Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b6d6eaed-e94f-3370-a18d-e71b1418b89f.roa
File:                     b6d6eaed-e94f-3370-a18d-e71b1418b89f.roa (raw, json)
Hash identifier:          jwh6knvvlW8oHrJdZVJc6H/L2/tO4+Hr+pmAa8hyEKs=
Subject key identifier:   67:DB:87:0A:3A:1B:10:D1:CC:42:54:40:5B:27:68:F2:FC:73:41:51
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B34483417FE4504C79D0CFD80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b6d6eaed-e94f-3370-a18d-e71b1418b89f.roa
Signing time:             Mon 15 Sep 2025 15:55:13 +0000
ROA not before:           Mon 15 Sep 2025 15:55:13 +0000
ROA not after:            Sun 14 Dec 2025 16:55:13 +0000
asID:                     23473
IP address blocks:        68.234.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:34:48:34:17:fe:45:04:c7:9d:0c:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 15 15:55:13 2025 GMT
            Not After : Dec 14 16:55:13 2025 GMT
        Subject: CN=1ec0a87d-7516-4fb4-832c-83849f3c25c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:31:f9:28:92:d1:65:83:7f:bf:da:57:23:51:
                    ff:e0:b9:72:7c:ca:9c:a5:a6:70:44:92:f9:fb:37:
                    27:aa:8f:02:98:d8:b1:bd:52:1c:3d:10:bd:07:79:
                    20:48:9d:23:6b:39:c0:bb:a2:ec:27:f3:f0:71:31:
                    8e:b2:58:a4:6b:ce:d4:e6:60:fd:fa:c6:66:c4:d3:
                    65:a5:44:10:de:07:38:a1:4c:d6:6a:c1:b1:0e:2f:
                    7c:77:c8:6b:8d:4a:a7:73:05:a6:da:af:1e:74:a7:
                    a0:57:bc:94:a7:fe:67:10:87:2f:c9:f5:3b:c4:33:
                    55:5e:01:74:44:19:cb:2c:56:f5:67:82:b0:69:70:
                    e6:f4:a9:fc:ed:ee:28:26:cf:c4:c1:1d:ad:6a:ae:
                    48:12:59:6b:74:c5:6d:16:70:41:8d:0f:4b:77:6b:
                    fe:53:57:32:82:2f:d0:0a:3c:74:8b:74:17:ae:23:
                    88:9a:81:2b:de:01:b1:3a:76:fd:44:b2:33:8b:f8:
                    7e:24:6e:92:44:36:28:46:0e:de:12:fe:ed:ce:4b:
                    dd:06:9f:11:a3:d3:0b:04:4f:07:1e:c0:f7:a4:56:
                    4c:84:7b:1d:47:03:e7:57:c2:26:7b:7b:83:9f:fb:
                    0c:47:bf:36:1c:6b:60:97:24:65:12:cd:c2:15:e4:
                    09:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DB:87:0A:3A:1B:10:D1:CC:42:54:40:5B:27:68:F2:FC:73:41:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b6d6eaed-e94f-3370-a18d-e71b1418b89f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.234.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:4f:3a:a6:68:82:e6:48:27:4b:77:29:80:af:e1:d0:e5:7c:
         f5:0b:1f:30:bf:81:83:34:ba:b2:80:d8:1a:41:83:01:fb:17:
         35:57:4d:b8:6a:6e:d1:88:c8:cc:d6:af:a1:82:25:79:e8:f9:
         e1:91:6d:8a:29:02:cf:02:57:bc:d1:4b:fb:d7:1f:ac:a1:63:
         dd:99:a5:1b:6d:1b:b8:92:26:1f:8d:a8:b7:29:1f:61:07:cb:
         3a:a2:a2:fa:bd:c9:a6:c2:e1:de:64:dd:1d:f7:74:f2:f6:b5:
         e4:27:63:9c:ac:69:15:e4:df:e2:6b:ba:72:be:c1:2d:4d:e6:
         76:bd:9a:65:94:07:6e:56:00:21:4d:aa:46:fb:0f:ac:65:9b:
         5a:ee:e1:d7:94:99:2f:22:de:ad:62:fa:5c:70:11:ce:83:fe:
         bb:dc:2b:a5:6d:57:72:a1:48:d8:b5:be:05:55:bf:b2:18:d7:
         27:07:84:62:43:ae:2e:db:17:ea:5d:32:26:8b:2c:27:40:ae:
         6c:6c:75:28:47:8a:21:92:2f:f8:6b:8d:dd:2d:51:80:fd:65:
         6d:7c:ec:cd:b9:05:e5:df:ff:a0:0e:84:28:2b:1b:0c:32:18:
         ce:74:1d:ca:56:6c:d2:17:94:76:1f:62:53:09:80:d8:59:ba:
         95:86:ae:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:58:23 2025 by rpki-client