Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/f1be4de9-e20f-315c-a751-f51dffa6b7f0.roa
File:                     f1be4de9-e20f-315c-a751-f51dffa6b7f0.roa (raw, json)
Hash identifier:          X2Ah3oYeKhpVxu3zXH2bqhtda7kChqRLTrhegl2JETQ=
Subject key identifier:   86:11:5B:CB:E6:79:B7:C0:5C:42:44:6D:C6:5B:98:44:D8:FF:2F:BA
Certificate issuer:       /CN=960e110b-8a58-4e15-a2f1-8d907656427c
Certificate serial:       010D0C9F4328584B891763F1549F2A39B3F06D00
Authority key identifier: 1B:8B:A7:24:1A:10:34:E8:30:A4:63:8A:E8:A3:A7:8D:0E:5D:9D:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/f1be4de9-e20f-315c-a751-f51dffa6b7f0.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     14618
IP address blocks:        69.10.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:63:f1:54:9f:2a:39:b3:f0:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=960e110b-8a58-4e15-a2f1-8d907656427c
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=b0749784-a8b6-41ec-a034-072dcb2b5e7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a5:41:fd:00:a4:b9:9b:d9:c1:79:26:4a:ac:
                    fb:a1:5a:5c:56:1c:bf:d9:9e:45:be:02:4d:2a:d2:
                    bd:a3:0b:38:bd:3b:1e:58:64:39:18:58:c5:a6:88:
                    46:2b:de:2c:ae:4d:3e:a9:9c:54:58:7d:9e:c0:f0:
                    1d:8e:4e:52:3e:f4:2e:7c:f2:f8:1e:28:7b:f4:d8:
                    5e:46:0d:77:97:58:a3:df:d1:2a:f9:b3:e4:be:06:
                    42:e5:e0:98:a3:72:28:4a:36:db:7a:88:81:a4:31:
                    ac:e8:2a:e6:09:b9:77:64:29:c5:ad:f3:72:74:e7:
                    3d:60:3f:ec:f7:98:52:d1:5b:5d:8c:b3:7a:1b:46:
                    15:ff:a9:7d:39:93:d7:d0:da:36:fb:91:6a:2c:8a:
                    50:24:5e:78:c7:57:4a:34:16:36:6b:c2:79:92:15:
                    18:4c:eb:b1:d5:75:c0:06:76:b7:91:5f:bb:2b:c7:
                    3b:54:9c:cc:0b:8d:00:60:09:5a:3f:be:da:6d:38:
                    23:76:81:4d:d5:3c:73:8d:34:0d:dc:36:e7:9b:14:
                    24:82:cc:a6:19:1c:23:ee:f1:76:81:18:76:bb:2a:
                    82:c1:00:c3:e8:88:e6:ea:49:f9:3b:9c:83:b4:51:
                    47:8a:9a:d3:a0:82:b7:5b:4b:ba:5c:42:ec:82:2b:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:11:5B:CB:E6:79:B7:C0:5C:42:44:6D:C6:5B:98:44:D8:FF:2F:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/f1be4de9-e20f-315c-a751-f51dffa6b7f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c/960e110b-8a58-4e15-a2f1-8d907656427c.crl

            X509v3 Authority Key Identifier:
                keyid:1B:8B:A7:24:1A:10:34:E8:30:A4:63:8A:E8:A3:A7:8D:0E:5D:9D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/960e110b-8a58-4e15-a2f1-8d907656427c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.10.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:4b:6d:80:f9:40:38:f2:a8:9f:f1:af:9e:5a:17:7e:26:64:
         46:9a:ce:5b:6a:cf:31:b5:b8:92:09:2a:98:ca:81:99:72:da:
         a7:3d:58:23:4f:5f:65:43:ee:a9:79:91:fd:6c:86:23:cf:5a:
         17:4b:34:2e:14:a0:f5:a7:2d:c0:1d:1c:82:bb:c3:b6:61:b9:
         34:94:1c:cf:54:e1:47:9b:ba:2f:a1:73:71:17:d0:42:5f:bb:
         1f:28:1d:b3:92:95:8f:83:5a:1b:af:cc:bc:26:eb:03:90:bd:
         20:ef:a4:d0:18:98:95:15:1b:35:b1:4a:81:b8:57:19:83:b8:
         30:9a:6d:59:7d:46:ab:03:fb:a5:78:50:a1:30:f3:48:29:30:
         16:0a:a6:23:05:fd:b7:c6:45:6f:94:28:fd:ac:8c:cd:66:6c:
         a6:48:42:ac:ee:37:a4:e4:d3:e7:48:9d:38:57:89:8b:4b:61:
         da:41:0a:cd:a8:43:4a:55:a3:ce:9b:a6:2d:fe:80:50:7f:09:
         66:73:f2:20:ee:32:f3:1b:ad:51:58:85:30:1d:17:79:4c:b8:
         e1:c1:55:00:4e:91:bc:c1:33:c1:01:06:e8:fb:16:4c:71:a6:
         ff:96:78:13:9c:74:cf:5f:0e:60:13:27:48:2d:c8:c6:fd:53:
         cb:16:45:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:10:45 2025 by rpki-client