Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/ddbaf3d1-6f13-3fb0-ad25-8fffb9457ccb.roa
File:                     ddbaf3d1-6f13-3fb0-ad25-8fffb9457ccb.roa (raw, json)
Hash identifier:          aMd1/herpqjqBUW/J0xv6x0BtO+FCBleowPAoYg7W6k=
Subject key identifier:   D5:83:5F:29:25:FB:7B:A7:6E:1A:30:64:CB:F4:C4:B4:00:3D:AB:C0
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584A480AEA1CC13C3360EAF89040
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/ddbaf3d1-6f13-3fb0-ad25-8fffb9457ccb.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     2153
IP address blocks:        209.129.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:ea:1c:c1:3c:33:60:ea:f8:90:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=0e458e27-9da6-4552-bcb4-0db2acdfba61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ec:35:b2:8f:77:e1:3c:b5:3a:fd:55:92:27:
                    5d:8a:a4:7d:f0:27:de:8c:fb:5e:70:bd:91:50:c3:
                    38:85:cf:92:0c:45:6a:a5:5b:81:4b:ae:8e:73:a9:
                    52:9f:a6:33:5b:97:05:64:36:3f:21:77:e6:48:c2:
                    90:bd:b4:89:bc:72:f4:12:0c:fb:7e:0c:e8:31:a4:
                    f6:fc:22:93:0f:24:ff:2f:a7:7c:3e:19:0a:8a:f0:
                    bc:00:c0:1c:18:f9:a5:c4:48:03:42:71:ad:a9:bb:
                    15:36:16:6d:37:d8:c2:58:f4:01:67:ec:a0:9c:2c:
                    d8:d5:25:44:5c:db:75:c5:66:bb:5a:06:bf:2b:21:
                    53:be:b7:43:f2:14:7f:26:89:15:63:e5:e5:78:f7:
                    36:90:5e:d1:3d:c9:5d:95:93:34:b1:ee:63:f1:f2:
                    39:2b:3a:1d:5c:3a:fa:56:68:44:2b:a4:ec:e2:76:
                    7f:21:e7:11:fa:c5:fa:df:04:56:bf:57:e8:79:cb:
                    85:0a:8e:2f:49:e7:49:88:02:64:a6:3a:5a:26:cd:
                    03:c9:dc:82:54:36:db:8f:78:37:07:63:26:af:11:
                    5c:61:13:c7:a1:f7:10:f1:ad:c9:22:d6:fc:77:89:
                    aa:33:74:b8:9a:51:51:07:03:66:e5:6f:7e:55:15:
                    a3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:83:5F:29:25:FB:7B:A7:6E:1A:30:64:CB:F4:C4:B4:00:3D:AB:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/ddbaf3d1-6f13-3fb0-ad25-8fffb9457ccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.129.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:44:85:da:51:32:86:58:ce:8e:0a:cd:4e:85:5d:f9:d5:75:
         3e:79:5a:c6:c1:f4:f6:d8:1f:e2:3d:ba:09:0b:1d:ae:49:e2:
         a4:8e:c1:2f:65:3f:04:ee:a8:ef:ef:f2:8a:5b:92:75:72:25:
         ab:3c:4d:ef:cf:33:d4:4f:06:88:40:96:6b:4e:8f:ec:af:9d:
         27:13:74:e2:a2:99:19:e0:5d:46:96:74:cf:97:03:bf:02:13:
         36:87:82:74:85:f9:5d:17:be:7c:8f:98:fb:6a:4c:3c:34:95:
         5f:48:84:02:40:ab:24:f7:24:64:8f:10:ea:c9:d1:22:95:b8:
         fa:09:11:ed:c5:02:c3:68:39:78:d1:21:02:d0:ae:75:f4:ff:
         25:8f:89:8a:26:4f:10:12:55:7f:e3:29:55:85:56:a3:52:03:
         ab:90:00:ef:fb:7f:c2:33:3d:c2:80:46:da:f6:e5:d8:19:8d:
         b9:06:9c:63:6c:53:eb:db:47:f3:32:c0:25:ff:ef:8c:f9:1c:
         c4:c3:8a:29:3c:f1:7b:96:0b:fe:b9:31:60:7c:1a:90:0c:73:
         db:48:af:86:98:76:f7:24:d7:47:cb:7d:b7:05:77:77:ad:c6:
         8d:cb:79:81:c6:42:9b:5b:24:f7:b4:17:aa:70:ce:db:5b:1e:
         4e:4f:60:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:51:47 2025 by rpki-client