Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa
File:                     2d398258-1b86-35d8-933f-e3df7eab5377.roa (raw, json)
Hash identifier:          nt9GWTaClEkRD0Ll7M95hdB/NUbZeKkWsWC59r+33Fs=
Subject key identifier:   1E:B9:90:6B:78:93:EB:14:75:0E:63:8D:47:26:26:77:6C:E3:9D:4B
Certificate issuer:       /CN=0eb1645c-1aee-439b-8505-4341c9574690
Certificate serial:       010D0C9F4328584B153C18CDA01F2E8153CAD440
Authority key identifier: 8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     396239
IP address blocks:        68.69.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:18:cd:a0:1f:2e:81:53:ca:d4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb1645c-1aee-439b-8505-4341c9574690
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=56f09bab-3019-487b-986f-0d036cdeedb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:23:8c:07:59:93:45:c2:27:a0:38:08:24:a0:
                    64:71:7f:c7:33:ea:b0:da:39:6e:d1:cb:f1:a9:25:
                    21:cd:4e:97:d1:d9:32:ba:46:1f:f0:61:3b:72:e3:
                    7c:b2:a8:ea:38:59:1b:6e:3d:2a:4d:aa:b2:b7:fb:
                    de:5b:c9:f5:01:f3:c3:73:65:49:47:4b:37:71:bf:
                    23:cb:fa:b7:de:53:24:2d:0d:11:f7:4f:1b:6f:9b:
                    ad:81:28:d7:56:5c:b7:1c:6f:50:16:77:04:00:ba:
                    63:0e:f0:c3:45:e5:c7:2e:9f:e8:75:e8:da:51:5c:
                    85:25:f6:a3:80:90:e6:13:10:cd:fa:be:32:e9:21:
                    7a:e6:86:b3:d2:f1:4c:cd:1e:c5:1e:e4:f0:25:02:
                    c3:9d:d2:21:db:b7:b1:c0:98:e9:33:3a:7f:24:cb:
                    32:5d:ac:a1:9a:bc:57:f3:28:20:e8:73:c2:30:41:
                    01:d0:54:87:24:7b:81:b2:c6:89:8f:79:38:b0:90:
                    bb:a4:5f:9e:55:3d:8a:44:5d:02:ee:1b:58:d0:47:
                    af:9a:13:52:5e:2a:14:d0:56:12:8b:6f:13:76:1b:
                    24:70:0d:75:cb:dc:65:e8:ac:ab:77:a7:4e:46:bf:
                    62:b2:8d:92:ef:50:1b:a2:4f:a8:b5:09:31:6c:83:
                    dd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B9:90:6B:78:93:EB:14:75:0E:63:8D:47:26:26:77:6C:E3:9D:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/2d398258-1b86-35d8-933f-e3df7eab5377.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl

            X509v3 Authority Key Identifier:
                keyid:8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d7:ae:88:03:48:9d:fb:93:3a:29:18:1b:a7:0d:b7:fb:a6:
         6b:bd:ac:60:72:f0:72:7b:b0:b3:95:f4:10:73:5a:4b:75:31:
         2f:f7:b2:87:49:43:f7:fb:34:29:19:2c:0c:2f:7f:1e:ed:cc:
         ef:f0:54:6c:22:3f:ce:ec:98:c7:fb:77:25:d5:f4:d9:41:2c:
         cc:94:ab:7e:9c:b2:b0:69:81:c0:98:24:b0:e3:f5:3d:e0:9a:
         cb:2b:b2:88:de:e0:d7:3b:1a:99:1a:62:f6:eb:65:a1:af:96:
         3d:22:d3:9d:54:60:e6:d0:21:4b:55:12:4c:43:b2:35:2b:eb:
         1e:9b:d8:97:31:e5:be:59:49:79:17:b8:d5:30:a8:32:d3:70:
         b7:1f:e9:61:6c:90:08:34:a9:0d:a4:0f:33:ab:ad:cd:5d:a6:
         83:2d:b9:4d:c2:be:6a:cf:8b:6a:69:9e:21:bf:3b:24:bf:81:
         b8:2a:4e:51:a9:6d:67:e1:40:59:e3:3c:8f:16:fd:7f:ba:e6:
         9f:c1:ea:f9:90:af:83:6d:13:7b:d9:48:5f:27:2f:be:56:8c:
         e2:f6:53:da:55:56:6b:58:b9:a0:1f:ea:7e:1a:31:bd:52:d1:
         47:4e:78:95:1a:2a:e3:4a:46:80:d6:e2:39:f9:0d:1a:18:95:
         69:2d:b9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:38:45 2025 by rpki-client