Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4ece6061-cb22-3d58-97e6-f288540f6991.roa
File:                     4ece6061-cb22-3d58-97e6-f288540f6991.roa (raw, json)
Hash identifier:          uTI0skrwlooeKqhNjmEuGzYq/3z1tVkTWxsp8B2/p+c=
Subject key identifier:   A1:10:64:A1:50:0C:24:67:B5:95:BA:59:99:7D:81:4A:61:BB:8B:FF
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B37319F7C503E9BDB8711BF59
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4ece6061-cb22-3d58-97e6-f288540f6991.roa
Signing time:             Tue 16 Sep 2025 16:57:09 +0000
ROA not before:           Tue 16 Sep 2025 16:57:09 +0000
ROA not after:            Mon 15 Dec 2025 17:57:09 +0000
asID:                     23473
IP address blocks:        68.234.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:37:31:9f:7c:50:3e:9b:db:87:11:bf:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 16 16:57:09 2025 GMT
            Not After : Dec 15 17:57:09 2025 GMT
        Subject: CN=663e9b91-44ad-4264-bcc4-9c124ac00758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:15:ff:f8:70:1d:60:e2:66:df:28:11:88:9e:
                    e3:c1:4c:77:36:fb:44:15:06:1e:00:3f:22:df:39:
                    0c:28:c8:f4:56:d5:c0:e5:02:99:64:a8:77:e5:45:
                    1d:63:13:ff:23:ac:ef:c3:8e:be:0a:9b:cb:a7:b2:
                    9a:4d:a6:f0:f6:13:95:e2:d2:3f:69:71:07:5b:0a:
                    5e:71:cd:0b:c0:52:9e:e0:7c:d4:83:fa:2c:84:76:
                    75:5b:1c:9d:20:12:d4:fe:d0:3e:fe:a3:3d:55:70:
                    b9:d3:47:bf:e4:92:04:b3:98:ef:43:d8:b4:49:aa:
                    b3:ae:e9:5f:8b:ba:81:92:7e:ad:e4:d9:54:44:c9:
                    09:b3:89:31:f4:a1:bc:e9:8b:c5:60:58:11:87:b0:
                    18:4f:68:f5:7f:18:f6:4d:51:42:63:7e:16:fc:dc:
                    7b:a9:d0:23:23:52:de:3d:b0:5f:e3:1f:32:de:95:
                    78:e0:3a:85:4f:f8:8c:ce:7f:67:33:1c:63:d9:81:
                    81:d7:89:a7:bd:6b:18:5a:b7:d5:55:41:ae:8c:4a:
                    8b:2f:65:c2:a2:f0:8c:51:bc:6c:60:c2:2a:d1:2f:
                    58:08:67:f8:c0:59:59:0d:f0:b0:25:de:66:6e:45:
                    a8:d7:6d:b7:50:fd:c7:72:0a:19:5d:c6:3d:ad:17:
                    06:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:10:64:A1:50:0C:24:67:B5:95:BA:59:99:7D:81:4A:61:BB:8B:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4ece6061-cb22-3d58-97e6-f288540f6991.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:92:28:d1:cb:96:90:21:cd:6a:70:92:96:47:f4:f1:99:37:
         54:94:60:d9:40:d5:8f:a3:9b:ad:32:53:64:a7:99:b4:b6:fa:
         80:6c:75:2a:4e:15:8c:14:68:03:c2:4e:20:4b:ea:0e:08:84:
         d0:28:f2:f0:1f:5a:8f:ad:9b:48:3e:6e:ac:a2:b5:5d:b8:d7:
         83:df:51:6a:d4:c1:4f:db:cf:f3:1b:5a:8a:c9:a9:46:54:05:
         6e:91:b5:24:5f:b8:48:62:99:86:bd:b0:c3:95:61:1e:1d:43:
         32:df:88:66:39:9f:90:ef:97:01:3e:b4:73:2d:12:8d:39:52:
         b5:e3:59:95:6f:80:e9:fc:7a:f2:12:e2:a8:7a:68:29:de:61:
         cf:6d:c3:25:01:c2:97:a8:e4:8d:22:ef:4e:bb:18:c4:7d:d8:
         f5:9c:37:57:98:cb:36:41:dd:11:64:6d:ab:f8:9f:4f:73:7e:
         1c:a9:54:ec:2a:7a:42:b6:7a:6d:4e:06:5c:36:ff:7d:d0:05:
         2d:4d:cc:fe:58:c1:19:da:17:4e:41:14:2e:bd:a6:7a:a1:39:
         7c:4a:99:d1:07:07:8d:e8:f3:18:df:5e:6d:d6:47:f7:da:2f:
         bd:dd:95:ba:d0:4d:08:b1:bd:07:44:24:84:b2:7d:ee:f7:a1:
         35:8c:20:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:46:44 2025 by rpki-client