Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/b8a1a37d-572a-3cb1-8887-39a0da045cd7.roa
File:                     b8a1a37d-572a-3cb1-8887-39a0da045cd7.roa (raw, json)
Hash identifier:          Uaq487QRl1GmGKlZ8Dk/rIezSpic+4fW859gbKONjXc=
Subject key identifier:   6B:4C:7B:A8:CB:65:BE:9B:14:F5:31:93:A7:84:04:D0:F9:27:BE:BB
Certificate issuer:       /CN=68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5
Certificate serial:       010D0C9F4328584B8BE2251364FFE471730AD900
Authority key identifier: 46:EA:7F:7E:BF:DE:75:42:C5:75:16:AC:A5:93:F9:06:8A:2E:9E:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/b8a1a37d-572a-3cb1-8887-39a0da045cd7.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     19905
IP address blocks:        206.83.160.0/20 maxlen: 24
                          2620:13d:f000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:25:13:64:ff:e4:71:73:0a:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=79946acf-050c-4e3c-866e-778d79340b33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:9d:75:f2:99:21:41:d7:53:63:79:6a:83:e4:
                    85:69:12:93:be:f3:28:e1:ea:92:76:1f:d0:45:35:
                    3d:f5:34:32:a6:05:16:9f:d7:cb:2a:1d:5f:00:5c:
                    86:a9:56:b1:46:91:69:38:fe:33:50:7b:eb:76:a7:
                    08:89:f4:ee:3b:35:cf:8f:21:8b:09:af:4a:4c:78:
                    8e:c6:60:0d:18:33:a4:c5:57:73:d8:79:57:c6:39:
                    37:4b:b2:d7:9f:e3:d9:ba:ac:1f:df:35:ea:6f:43:
                    1d:c5:bb:ea:18:1d:f7:05:11:26:87:65:e1:10:e3:
                    a4:1f:78:8b:02:d6:0a:77:dd:17:1f:6e:07:0b:c1:
                    09:fa:1f:68:05:85:99:53:25:f1:af:f2:fb:3e:f8:
                    1c:05:b9:e0:80:f9:bd:f7:65:91:2b:5a:8b:7e:18:
                    a6:c3:dd:97:c7:50:a7:88:26:98:27:e2:9c:29:58:
                    0a:f1:5b:6f:e0:37:d4:11:35:c8:e4:90:a0:fb:a2:
                    d7:b2:dc:6a:15:fd:d7:9e:f3:cc:0c:8a:8f:86:db:
                    59:49:98:29:b8:5c:15:53:ff:bf:74:93:d0:81:f9:
                    89:a1:34:38:dd:2b:86:a9:96:22:97:e3:37:51:89:
                    e5:87:8b:74:18:9c:49:ee:29:04:2e:82:a4:5f:02:
                    eb:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4C:7B:A8:CB:65:BE:9B:14:F5:31:93:A7:84:04:D0:F9:27:BE:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/b8a1a37d-572a-3cb1-8887-39a0da045cd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.crl

            X509v3 Authority Key Identifier:
                keyid:46:EA:7F:7E:BF:DE:75:42:C5:75:16:AC:A5:93:F9:06:8A:2E:9E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68375ce4-f9cb-40eb-9f83-67d1cfaaa3f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.83.160.0/20
                IPv6:
                  2620:13d:f000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:f2:24:a8:df:e0:94:a9:aa:72:cf:2e:ee:0d:e6:7b:b6:da:
         ac:13:fb:c7:95:04:31:d3:e6:59:ff:ed:7a:0c:ea:bb:ec:2e:
         43:ec:f8:4a:52:ea:eb:c2:c5:57:88:e5:be:17:93:d8:36:c6:
         58:53:94:18:90:8d:be:09:a8:ee:1e:e5:3c:c3:24:36:4b:90:
         eb:ea:a9:cf:d7:ac:5c:b8:ef:db:7e:c3:21:91:e1:1f:01:36:
         a6:6e:7e:2b:09:b0:ce:ea:75:d9:59:71:3c:6b:a9:e7:ad:f3:
         3b:d7:b4:f8:d4:59:0a:3a:43:27:53:96:28:71:12:8a:33:11:
         9d:32:d1:c2:05:82:cf:b4:f3:d1:c5:e3:2d:3e:b6:52:a4:37:
         0c:fd:39:1d:4f:83:fb:30:2d:1a:b0:7f:86:92:5f:c1:b0:54:
         f9:0d:0f:20:cc:f8:d7:a7:ae:d3:28:df:ae:7f:5c:6f:e6:34:
         be:a6:de:95:d2:a7:5e:43:a4:93:1f:60:dd:e2:b7:da:36:e6:
         73:1e:97:3c:ee:5a:8d:47:98:42:69:78:14:7d:d8:06:61:a9:
         b7:b6:67:93:99:ae:6f:fc:78:fc:cc:ee:b3:7c:2e:90:ba:1c:
         9a:c1:bd:5c:13:80:89:0a:48:33:2d:3b:29:ea:38:d5:58:6d:
         f6:d3:3b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:39:13 2025 by rpki-client