Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/7a374813-872b-39b6-8d07-7b6319971a35.roa
File:                     7a374813-872b-39b6-8d07-7b6319971a35.roa (raw, json)
Hash identifier:          58kWjMraobmlmnwROxqYSoK6OM5yf/C/wEbyT5Tc5pY=
Subject key identifier:   72:D6:C1:E9:1F:6C:7D:7B:6C:F2:D5:B1:4D:3D:75:C6:40:AE:87:FD
Certificate issuer:       /CN=0eb1645c-1aee-439b-8505-4341c9574690
Certificate serial:       010D0C9F4328584B153C18E9C9E16959F8493440
Authority key identifier: 8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/7a374813-872b-39b6-8d07-7b6319971a35.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     396239
IP address blocks:        68.69.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:18:e9:c9:e1:69:59:f8:49:34:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0eb1645c-1aee-439b-8505-4341c9574690
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=fe3b9fda-0b5a-4ade-8cf8-06c1b971f621
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:8a:12:21:1a:11:da:58:aa:87:51:34:88:93:
                    a2:cc:aa:fd:fe:17:ad:e5:de:d7:e1:ba:db:4e:f1:
                    14:94:24:0a:e2:93:af:a9:ec:ce:61:bb:3e:dc:a5:
                    70:3c:df:97:53:ac:09:6b:1a:ee:d9:9a:0a:4a:7f:
                    d9:d2:82:df:96:c0:38:f5:bd:36:f6:fd:06:c7:92:
                    51:bd:d7:af:33:10:b3:67:38:a5:ec:59:e6:99:28:
                    cf:4d:ff:9b:45:5d:0c:bc:db:03:a4:8c:a2:8a:67:
                    41:08:16:c0:36:c2:d7:31:03:5a:fc:ee:b0:bb:0b:
                    2c:71:d0:ee:1e:6b:8c:d2:6f:d2:8c:f2:df:83:87:
                    5b:35:0a:71:86:6d:23:cb:5c:0a:12:67:f0:a7:f3:
                    41:a4:8e:c3:1f:62:80:2f:a1:ee:72:f0:0e:a7:fa:
                    b2:7b:c7:2e:f4:eb:7d:3a:3d:d7:05:22:4b:0f:ac:
                    81:1c:bc:ee:1a:64:52:02:61:3d:91:b1:89:3f:f8:
                    55:32:2d:63:3c:ec:e7:c2:51:03:0a:fb:5c:d3:75:
                    14:44:1f:1a:fb:7e:b0:2e:bc:64:c5:6c:f5:29:2a:
                    df:1a:fd:ea:42:2c:5b:dc:9a:c5:32:68:5e:19:95:
                    68:ec:da:d3:e6:be:b6:56:51:7a:c3:a6:c3:75:51:
                    8f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:D6:C1:E9:1F:6C:7D:7B:6C:F2:D5:B1:4D:3D:75:C6:40:AE:87:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/7a374813-872b-39b6-8d07-7b6319971a35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690/0eb1645c-1aee-439b-8505-4341c9574690.crl

            X509v3 Authority Key Identifier:
                keyid:8C:8F:65:60:F6:34:70:EF:39:A8:B0:4C:B4:E7:8D:9C:E9:DA:FF:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0eb1645c-1aee-439b-8505-4341c9574690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:05:9f:f4:2e:51:94:00:55:00:9f:b7:0f:d9:d6:aa:d2:20:
         5a:dd:69:97:f7:7e:a0:00:a7:05:09:33:57:f2:17:ef:b8:ee:
         52:cb:a7:73:dc:75:68:b0:1b:c2:a5:92:35:18:8c:95:6f:98:
         b3:c4:b7:f1:48:45:79:85:d8:fb:1f:08:45:f1:28:69:5f:0e:
         6a:d3:9f:0e:79:c6:d5:af:57:fb:9f:e2:1d:ac:d7:6b:d6:2e:
         bb:4a:92:b6:b5:bf:5e:c7:33:6e:11:01:ba:76:b7:9c:98:59:
         af:55:f0:30:ec:13:8c:3c:4b:bd:23:63:35:81:70:90:3a:06:
         62:de:43:36:d7:54:81:ba:1f:be:be:06:0c:30:cb:31:9b:b8:
         e1:68:d1:35:be:a1:38:e2:0d:cf:5c:0b:4d:57:67:71:8d:40:
         09:87:8e:2c:be:a8:77:15:f5:4d:e8:e2:b2:cd:28:78:ff:88:
         63:24:aa:09:a4:fa:ff:50:1a:1a:07:cd:cb:55:86:45:5f:c1:
         4a:7e:f8:33:ee:c3:cd:72:fe:eb:32:2a:82:a3:4d:f7:97:d9:
         02:38:01:47:fd:31:b0:44:5e:21:d6:44:66:df:ed:b6:4d:9d:
         67:90:fd:d2:00:69:f6:11:ad:1c:94:64:6f:cb:68:2e:7c:18:
         89:c9:bb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:41:42 2025 by rpki-client