Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/62b5a6c7-bb38-38c8-ada8-f9fd7398bca0.roa
File:                     62b5a6c7-bb38-38c8-ada8-f9fd7398bca0.roa (raw, json)
Hash identifier:          opAwwOMlcUGFcmn+U6ucuF9sOT7g989a28cVB17lB00=
Subject key identifier:   FA:D4:3D:CC:F8:80:8E:AE:FE:DD:21:9D:2C:37:68:04:D1:A0:5A:E6
Certificate issuer:       /CN=6c86d366-9f08-4852-b060-53c54ef6dda0
Certificate serial:       010D0C9F4328584AD255D23B676AB668345DA500
Authority key identifier: AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/62b5a6c7-bb38-38c8-ada8-f9fd7398bca0.roa
Signing time:             Mon 11 Aug 2025 13:53:26 +0000
ROA not before:           Mon 11 Aug 2025 13:53:26 +0000
ROA not after:            Sun 09 Nov 2025 14:53:26 +0000
asID:                     16570
IP address blocks:        204.138.49.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:55:d2:3b:67:6a:b6:68:34:5d:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c86d366-9f08-4852-b060-53c54ef6dda0
        Validity
            Not Before: Aug 11 13:53:26 2025 GMT
            Not After : Nov  9 14:53:26 2025 GMT
        Subject: CN=f6210e20-a21f-415b-bf70-cbcdb21a511f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:6d:5d:e7:2e:5f:04:ca:03:1e:88:08:04:
                    9b:1d:3f:dd:07:45:32:f4:b0:9d:d0:e7:7e:da:eb:
                    0b:3a:d1:57:a9:32:a3:26:4d:15:24:e5:0b:1a:af:
                    a2:41:bc:0a:5d:69:47:6c:b7:45:0b:e7:32:da:23:
                    6b:6d:9e:a9:4e:4d:78:1a:9c:72:0c:63:05:1e:3b:
                    14:fa:90:65:38:a4:92:23:ce:38:4a:95:81:bb:c7:
                    75:3b:c6:38:4e:0c:f7:9a:02:e6:ca:3a:1e:25:39:
                    ed:64:17:86:50:4d:cd:d4:f1:20:9b:7a:7b:95:b7:
                    f7:fa:5b:8e:53:bd:95:1f:c3:67:7a:51:65:73:4d:
                    59:21:3d:77:57:1e:4b:50:6e:9a:70:00:b3:06:10:
                    3e:d3:dc:fb:1c:3e:c3:4d:5b:aa:97:a3:f3:97:74:
                    61:be:47:f1:42:6f:57:96:88:f9:c2:93:b9:75:11:
                    ca:28:8b:0b:71:fb:f0:bd:d0:5f:dc:ee:58:67:24:
                    ac:13:45:d0:b3:54:94:a1:09:61:e6:41:27:d9:93:
                    51:c8:db:e8:80:a8:16:3f:82:75:d3:6f:26:16:2a:
                    18:a7:9e:06:b5:14:25:f7:05:4a:50:bd:c0:df:ae:
                    60:16:fb:83:c3:95:23:7b:7b:80:c9:84:2f:59:2f:
                    83:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D4:3D:CC:F8:80:8E:AE:FE:DD:21:9D:2C:37:68:04:D1:A0:5A:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/62b5a6c7-bb38-38c8-ada8-f9fd7398bca0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0/6c86d366-9f08-4852-b060-53c54ef6dda0.crl

            X509v3 Authority Key Identifier:
                keyid:AC:8B:A9:6E:4F:59:DC:EB:11:59:A5:17:A6:AB:9F:9E:14:38:F1:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/6c86d366-9f08-4852-b060-53c54ef6dda0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.138.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f1:30:2f:f9:2b:47:fd:74:10:72:29:df:58:34:fa:98:d3:
         a8:4a:2f:5b:23:1e:3d:da:4c:9a:d7:1d:43:92:b2:b7:fa:11:
         ad:8f:d8:76:c7:04:c0:f0:5f:a5:ec:e8:fa:c3:5c:da:c4:db:
         ec:e2:1f:03:aa:fb:93:35:f2:c7:40:ce:01:ac:f0:b8:a5:89:
         8d:53:2d:9a:ff:7b:0e:c6:7a:19:42:a9:cb:f6:a8:7f:97:ef:
         26:41:e5:d0:8e:5a:00:91:16:0a:0d:84:f6:dd:03:43:d1:41:
         a7:3f:d4:51:7c:0f:4e:5c:13:d0:18:37:c6:42:a6:e1:31:00:
         7c:0e:c1:7f:1b:35:19:15:95:53:1d:00:ec:86:18:73:d9:bc:
         c8:22:e0:07:74:a5:7d:c1:bf:0f:af:4a:16:cc:4a:60:f3:df:
         05:04:a2:c6:69:c2:d9:8e:4e:a2:06:69:db:e1:ee:ba:3a:0b:
         5d:ad:da:c4:87:d2:09:27:12:62:9a:79:75:4d:02:6f:0a:95:
         38:35:e1:ab:88:f1:3f:16:47:f4:36:3b:24:de:ae:ea:36:cc:
         80:b2:40:dc:0e:77:25:f4:79:b9:cb:ef:fc:eb:41:d1:a3:48:
         dd:5c:07:f8:a2:e3:d5:cf:97:0a:19:d8:7b:4c:37:a5:11:c6:
         68:e4:33:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:58:21 2025 by rpki-client