Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa
File:                     7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa (raw, json)
Hash identifier:          2KaZ2gn9gJJzx/9syEFJYYkoKd/R4CMAN7xFLOgkFQQ=
Subject key identifier:   82:FF:B5:88:CE:C8:D5:A5:71:9F:05:7C:47:B4:84:D1:13:F1:55:42
Certificate issuer:       /CN=3f8ce937-b65c-4889-8a3c-145d71949e14
Certificate serial:       010D0C9F4328584A8575EC43F7ED644EDCDFBFC0
Authority key identifier: 73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa
Signing time:             Tue 15 Jul 2025 01:00:49 +0000
ROA not before:           Tue 15 Jul 2025 01:00:49 +0000
ROA not after:            Mon 13 Oct 2025 01:00:49 +0000
asID:                     149522
IP address blocks:        68.69.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:85:75:ec:43:f7:ed:64:4e:dc:df:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ce937-b65c-4889-8a3c-145d71949e14
        Validity
            Not Before: Jul 15 01:00:49 2025 GMT
            Not After : Oct 13 01:00:49 2025 GMT
        Subject: CN=beda17ba-a271-41ad-84ad-ab5f30fd55ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:47:c9:98:9d:cf:44:07:d9:d3:4b:e4:3a:
                    c5:f6:f1:ed:69:ea:35:98:de:c9:1f:c3:4d:04:4e:
                    fb:41:ea:b9:c6:fe:96:21:8f:1c:1e:2b:5b:93:01:
                    54:11:c4:b3:31:98:20:dd:5e:74:ea:d1:56:b9:2c:
                    4f:54:b3:4b:92:95:6d:bc:7e:b4:47:32:49:42:fb:
                    83:c9:9b:ee:57:df:3b:b7:05:a7:1a:22:52:c9:38:
                    08:76:9d:52:60:bb:a0:80:fd:b1:f6:62:29:10:f4:
                    c2:9e:bd:34:9f:e8:1e:84:69:b0:34:82:3e:4e:b3:
                    09:3f:01:86:b6:17:e7:e2:e4:72:ae:c6:21:23:30:
                    e6:a6:fb:fd:63:6b:09:26:24:ff:ed:cb:c4:07:4d:
                    9d:60:e6:9b:ca:e0:9e:50:d3:40:fb:53:30:a2:0e:
                    5e:06:5b:89:3a:71:65:42:0b:cd:42:c0:8b:79:e2:
                    4a:9a:e8:f5:0d:7f:1a:40:34:ac:3f:d6:1a:6c:64:
                    21:50:47:00:7e:c7:4a:b8:3f:a1:74:8f:86:6e:c1:
                    9c:b0:4d:88:be:27:7b:e8:d8:0f:17:32:2c:a0:36:
                    24:27:61:e5:85:39:e4:2e:88:87:ce:ef:7b:b7:c0:
                    44:c0:40:81:eb:d9:ec:73:14:87:3a:fb:ed:70:43:
                    8c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FF:B5:88:CE:C8:D5:A5:71:9F:05:7C:47:B4:84:D1:13:F1:55:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl

            X509v3 Authority Key Identifier:
                keyid:73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:21:9c:91:4f:7a:f5:b6:dd:e1:b1:c6:f2:65:a5:61:1a:8f:
         c7:83:a9:94:af:75:b4:16:5d:cc:f4:6d:86:26:de:8d:2e:02:
         1b:04:ba:75:f2:cd:56:92:9d:c7:e2:cb:3b:dd:9c:e4:96:77:
         94:48:ca:c4:07:53:dc:c3:4a:53:33:8c:97:4b:76:30:c1:0a:
         89:10:85:32:35:1c:35:a5:fe:bc:d3:a5:85:bc:fe:9f:87:4b:
         59:ec:86:ae:52:01:5c:39:74:61:03:c7:06:ee:0d:76:1b:37:
         df:8c:ef:f9:34:08:4f:80:13:07:dc:a7:a0:6a:91:07:cf:54:
         0a:4a:a1:30:d7:6a:70:44:31:a5:2f:94:ab:f5:65:fe:d2:de:
         e1:ce:04:fb:da:36:c2:9c:d8:5e:ba:fd:b7:d0:01:7b:31:72:
         6c:3b:cd:1c:3d:cf:79:8f:c8:c5:da:fa:f7:42:6b:73:66:5f:
         4c:7c:9d:e3:76:60:c4:89:ac:1b:b2:15:98:c1:57:ba:5e:85:
         31:8a:9a:a3:dd:63:01:76:79:ec:5b:b0:64:5d:48:6f:88:0d:
         80:ce:24:36:72:be:03:90:fc:a2:f5:54:82:ec:85:0c:75:3c:
         59:a7:82:af:80:78:06:d9:90:6f:b4:76:d1:ac:49:dd:59:b4:
         04:52:55:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:56:30 2025 by rpki-client