Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b/a98643a6-ee34-3a58-b2ce-7128735117d8.roa
File:                     a98643a6-ee34-3a58-b2ce-7128735117d8.roa (raw, json)
Hash identifier:          AAId2ClNWpTe3IUsDLLd3g+eFK+d7EkTRK8tkvIkHVE=
Subject key identifier:   10:1F:F9:CB:02:9C:DE:7B:6B:80:88:92:C9:43:D7:46:63:AE:79:39
Certificate issuer:       /CN=6157cf71-d190-4be0-86fe-894ed130459b
Certificate serial:       010D0C9F4328584B79BCC79B1FD76FF79C0F4C80
Authority key identifier: 49:36:2B:6A:7E:28:78:52:A9:B2:9F:84:A9:12:9F:6A:AA:7E:14:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b/a98643a6-ee34-3a58-b2ce-7128735117d8.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     14618
IP address blocks:        66.59.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b/6157cf71-d190-4be0-86fe-894ed130459b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b/6157cf71-d190-4be0-86fe-894ed130459b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:c7:9b:1f:d7:6f:f7:9c:0f:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6157cf71-d190-4be0-86fe-894ed130459b
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=6709b420-990a-444a-8033-c9b9c74b4b68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:90:38:8e:86:dd:2e:30:13:20:f9:6c:e4:c3:
                    91:0f:62:c4:a7:75:be:fe:00:35:99:6f:a6:eb:aa:
                    a9:47:a5:d0:6f:b4:b3:03:85:a6:14:75:47:ee:7f:
                    9a:93:b7:e4:03:9f:e7:43:ad:4f:74:7d:46:ba:4c:
                    7d:bd:e9:49:9e:07:02:85:0b:a9:5c:b2:a2:32:ad:
                    d4:c8:37:c4:4c:eb:66:a0:c0:0c:96:33:40:1c:e5:
                    26:ae:e5:5c:40:c4:cd:94:39:5e:c6:5c:67:94:c4:
                    f1:58:fe:b8:c2:cb:a9:4f:89:1c:49:16:ab:8c:a3:
                    b9:97:5f:d4:c7:b0:b6:07:b4:ce:e4:fb:ff:de:bd:
                    b1:4b:0e:64:d3:27:fd:4c:74:11:fc:e2:4a:ec:2d:
                    43:70:a7:de:f5:e9:5b:1b:de:32:62:60:70:d7:8a:
                    74:21:1f:30:f1:b8:f9:df:3b:12:be:e8:7b:e7:74:
                    82:59:4e:aa:b6:f4:4f:4a:ef:70:96:79:4b:03:1e:
                    bf:72:2d:f8:da:c6:eb:75:f2:1c:57:5d:b3:22:bd:
                    4f:eb:9b:55:c4:19:c5:a5:6e:11:53:31:5a:de:32:
                    a8:93:83:af:96:78:94:ca:d0:00:9a:73:e7:a7:69:
                    de:3f:5d:67:bd:07:5f:73:69:a7:26:b7:ac:f8:a6:
                    bb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:1F:F9:CB:02:9C:DE:7B:6B:80:88:92:C9:43:D7:46:63:AE:79:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b/a98643a6-ee34-3a58-b2ce-7128735117d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b/6157cf71-d190-4be0-86fe-894ed130459b.crl

            X509v3 Authority Key Identifier:
                keyid:49:36:2B:6A:7E:28:78:52:A9:B2:9F:84:A9:12:9F:6A:AA:7E:14:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6157cf71-d190-4be0-86fe-894ed130459b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.59.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:6b:90:81:c0:e7:99:4a:f5:96:95:c5:24:46:ee:af:58:17:
         44:f8:fb:59:9f:21:8a:56:14:d0:d6:df:74:52:75:ea:ab:5f:
         59:27:b1:63:ae:7b:aa:8a:b0:c9:78:36:fa:42:65:74:6f:c0:
         26:73:bb:9c:1e:eb:b0:a6:b8:5d:4b:ab:0c:4c:9e:6f:ce:d0:
         eb:88:aa:07:ce:89:c8:52:2b:0a:ce:f3:54:55:7a:84:23:e9:
         05:bc:bc:69:ff:1c:af:a1:ed:7d:ea:ff:9a:60:db:bf:ac:d3:
         1b:8b:0c:be:4b:fd:3e:b4:28:17:5f:d5:6f:bb:70:ba:d6:10:
         88:82:d1:cd:6d:a5:e7:23:62:75:3e:c2:76:d6:94:20:d9:a7:
         7e:e3:1f:6e:85:97:42:0c:8e:ca:2e:e3:99:bf:0a:80:cc:2d:
         65:bc:00:d9:3f:d4:00:fe:18:c5:06:6b:33:09:79:62:1e:cd:
         8c:f3:7b:da:17:f3:db:be:65:ff:02:4d:55:21:f5:d2:89:dd:
         c4:c6:27:83:5f:dc:37:fe:7b:06:bd:c7:39:6d:c0:d2:f9:c5:
         db:d8:39:c5:0e:30:fa:e1:25:8a:30:42:8b:81:de:fa:c8:cb:
         e4:f7:00:20:7f:72:83:c8:24:a6:50:a2:a4:ed:2a:94:79:6c:
         24:62:8a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:02:02 2025 by rpki-client