Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8baa5710-3903-3a6d-8148-fec2d5a33c00.roa
File:                     8baa5710-3903-3a6d-8148-fec2d5a33c00.roa (raw, json)
Hash identifier:          FKpm94gz0fuv3lvWVUuWUDnX9+ZzJTsMWyrq3Uk53c4=
Subject key identifier:   8B:65:CA:E0:F6:6C:7C:36:AD:46:13:77:50:65:29:92:BE:61:E4:B4
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F4328584B8EACC65F7EB41DDA29CA7800
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8baa5710-3903-3a6d-8148-fec2d5a33c00.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     19197
IP address blocks:        69.41.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:c6:5f:7e:b4:1d:da:29:ca:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=c9270c39-56ae-40e1-bd0c-87a8536415d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:5f:37:40:54:7e:be:da:99:0b:a7:a3:e3:9a:
                    77:ca:94:56:60:d0:d1:2c:9b:84:e0:a8:25:d4:53:
                    32:b6:c9:d6:f4:bc:3f:cf:d2:68:b4:df:07:7b:b9:
                    9d:3a:5e:4e:4b:88:05:58:87:30:ff:22:73:a4:fa:
                    09:f4:bf:16:bc:6a:61:f5:0f:76:0f:74:7f:ad:ae:
                    81:9b:f5:51:5e:dd:96:54:a4:79:dd:25:f0:ae:83:
                    33:6b:58:b5:6c:4c:02:cf:dd:83:32:e2:94:09:17:
                    62:11:af:0a:1a:a4:1d:32:53:e5:84:a1:63:6d:0e:
                    b2:95:21:4f:d3:0f:a4:92:b9:df:9a:09:8c:1d:15:
                    b1:df:ab:9d:94:db:bb:59:73:76:5f:31:12:64:c8:
                    50:aa:c3:9f:34:18:35:f3:cb:37:cd:72:72:9e:42:
                    b2:53:94:16:61:0f:53:d8:2b:6d:27:4e:90:8a:dc:
                    b8:2c:73:63:90:b9:af:89:63:7a:0e:0f:c0:5b:a0:
                    6a:2d:c0:44:3e:b0:2c:4c:87:c2:3c:b6:e1:40:9d:
                    f2:ea:1d:07:02:12:04:f9:3c:35:10:29:a9:90:2b:
                    61:a7:e6:60:c2:85:ba:3e:57:fa:08:94:0e:35:ed:
                    7f:03:95:8c:56:95:aa:ab:b9:4e:76:d1:31:ff:40:
                    75:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:65:CA:E0:F6:6C:7C:36:AD:46:13:77:50:65:29:92:BE:61:E4:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8baa5710-3903-3a6d-8148-fec2d5a33c00.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:d5:c7:ea:5a:9e:5c:da:ed:0b:a1:b2:bd:25:05:95:55:f4:
         2e:26:a2:28:ac:04:bc:1e:d3:ab:7b:b0:89:07:11:e1:ef:8b:
         39:b4:e1:16:e6:15:cc:06:86:44:05:69:53:a7:4b:ef:36:3a:
         dc:a2:50:b2:d2:d0:68:2e:5e:de:b9:8e:ad:c7:50:58:df:9c:
         93:2e:60:bf:39:a5:81:ae:e8:68:52:a7:b3:56:ae:02:a8:eb:
         7b:59:78:ce:96:cc:2f:62:92:f0:b2:b3:34:a0:4f:7d:5e:b1:
         a3:51:d4:9c:01:ee:d7:77:fb:ff:6a:cc:40:6f:46:58:7f:fc:
         43:53:7c:9b:fa:78:8a:95:fc:32:56:18:c3:70:46:be:ba:10:
         b7:f8:5a:76:13:44:54:15:57:cf:68:7a:fd:51:3a:8b:bd:e8:
         d8:d8:9f:ce:78:7d:95:94:96:74:b3:f3:b1:c9:2a:0f:7a:16:
         63:fd:3c:01:d9:3d:ab:89:59:6a:97:f7:c4:c7:fb:4f:e0:08:
         39:93:30:0d:06:fb:9b:8a:18:25:6d:be:87:94:ce:14:c0:70:
         0b:eb:fd:ac:96:e5:60:04:bf:e3:b9:98:ca:63:d1:88:f3:15:
         ee:4d:5b:ea:9a:86:53:8a:fa:10:70:81:65:45:17:bc:6d:5c:
         ad:64:81:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:24:22 2025 by rpki-client