fd:27:b1:7f:
                    41:86:59:82:97:b5:59:09:06:19:f0:b9:c8:7c:42:
                    01:4a:c0:b7:bd:ba:d2:3a:59:19:a7:ac:f4:db:2c:
                    3a:29:3b:1f:28:8f:44:b9:36:dc:bc:e5:8f:21:33:
                    bf:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7B:B8:80:05:C0:35:BB:19:34:F1:A2:E7:4A:5F:83:04:E7:58:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/60c5c903-7fa3-3aac-9aee-2ed7e38992d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:c2:9e:7e:28:99:cb:dc:31:ce:45:2d:29:c0:9b:e0:68:24:
         01:49:07:5d:a5:4c:b9:f6:c9:d3:5d:7c:a1:5d:44:55:6c:b1:
         74:03:0f:27:15:5f:72:b1:7c:8a:05:50:c1:2d:e8:fc:12:38:
         51:9c:a7:52:db:67:3e:dc:b6:6c:ff:67:de:f0:e9:bf:9d:1c:
         4f:47:00:bd:21:c5:f8:86:27:21:4a:8c:b4:fc:18:a1:fb:54:
         34:20:49:fe:d5:0f:4d:a8:b9:91:7b:41:0e:91:0c:72:16:57:
         61:e5:6e:78:12:cd:0f:db:2f:54:2f:ef:41:c1:a7:5a:a9:71:
         ff:e0:90:16:6e:4a:5f:de:d4:4c:70:d3:93:b5:53:d7:c8:01:
         df:a6:d2:7b:83:1c:7b:bb:08:04:86:ff:a6:30:fe:f2:9e:fa:
         ec:df:2c:35:d5:db:67:f7:10:43:d4:da:99:bf:fa:b6:0d:41:
         72:54:09:50:24:19:9f:d5:7a:c3:a2:48:53:f6:26:c5:c5:43:
         92:56:72:1f:67:bb:3b:df:f4:5a:71:d7:8a:9e:b1:e7:53:7e:
         3f:6f:08:13:ba:f6:27:d9:68:a7:2d:82:48:5f:3a:c3:9f:1b:
         b7:9d:59:5d:44:32:16:24:d3:64:b9:6b:17:94:33:21:d4:fa:
         01:95:88:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:30 2025 by rpki-client