Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/48fd603b-32a7-3914-8971-7bbb10a51a4e.roa
File:                     48fd603b-32a7-3914-8971-7bbb10a51a4e.roa (raw, json)
Hash identifier:          /XY6g0bIf6+O0wk3Cm71xDVMnqISzBwFiSX9i9p64GI=
Subject key identifier:   79:06:11:8B:AB:55:60:1C:B5:BE:C3:3F:3C:FD:1F:1B:00:44:6F:DC
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584B2CF6E06823F533D5288BAD70
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/48fd603b-32a7-3914-8971-7bbb10a51a4e.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     36103
IP address blocks:        68.70.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:e0:68:23:f5:33:d5:28:8b:ad:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=d31aeace-61e6-443e-a490-5924ee008304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:47:3f:4e:3e:85:dc:42:97:21:42:95:60:51:
                    be:d1:9e:8b:c9:07:5a:b4:3b:d9:f2:fb:f4:e1:52:
                    9e:90:bd:cc:f7:8f:95:2e:81:ca:13:ff:d9:af:81:
                    6b:bf:21:36:cd:7b:a4:61:cc:32:37:e5:fa:4c:86:
                    6f:fb:22:2c:df:da:54:c1:3e:ee:13:19:16:1d:e1:
                    03:13:72:08:9b:f5:d2:6e:f7:87:4e:0c:03:c2:ea:
                    79:32:a6:19:47:53:f6:6c:d3:cf:ed:a9:1f:6c:b4:
                    2b:4b:c1:37:ab:bf:f2:13:07:30:71:f0:e3:82:76:
                    c1:54:89:b2:75:27:1b:8a:1d:21:12:f8:99:56:76:
                    9c:74:c8:42:52:b1:c8:a9:0d:bc:b0:94:9b:de:88:
                    c5:65:54:65:67:b6:c4:5d:ab:0b:9b:ba:26:e5:f4:
                    bc:82:08:17:7e:ff:7f:96:c1:cb:21:57:d7:fc:ff:
                    cb:e3:56:98:0f:ee:48:fe:97:6a:84:d2:4d:24:3f:
                    64:59:d9:a3:52:3d:d2:90:7b:1f:48:66:07:cc:40:
                    10:11:b4:d3:32:50:14:de:5f:70:8a:77:48:20:2a:
                    e5:78:ac:f9:c1:04:18:84:ee:e6:76:15:47:f0:91:
                    7a:46:50:9b:e8:71:2c:9a:f7:8b:04:06:ca:35:65:
                    fc:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:06:11:8B:AB:55:60:1C:B5:BE:C3:3F:3C:FD:1F:1B:00:44:6F:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/48fd603b-32a7-3914-8971-7bbb10a51a4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.70.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:e7:f3:5b:8a:a0:69:fe:0a:dc:a2:ae:ad:ba:b8:8d:e0:b4:
         87:cd:b8:97:aa:57:86:c1:b3:a2:22:3c:9a:e2:ce:eb:dd:82:
         17:71:16:d8:ae:06:6e:fd:a4:1d:4f:0f:45:05:ec:08:80:bd:
         29:b2:97:60:3b:2f:bb:31:d7:ca:de:3d:77:e3:fc:be:a3:fd:
         a3:1a:73:56:ec:f2:28:61:53:6e:2f:9b:f9:58:36:8a:dc:26:
         d8:3c:3a:3f:c3:55:47:ba:96:5f:36:59:f9:2a:e0:ef:ea:44:
         98:3f:a9:b0:2f:a6:10:88:c0:01:6c:e5:1f:66:7b:22:ec:78:
         0f:09:a1:f7:56:71:29:68:e4:b7:ea:1f:b7:d8:6f:42:59:77:
         11:18:71:ba:e3:52:74:64:b8:02:5a:d5:e9:a4:36:1d:a7:8b:
         56:3c:9c:6a:a4:d3:d2:fb:f7:40:78:d6:e2:65:3a:3d:ed:b1:
         c9:cd:b5:9e:23:56:2f:bf:e3:7c:85:47:87:bb:7c:2e:68:4f:
         4b:9e:75:0c:30:76:00:4d:70:0a:31:3c:b4:7d:f2:12:10:4c:
         46:a3:b0:0b:b1:34:3d:a5:bc:0c:d8:8a:ec:dd:e5:28:98:b1:
         78:33:f6:5f:6e:9e:08:9f:20:89:f7:f8:50:71:6a:51:a0:5c:
         03:00:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:27:54 2025 by rpki-client