Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/7c39b49b-d4f3-3baf-902f-83a43c864e62.roa
File:                     7c39b49b-d4f3-3baf-902f-83a43c864e62.roa (raw, json)
Hash identifier:          64gXveLCbCTV+Xq9/Jk6J8ElnCTUsQnetyzVb/q4Qrw=
Subject key identifier:   49:E5:9D:7D:84:58:1F:A6:5F:23:8A:B1:02:EF:96:EA:10:04:59:97
Certificate issuer:       /CN=68dde036-7a4c-4a69-930a-c6ac94a87e56
Certificate serial:       010D0C9F4328584B047C0E3D4C99CAC482C53B20
Authority key identifier: 6C:C2:8C:B2:DE:FF:56:76:1D:35:CF:47:00:09:3D:94:61:40:B0:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/7c39b49b-d4f3-3baf-902f-83a43c864e62.roa
Signing time:             Fri 29 Aug 2025 13:00:41 +0000
ROA not before:           Fri 29 Aug 2025 13:00:41 +0000
ROA not after:            Thu 27 Nov 2025 14:00:41 +0000
asID:                     36704
IP address blocks:        138.67.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/68dde036-7a4c-4a69-930a-c6ac94a87e56.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/68dde036-7a4c-4a69-930a-c6ac94a87e56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:04:7c:0e:3d:4c:99:ca:c4:82:c5:3b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68dde036-7a4c-4a69-930a-c6ac94a87e56
        Validity
            Not Before: Aug 29 13:00:41 2025 GMT
            Not After : Nov 27 14:00:41 2025 GMT
        Subject: CN=ffd37b6e-ec5e-430b-8df2-fa9a70ce1941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:48:7c:a9:92:f4:ff:20:62:2a:9e:04:a2:de:
                    d6:9b:f8:60:b0:2a:89:ae:4f:64:4e:0a:41:73:cb:
                    8d:f1:7b:8d:88:c2:0c:65:5d:9c:17:2b:7a:ea:79:
                    c7:6c:64:17:9b:2b:98:e5:72:a1:8c:c6:e5:a5:43:
                    a2:bf:45:83:ef:1e:08:36:42:ab:93:84:d3:52:30:
                    82:2f:48:06:b4:16:f0:73:c1:1a:d0:43:e1:2d:dd:
                    27:aa:10:f7:58:c1:9c:89:25:fa:f9:64:81:6e:01:
                    96:be:78:8a:50:d5:6e:d6:a9:0f:76:14:90:30:49:
                    58:80:68:bd:17:22:ec:dd:f0:20:8e:d9:72:5d:4a:
                    4b:b1:ae:7a:72:8b:41:61:9d:94:de:44:dc:54:cd:
                    88:5f:f9:83:af:5c:ca:9c:ea:83:dd:da:cc:45:1b:
                    3e:8e:81:94:0f:05:53:92:26:fa:5b:90:b3:ba:26:
                    eb:f2:58:9b:a1:02:ea:7e:46:95:ea:8d:ca:04:38:
                    28:f7:d4:f1:ed:ff:ab:6b:6f:23:88:c1:c8:39:da:
                    5a:55:e0:01:b9:c6:eb:16:31:59:ac:fb:22:e2:85:
                    9c:01:d6:3d:cc:1e:c3:6d:69:cf:6f:6c:95:03:38:
                    96:70:7b:4c:71:47:9d:3e:50:85:ac:ae:1d:36:a3:
                    30:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E5:9D:7D:84:58:1F:A6:5F:23:8A:B1:02:EF:96:EA:10:04:59:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/7c39b49b-d4f3-3baf-902f-83a43c864e62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56/68dde036-7a4c-4a69-930a-c6ac94a87e56.crl

            X509v3 Authority Key Identifier:
                keyid:6C:C2:8C:B2:DE:FF:56:76:1D:35:CF:47:00:09:3D:94:61:40:B0:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68dde036-7a4c-4a69-930a-c6ac94a87e56.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.67.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:6c:97:65:10:61:5a:01:d5:49:fb:e6:85:88:b1:32:05:96:
         40:a6:ee:c5:c5:5b:e8:10:a0:36:86:8a:43:2c:b0:0c:1d:f4:
         ae:94:f1:22:10:73:7e:44:aa:c1:2b:b2:1e:e3:1f:14:cf:e6:
         da:86:6a:29:c9:d8:74:74:1e:38:5d:8c:05:8e:91:4d:ff:90:
         c7:39:af:9a:21:11:2c:6c:d0:f8:62:96:84:d4:bf:7f:2f:15:
         6a:37:eb:26:d8:33:db:22:59:9d:79:41:2f:e0:b2:1c:42:c6:
         ab:05:b1:00:9e:51:8b:68:8a:61:cc:d6:a9:ea:41:55:74:71:
         da:90:39:4d:bb:88:96:38:20:4c:f7:6e:95:fa:14:63:af:ae:
         9b:cf:6a:0a:64:e9:1e:6f:9a:fc:a3:f0:d6:41:11:19:62:42:
         9e:ff:04:41:1d:86:20:0f:28:73:f6:33:c0:43:06:9d:b8:48:
         a4:e9:70:ba:d8:55:ef:13:67:88:c8:bf:82:d6:0e:53:89:76:
         db:45:98:a7:1a:db:ac:f9:14:26:e0:3d:a8:4e:13:13:87:48:
         ca:6a:3d:b9:6c:10:88:06:20:84:7c:35:ed:52:71:be:7f:14:
         6c:e7:a2:f8:4a:4f:2e:f4:80:92:2c:c4:5b:bb:be:d0:eb:73:
         74:6b:6b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 22:30:42 2025 by rpki-client