Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/dff172bb-2dfe-3af7-bf2e-cf7887fc0f2a.roa
File:                     dff172bb-2dfe-3af7-bf2e-cf7887fc0f2a.roa (raw, json)
Hash identifier:          GTI3EgjTWF3Fxnjw6btXLNeS7jfU+xR6yT4o/80HJ0M=
Subject key identifier:   25:98:CA:14:B3:BD:78:99:B9:6F:D6:F1:57:AA:64:C0:FE:C4:D3:D1
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F4328584B8EACC6752E4470CA46DC3080
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/dff172bb-2dfe-3af7-bf2e-cf7887fc0f2a.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     19197
IP address blocks:        69.41.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:c6:75:2e:44:70:ca:46:dc:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=a6520805-057f-4de4-9355-5e8cff8afb61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:43:98:fb:77:8b:33:1d:ab:26:bb:23:30:a6:
                    11:e1:5d:38:7f:91:37:5a:48:2c:d1:42:50:75:22:
                    7a:f4:ed:6a:0b:36:ee:c2:e7:8f:ea:cf:8c:a6:eb:
                    15:08:03:b3:5b:80:eb:85:ad:a1:48:5f:4d:4a:ec:
                    07:87:68:be:93:2b:63:b8:ba:f3:e5:17:57:5b:fa:
                    04:91:83:a1:3b:6d:38:64:75:a2:9a:8b:3c:c1:79:
                    c3:5a:0e:5b:ac:1d:0c:c4:50:c4:cf:a5:f1:aa:30:
                    10:a6:8b:c5:5c:b2:7e:99:85:17:4c:3b:d6:a9:b0:
                    8f:94:76:86:b0:4e:30:e8:ae:77:69:c5:c1:8f:4a:
                    fe:23:85:11:f2:b2:71:07:0d:af:7b:b4:e7:38:59:
                    ac:7b:3e:c9:44:0b:ca:e4:65:0c:cd:dc:f3:72:7a:
                    4e:ae:b7:45:ad:ac:a7:ab:11:0b:46:12:53:ee:5f:
                    a4:18:20:67:6b:88:b9:b7:c0:5d:c3:cf:b6:8f:ac:
                    6f:8f:87:60:f5:38:b1:d0:df:2f:0c:0d:7f:f3:09:
                    1f:80:39:8b:5c:ab:63:f2:2a:94:03:55:89:5a:d6:
                    c2:c9:22:e7:31:41:e0:eb:8d:b7:66:3b:a4:bf:1f:
                    3b:a0:19:ef:8e:f5:33:56:f1:63:5e:0d:17:5d:90:
                    7f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:98:CA:14:B3:BD:78:99:B9:6F:D6:F1:57:AA:64:C0:FE:C4:D3:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/dff172bb-2dfe-3af7-bf2e-cf7887fc0f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:49:a8:7e:88:1f:f8:fa:0c:25:ab:16:25:e3:09:e1:68:6f:
         73:7c:57:85:6e:54:f9:e9:31:bd:a3:db:e9:77:98:c3:9b:00:
         f4:ad:8d:33:4e:bb:fd:bb:3f:27:78:ac:b5:fc:a0:6b:a9:5c:
         82:46:3a:41:89:a9:dd:d6:e5:5f:df:16:d3:da:98:f6:be:9c:
         8d:69:f8:30:1a:10:a5:06:33:63:77:00:b5:4c:8d:2e:5b:a5:
         b6:e0:35:a1:c4:e9:10:30:75:b1:d6:43:bf:6b:ae:eb:e0:9e:
         98:8c:fd:10:6e:13:2c:15:5c:74:66:c2:86:7a:38:bb:a4:74:
         1c:61:27:6f:1a:e2:75:36:ef:e0:e0:b7:16:91:c0:7c:47:91:
         bc:c8:e6:ae:90:af:60:d6:93:3b:76:f6:08:a5:8c:fd:02:f7:
         95:45:b8:ff:c3:48:fa:a7:61:16:c7:cf:dd:86:ec:70:40:8f:
         32:a3:46:dc:9c:1e:eb:28:48:aa:15:54:b9:3a:ba:b6:a8:2b:
         05:5b:bb:d8:dd:2e:3d:6d:a8:23:9f:c9:fb:0b:73:fc:94:db:
         3c:85:87:1e:7f:ef:19:f0:8e:d2:90:72:25:f0:c5:27:b1:19:
         e6:0c:b1:54:12:6b:c3:fb:41:69:1e:a4:d2:a3:ee:4f:03:00:
         07:11:b7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:29:58 2025 by rpki-client