Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/c0d3d381-ce71-32c0-b6c3-3faf5f652583.roa
File:                     c0d3d381-ce71-32c0-b6c3-3faf5f652583.roa (raw, json)
Hash identifier:          iPNG4RC9LdfPDltRItJ+Ju4ZGYm8nmRSfZ9X9Xlv9H0=
Subject key identifier:   19:66:D4:8F:9A:5E:D2:48:F7:CA:BE:00:1A:C7:E8:BA:26:06:1C:BE
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584B2CF6E07DD7647514DD06E280
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/c0d3d381-ce71-32c0-b6c3-3faf5f652583.roa
Signing time:             Sat 13 Sep 2025 01:00:33 +0000
ROA not before:           Sat 13 Sep 2025 01:00:33 +0000
ROA not after:            Fri 12 Dec 2025 02:00:33 +0000
asID:                     36103
IP address blocks:        68.70.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2c:f6:e0:7d:d7:64:75:14:dd:06:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Sep 13 01:00:33 2025 GMT
            Not After : Dec 12 02:00:33 2025 GMT
        Subject: CN=5efa6287-b8ee-4613-b864-65655c7dcc2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:0c:73:25:55:ae:7d:ee:39:fa:9f:40:bc:62:
                    a9:0a:7c:c8:ae:0b:ee:4e:0a:22:2c:55:f0:02:2e:
                    56:35:c9:8c:a1:ff:1c:75:7b:96:46:a3:b9:a3:63:
                    72:33:81:16:f2:cf:77:d2:0b:1d:19:26:e4:a4:34:
                    32:f1:07:04:7e:79:ea:6f:ad:61:ca:6f:fa:6b:4c:
                    8c:f1:3e:a3:1a:0d:78:02:5b:22:f8:ed:d2:d8:f8:
                    df:d5:fc:b8:9b:26:3e:90:cf:ed:a3:0d:e9:45:52:
                    12:f2:bf:dd:0b:c4:d9:09:ab:7f:71:80:14:44:54:
                    32:cd:0d:db:1e:9f:f1:3d:3a:80:41:67:ed:b5:1f:
                    1a:16:52:db:c2:33:b7:63:f0:47:20:f9:78:e0:54:
                    a8:28:16:28:d3:18:81:9d:99:f5:49:a9:b4:8f:23:
                    ad:82:95:a0:a9:9a:2a:ff:eb:df:24:de:0c:e9:e2:
                    ab:70:24:bc:17:92:65:0e:5b:c9:56:cb:06:f9:4d:
                    a3:a6:e6:0b:eb:d5:04:80:d6:11:b0:5a:95:3c:79:
                    24:53:6a:3f:df:a8:a0:5a:99:f3:f5:60:94:fc:ff:
                    38:78:9a:8e:b6:79:53:29:32:60:26:37:b9:5d:d5:
                    a0:58:85:d6:25:54:07:4b:72:f6:91:1c:b8:bb:1f:
                    49:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:66:D4:8F:9A:5E:D2:48:F7:CA:BE:00:1A:C7:E8:BA:26:06:1C:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/c0d3d381-ce71-32c0-b6c3-3faf5f652583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.70.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:cd:95:09:78:c7:14:a6:ed:12:a3:c8:ed:de:d0:59:2e:ce:
         ad:9f:60:08:27:4a:2b:93:8d:17:2d:8f:6d:26:07:d5:37:72:
         01:8c:a4:16:77:6e:e5:71:0e:5d:fa:54:66:1f:22:e1:25:2a:
         a2:73:43:ac:3f:40:07:d1:07:82:4f:3c:9c:45:cf:77:47:b3:
         3a:ca:cb:98:18:9e:7c:b1:fd:63:32:35:e0:29:50:90:37:aa:
         17:05:ee:51:2b:79:91:7a:36:52:f7:a4:ee:82:51:69:4e:18:
         ba:6e:b2:2c:bc:f7:40:cd:91:45:86:9f:95:36:3d:74:65:cc:
         41:62:d1:0f:33:d3:21:c8:ac:b1:4f:bd:78:26:0b:96:6d:fe:
         ac:e7:c0:1b:ef:f2:1b:cf:ed:65:43:4b:70:af:d8:ad:78:fd:
         f8:e9:0a:4d:1e:0c:24:18:42:0c:56:6d:dd:01:14:c0:a9:e0:
         db:53:9c:7b:e7:da:0f:f0:85:61:91:75:4b:e6:76:10:55:47:
         2d:38:f0:e6:5b:d9:d2:90:94:94:18:8a:0b:16:2f:f6:e1:77:
         ed:51:c3:d1:c5:cb:92:bd:cf:9f:81:a5:df:99:8b:d1:b4:3d:
         07:00:00:09:01:e5:cf:78:79:e6:6e:20:03:b4:3c:a4:44:6b:
         16:dc:2d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 07:28:54 2025 by rpki-client