Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/7e596f8d-e7fa-32ea-8040-ecbfad2c8863.roa
File:                     7e596f8d-e7fa-32ea-8040-ecbfad2c8863.roa (raw, json)
Hash identifier:          PoAm2qJuUIJBPaTUB9hBBktuPHKHeRYke6uE5MYs3T0=
Subject key identifier:   90:C2:68:88:EC:DD:CA:7A:95:80:CC:DA:95:AB:EA:64:90:A1:34:E3
Certificate issuer:       /CN=960e110b-8a58-4e15-a2f1-8d907656427c
Certificate serial:       010D0C9F4328584B8BE213E0FE7002327FF24480
Authority key identifier: 1B:8B:A7:24:1A:10:34:E8:30:A4:63:8A:E8:A3:A7:8D:0E:5D:9D:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/7e596f8d-e7fa-32ea-8040-ecbfad2c8863.roa
Signing time:             Fri 17 Oct 2025 01:00:30 +0000
ROA not before:           Fri 17 Oct 2025 01:00:30 +0000
ROA not after:            Thu 15 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        69.10.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8b:e2:13:e0:fe:70:02:32:7f:f2:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960e110b-8a58-4e15-a2f1-8d907656427c
        Validity
            Not Before: Oct 17 01:00:30 2025 GMT
            Not After : Jan 15 02:00:30 2026 GMT
        Subject: CN=973164d3-b8a4-4f41-9d72-748cbd95ff9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f3:ce:2b:cd:95:8e:1a:eb:60:a3:0f:a2:a1:
                    5b:3a:81:05:08:ed:17:ef:f8:93:da:d9:48:fd:53:
                    ed:4f:05:10:db:f1:6f:b1:88:49:32:f8:c8:d7:c0:
                    ad:84:e7:95:10:b1:95:ee:f3:06:8d:f1:3e:06:2f:
                    d0:07:ab:06:05:fc:f7:a9:d1:e8:8b:48:ae:c3:61:
                    13:f0:18:9d:49:83:a1:bb:a4:c4:49:89:e2:61:68:
                    05:4d:3b:99:0a:02:d9:95:5b:8f:73:91:29:7a:14:
                    24:cc:0e:04:3b:73:78:09:40:11:85:4f:ae:45:ed:
                    f1:ef:4d:4f:69:0b:79:55:30:61:67:e7:aa:83:ea:
                    d1:9c:43:43:21:ee:44:15:ce:a7:2e:7e:66:03:7f:
                    64:8b:86:af:06:08:bf:1a:a6:b9:32:43:d2:e1:ee:
                    18:75:e1:83:27:4d:16:15:61:f0:b1:4d:b4:e1:a1:
                    f9:2c:8d:4c:f1:a0:a6:46:fa:d7:ea:f7:6f:e6:96:
                    61:9d:4e:86:9c:f0:3d:19:ef:dd:55:26:1b:78:00:
                    e1:a8:9d:9d:a7:bf:dd:71:9c:e4:6f:da:1f:bd:ce:
                    5f:4f:0c:46:ed:96:bc:2c:a8:73:94:3c:70:bf:29:
                    41:b4:55:84:5b:57:10:67:6a:b1:f2:ed:83:e1:99:
                    44:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C2:68:88:EC:DD:CA:7A:95:80:CC:DA:95:AB:EA:64:90:A1:34:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/7e596f8d-e7fa-32ea-8040-ecbfad2c8863.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:8B:A7:24:1A:10:34:E8:30:A4:63:8A:E8:A3:A7:8D:0E:5D:9D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.10.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:4b:f4:84:75:56:a0:a5:f7:b2:49:71:90:77:24:74:5f:4d:
         f4:47:ab:96:fc:1f:e8:4e:77:a8:b1:12:70:e0:02:6a:03:29:
         d1:74:eb:b9:16:19:1f:13:24:6f:fe:94:4e:8d:a9:2e:40:3d:
         8c:ee:92:25:cb:aa:f5:84:23:48:ce:71:d0:a1:0e:64:7d:e7:
         f4:7e:e5:e3:35:ed:e3:fe:b2:18:f3:dc:1e:1b:e2:af:2a:0a:
         fa:b8:40:30:3d:e3:83:f0:c9:25:5f:1f:85:e7:77:07:7e:f2:
         a7:be:c7:53:ae:6c:06:52:b3:55:ff:32:cf:9e:a2:b4:9d:0f:
         44:e8:52:0e:f2:b1:c5:f5:0c:94:60:55:2f:ce:24:50:00:5b:
         70:4e:41:36:08:1e:02:2f:9d:ec:44:ca:72:52:94:53:85:f6:
         c8:e9:13:79:f2:a9:68:8d:3b:4d:e4:cc:87:60:8c:93:3a:fa:
         01:65:fa:ed:02:e4:11:46:8a:f3:a3:8e:33:89:bc:6e:5d:b7:
         01:c9:d3:79:c4:d3:03:fc:5b:01:11:3b:45:c9:1e:38:a5:b7:
         be:86:c0:d9:a2:5b:8d:c9:ff:9b:e1:53:a1:7e:54:50:a0:ae:
         82:83:33:20:04:ca:40:77:b4:70:5b:b4:0a:1d:fe:73:78:49:
         50:81:0f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:02:08 2025 by rpki-client