Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c03aa3f4-b43c-30e5-8f5e-4227f1571a9e.roa
File:                     c03aa3f4-b43c-30e5-8f5e-4227f1571a9e.roa (raw, json)
Hash identifier:          L3P3yOt3EbP95hs2Io63NkKKPAunKOW9ja3z3FWF9Po=
Subject key identifier:   12:D9:BC:A6:8A:61:52:9A:89:8D:98:D8:AC:E5:8C:2F:59:79:06:2F
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584B296FA039E957D6E64693A000
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c03aa3f4-b43c-30e5-8f5e-4227f1571a9e.roa
Signing time:             Thu 11 Sep 2025 18:40:45 +0000
ROA not before:           Thu 11 Sep 2025 18:40:45 +0000
ROA not after:            Wed 10 Dec 2025 19:40:45 +0000
asID:                     23473
IP address blocks:        68.180.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:29:6f:a0:39:e9:57:d6:e6:46:93:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Sep 11 18:40:45 2025 GMT
            Not After : Dec 10 19:40:45 2025 GMT
        Subject: CN=8bd1dc00-9e23-4ab7-ad67-d89d3a8c7011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5a:6a:70:24:41:94:68:8d:ca:d0:5e:ef:74:
                    f9:b4:27:40:d7:2d:6c:47:27:4e:77:d5:ec:aa:dc:
                    2d:b7:7b:e0:4d:e8:2b:4e:23:eb:f9:1f:fa:b0:f5:
                    a9:de:d2:24:59:b5:65:49:12:1f:10:d1:e5:57:2d:
                    c9:7e:d4:cd:68:f5:0b:cd:75:b0:8f:57:13:b7:56:
                    35:3e:62:f9:69:c4:55:82:30:f7:78:72:d0:e2:b4:
                    1e:f1:40:3e:f8:18:89:9f:7d:70:c5:cc:75:d9:0c:
                    e2:a8:09:a1:2d:6e:97:47:bb:af:7f:57:09:28:37:
                    02:e1:b9:1f:59:96:37:3f:8d:68:37:89:10:88:57:
                    d1:bb:55:2c:5c:f6:fa:20:73:9f:72:ba:6f:25:8d:
                    07:83:ec:26:64:ce:8e:04:2f:6c:3b:4d:5d:86:19:
                    e0:d8:57:c3:d5:ad:df:e7:98:d1:9d:1c:b7:7a:01:
                    8a:5c:ac:31:8b:3a:f9:42:a1:34:96:d6:16:bb:5a:
                    2e:5d:93:4d:96:88:cc:f2:15:dc:d4:ba:6d:c0:c0:
                    98:36:c1:20:8d:81:4c:bc:98:aa:51:2a:89:c0:30:
                    3c:7f:07:0b:44:54:34:81:de:b8:d7:1a:e0:24:ea:
                    d7:e9:33:84:49:ec:76:55:07:5b:34:86:fc:d7:5b:
                    4b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D9:BC:A6:8A:61:52:9A:89:8D:98:D8:AC:E5:8C:2F:59:79:06:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c03aa3f4-b43c-30e5-8f5e-4227f1571a9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ef:56:41:7c:0a:e4:04:a7:0c:20:50:1d:46:0e:d7:6f:bd:
         0a:a8:49:d0:a8:20:5a:14:c2:fe:47:64:ea:0a:cf:bc:71:55:
         60:1b:65:2d:11:cf:5d:ce:9a:45:d0:e8:57:ef:b2:b6:0a:d3:
         08:cd:5e:43:44:3e:1e:fe:eb:71:2e:33:27:88:27:48:09:29:
         42:bb:77:8f:44:25:61:33:c5:0b:fa:a1:61:89:5e:5f:ef:12:
         bd:b7:a7:f2:5c:06:46:99:d8:24:ba:c8:5a:7d:72:38:10:85:
         df:0d:98:e7:50:e1:eb:32:36:74:c3:5f:be:0a:01:7f:ef:dc:
         67:a6:b5:ec:5f:f5:a5:59:c2:d4:17:32:87:4a:18:85:4f:5d:
         a1:93:d7:4f:3a:c6:64:ce:94:33:e3:6d:28:69:e6:b9:5e:eb:
         11:3c:17:5f:bd:fc:91:53:41:01:73:b5:90:90:41:cc:c8:15:
         d6:bf:c5:37:06:f4:8e:6f:51:fc:e2:33:a4:58:29:c2:c1:45:
         5f:21:56:f6:1c:c0:8a:92:28:9b:91:76:f6:0e:f4:cd:c7:81:
         96:10:f4:1b:1e:15:12:18:48:f6:43:a6:dc:17:2c:32:2d:be:
         2c:5b:be:6b:dd:dc:75:56:a2:04:80:77:78:14:a6:92:dd:e5:
         ef:c8:d5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 03:58:34 2025 by rpki-client