Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/67fb9365-155a-30e2-9cb0-ea2989748078.roa
File:                     67fb9365-155a-30e2-9cb0-ea2989748078.roa (raw, json)
Hash identifier:          UPVKcjwl7R8DjhQ4KjozDeKmjZzs3xg54lpehujIoLY=
Subject key identifier:   0E:94:36:53:34:AB:E3:D3:FE:D4:A7:2D:FE:14:F5:9C:20:A1:86:A1
Certificate issuer:       /CN=62ec8079-292d-409a-a736-bddf9af8d979
Certificate serial:       010D0C9F4328584AE8912F2B28346755D75CBC80
Authority key identifier: 4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/67fb9365-155a-30e2-9cb0-ea2989748078.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     46353
IP address blocks:        208.67.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:2f:2b:28:34:67:55:d7:5c:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62ec8079-292d-409a-a736-bddf9af8d979
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=fcfb4081-e8d6-42d6-b062-8ba53add0f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bd:5e:94:54:26:23:5f:0e:ba:b7:db:f4:f4:
                    f5:c6:bb:c6:93:84:67:4c:c3:1b:05:f4:46:85:7f:
                    8c:06:a7:52:f1:be:69:19:7d:4e:47:9d:b5:2c:17:
                    54:18:a4:4e:ba:08:50:13:a0:0b:3e:84:3b:9c:5a:
                    e5:38:0f:42:2f:be:d7:fc:bf:db:bd:88:52:90:35:
                    47:f0:f7:68:24:1b:9f:82:f4:52:6c:65:0f:73:df:
                    6d:dc:11:1f:01:df:cb:88:b0:6b:85:fb:b0:25:ae:
                    43:1f:08:c7:16:9d:b0:6f:8e:b7:27:f0:df:05:35:
                    53:50:e3:0a:19:92:c8:77:44:33:e5:ff:49:7e:49:
                    ad:f8:65:e5:6c:91:39:a9:cb:91:6d:aa:fc:e1:57:
                    53:82:e3:13:c8:94:f5:55:83:a6:a6:8f:a2:c3:b4:
                    01:88:81:99:d3:63:0c:83:4a:9e:d4:46:20:7a:9e:
                    d2:bf:41:20:dd:26:08:17:88:48:29:36:cd:e4:e4:
                    e2:d6:c7:e9:bc:dd:da:77:70:22:10:71:86:c2:2f:
                    13:c7:29:4d:bf:cb:e1:b8:22:b6:53:69:f8:c3:56:
                    46:4c:36:1a:23:07:23:bb:8a:79:03:e7:a9:36:50:
                    63:4c:4e:91:de:36:f9:7b:33:38:93:4c:8e:a8:4a:
                    80:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:94:36:53:34:AB:E3:D3:FE:D4:A7:2D:FE:14:F5:9C:20:A1:86:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/67fb9365-155a-30e2-9cb0-ea2989748078.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979/62ec8079-292d-409a-a736-bddf9af8d979.crl

            X509v3 Authority Key Identifier:
                keyid:4F:1D:B2:21:08:86:59:09:1F:12:81:5A:33:08:93:1E:E6:08:97:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/62ec8079-292d-409a-a736-bddf9af8d979.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:c7:3b:b8:24:58:e1:55:93:8c:ca:b3:7b:de:e5:ff:21:ee:
         01:68:5d:a0:ba:dd:66:45:72:1b:7f:f6:9b:97:46:25:2e:2b:
         95:65:74:ed:9b:d7:c0:fc:c7:e3:e3:c3:16:ae:25:4c:28:87:
         5c:f0:61:dd:95:cd:85:d6:dd:8e:16:1d:8a:4d:27:ba:db:1e:
         13:e3:d6:b9:06:53:f0:53:c9:a4:f5:98:b2:74:eb:d3:c5:07:
         68:10:6f:c1:78:7c:67:11:ae:3f:bc:1c:41:b9:5a:e6:02:f2:
         0e:97:db:c2:0b:c6:2c:22:fa:4c:c1:ca:11:ee:ca:39:81:a9:
         81:91:f5:a6:68:06:d8:d9:aa:08:23:4d:25:32:ac:75:4b:a4:
         d7:9e:d8:a7:ff:24:ec:d8:a2:d3:fe:5e:36:32:bf:66:74:84:
         26:22:bc:94:a2:4e:e8:7c:ce:8e:cc:8a:10:4e:a1:63:eb:d1:
         13:19:5c:bc:89:a0:48:9e:eb:87:eb:99:60:47:4a:af:aa:2c:
         73:15:eb:e0:fe:0f:1a:bc:15:04:30:ac:26:dc:fd:73:6a:4f:
         a9:f9:f3:12:6a:b8:c3:40:b8:7a:37:88:8f:af:a9:3d:19:e2:
         bc:77:83:99:6a:b5:d7:cc:36:cd:6f:38:92:18:54:dc:e7:38:
         13:a3:a1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:10:34 2025 by rpki-client