Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/60b6556b-0db6-3b0b-9230-7f257bf4693d.roa
File:                     60b6556b-0db6-3b0b-9230-7f257bf4693d.roa (raw, json)
Hash identifier:          e/rHMhUY45I2fWYxqmBiZUtwio4ezUMgCv0JChtslfQ=
Subject key identifier:   89:4F:9C:22:92:07:64:EE:91:49:B0:AD:2E:09:AB:DA:9B:A1:9C:71
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584B821D717532EB4BB28A5FF830
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/60b6556b-0db6-3b0b-9230-7f257bf4693d.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     20115
IP address blocks:        192.61.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1d:71:75:32:eb:4b:b2:8a:5f:f8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=745c3801-4b7f-4ec9-8bee-ec3124a9b4fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a0:7c:05:fb:5d:9d:2b:3c:5c:d9:b8:ef:6f:
                    0e:05:6e:b3:53:aa:0e:a8:f0:6c:16:9f:6d:79:1a:
                    9d:45:44:88:2b:87:cb:3d:90:2b:df:59:2f:7d:b9:
                    8d:b3:a9:ac:be:df:ce:14:0b:b9:09:9c:ba:dc:cf:
                    84:ff:51:1f:71:33:0f:4d:9b:ce:91:14:eb:62:8e:
                    fa:02:10:d0:54:d1:85:60:4a:72:c9:04:f7:86:85:
                    ed:ea:b1:f8:bd:f0:56:4a:40:d5:29:55:ec:85:39:
                    29:11:ce:e2:28:c1:1c:94:97:80:69:bc:84:60:1f:
                    ac:9d:52:47:9f:f2:78:18:b0:50:30:f9:f7:6b:10:
                    fe:38:03:47:80:b1:e4:3a:f9:ff:4a:f8:51:f9:14:
                    95:c5:a7:36:e2:f0:fb:08:0e:46:e1:c3:67:b3:73:
                    26:79:74:0f:f9:2d:ed:28:88:2f:ad:06:f0:03:71:
                    16:60:83:8f:ba:2b:e9:c1:ef:31:52:1a:e1:0e:09:
                    f9:c4:2b:c1:e0:d4:7d:78:4d:ce:af:28:4f:5b:65:
                    26:f5:c7:19:a5:c3:64:ae:fc:97:6f:d1:b5:d5:dc:
                    53:a2:7e:e2:f0:31:2a:4f:33:0e:a1:70:fe:60:e7:
                    21:28:be:3c:e6:1f:bf:38:87:ed:9c:0b:14:32:6b:
                    5d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4F:9C:22:92:07:64:EE:91:49:B0:AD:2E:09:AB:DA:9B:A1:9C:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/60b6556b-0db6-3b0b-9230-7f257bf4693d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.61.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:9b:8e:79:e3:a1:96:ee:8a:29:5e:5b:ad:e4:f2:d1:53:05:
         c4:53:f2:b5:e5:99:80:47:82:6a:b7:f2:9b:ba:a0:49:6f:5e:
         7c:3f:5a:b4:e0:5f:a1:1c:cc:c6:62:c3:77:84:0c:a3:8d:67:
         3b:38:b2:b5:f3:0a:72:0f:f8:ec:da:a0:7c:9c:77:96:5c:80:
         70:c9:8a:ea:11:49:fc:10:33:1f:71:31:38:7e:13:e5:0c:ec:
         a3:24:9e:96:97:6c:5d:4e:47:45:ae:5f:3d:58:2f:53:fb:ab:
         17:03:e7:5c:2d:55:7a:5c:b6:71:00:f4:b6:cb:81:fc:e7:7a:
         fe:39:4e:b0:6c:e7:8b:a1:70:e6:b2:bf:af:d0:08:9c:a1:4e:
         9d:02:45:2d:4e:3d:89:99:d1:32:d8:ff:63:7d:52:d0:57:0a:
         e1:30:6d:71:22:a1:45:ab:e4:0c:58:aa:1e:2e:ea:60:a8:7f:
         36:23:58:88:0d:84:ec:85:25:45:2e:21:4c:4d:9c:26:a3:bd:
         4e:b2:d7:9f:05:7b:47:ba:29:69:3b:22:6b:1e:c8:4f:38:d1:
         24:74:21:7f:d8:43:13:8b:c3:48:6d:02:72:24:96:15:ad:cb:
         2b:74:11:cf:0b:35:36:41:d3:e4:67:8e:04:02:35:c9:e1:fe:
         51:b6:ad:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:05:45 2025 by rpki-client