Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/c8effb7c-3ff5-367a-9768-2bfe031beb26.roa
File:                     c8effb7c-3ff5-367a-9768-2bfe031beb26.roa (raw, json)
Hash identifier:          9Jr2XyjB8ZYLmyLxk5qahu/SNx9Yw2PowASo0kWu0eQ=
Subject key identifier:   8D:0F:67:E2:F9:98:E7:A3:A6:AB:AF:C9:0B:12:59:77:8D:69:01:52
Certificate issuer:       /CN=f4f85718-cda0-442f-9727-709a536e1e27
Certificate serial:       010D0C9F4328584B8EACC3E64A0FD9A10086EA40
Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/c8effb7c-3ff5-367a-9768-2bfe031beb26.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     6639
IP address blocks:        209.27.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ac:c3:e6:4a:0f:d9:a1:00:86:ea:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=504cf2ea-46b1-41e5-87cf-8c9ee48c99e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:89:55:17:b3:d7:3d:04:50:7b:de:9f:d3:61:
                    d2:36:7c:1d:20:8d:2d:b4:c4:0b:3f:21:b6:84:4b:
                    cd:e3:e6:32:4b:4b:74:46:ad:ff:c5:49:02:60:11:
                    09:1f:8a:71:62:3a:1d:cf:70:d0:6c:15:72:4a:14:
                    bc:a6:0e:f2:d1:f8:6b:33:52:ed:bd:37:1d:df:02:
                    53:35:b9:cc:aa:df:da:2a:73:93:a1:ac:60:10:bf:
                    49:68:d3:e1:42:bd:c0:77:0e:c7:e9:bf:26:c0:0c:
                    67:cf:e5:a7:df:13:a0:36:02:23:5e:db:a5:3a:ff:
                    5a:16:91:33:ef:16:92:3c:41:20:35:8d:c2:1e:87:
                    88:7d:aa:57:da:3d:76:a4:60:b8:ed:a2:cb:b0:f3:
                    ca:09:be:ba:a8:fc:38:db:bf:61:70:2d:71:32:b6:
                    7f:0a:71:09:3a:4e:df:3f:06:95:73:5b:5a:1c:db:
                    96:03:30:ac:8a:89:3e:c9:c1:ce:43:d3:5a:ef:71:
                    ea:c6:d9:45:e5:b4:41:28:a5:22:0a:e5:34:8e:81:
                    66:4c:f5:8d:08:4a:83:27:62:6f:fc:c5:c1:99:20:
                    32:be:15:87:8d:36:90:cf:7a:46:6d:e9:ab:1c:66:
                    3b:67:b7:33:a2:d5:85:df:73:49:ef:94:98:46:85:
                    19:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0F:67:E2:F9:98:E7:A3:A6:AB:AF:C9:0B:12:59:77:8D:69:01:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/c8effb7c-3ff5-367a-9768-2bfe031beb26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl

            X509v3 Authority Key Identifier:
                keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.27.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:e4:92:6e:0b:df:10:a1:bb:6d:84:4b:9c:90:3d:60:fd:54:
         04:23:3b:8a:45:c3:be:3c:e1:27:ba:43:25:80:bc:36:38:1e:
         35:14:84:fc:b0:11:6d:0f:a4:6e:7f:76:17:6d:17:9c:ca:f8:
         54:9d:23:2b:0f:fa:2a:8a:c7:18:6a:06:01:da:f1:85:a1:b4:
         e4:8a:c3:18:68:1b:1e:59:1e:12:c8:aa:24:72:16:9b:e3:f3:
         96:cd:36:34:a5:db:40:d1:85:5f:e7:4f:b9:7a:2e:5c:a1:5c:
         5a:e6:cf:ca:18:42:12:d5:cf:2a:03:a3:eb:5e:c4:99:84:69:
         b4:db:bb:22:f8:3c:0b:f9:63:13:3a:be:e1:35:c5:bc:a4:06:
         08:05:2e:66:2e:df:77:31:a3:f9:6b:d9:02:d1:ed:df:b0:03:
         e4:e8:45:e0:12:3c:a9:6f:5c:83:a3:3e:23:0b:d9:77:d9:96:
         21:19:89:84:fc:85:a7:ed:5c:cb:78:b6:90:da:6c:29:87:06:
         1a:79:06:e5:64:5b:5d:0f:8c:fb:c3:ea:ac:ef:be:12:e0:32:
         a1:3b:b2:a2:f4:e9:58:a7:be:a5:01:5f:56:47:59:6f:a3:63:
         5e:ef:45:f4:05:59:4f:1c:1f:f1:2b:fc:40:44:6e:2d:68:c4:
         26:61:de:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:19:18 2025 by rpki-client