Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b413c04-5a71-3230-83e5-f43cd8a9d626.roa
File:                     4b413c04-5a71-3230-83e5-f43cd8a9d626.roa (raw, json)
Hash identifier:          LZ856O5yLO9BIBsDz2NqEU2xxswJsxbTQ1O2IW6ZaWg=
Subject key identifier:   85:E1:3B:C8:27:1C:C8:97:31:C8:8B:79:B8:7E:7B:39:B1:C1:DC:6D
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7A4B4E1B18B2F419C90FC178
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b413c04-5a71-3230-83e5-f43cd8a9d626.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        68.182.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:4e:1b:18:b2:f4:19:c9:0f:c1:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=513977d9-bde6-422e-ab64-019f2cfcd63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3e:a4:69:a9:b8:ff:8e:eb:98:e4:33:26:17:
                    64:b0:56:fd:f0:ed:41:6a:7d:65:81:0e:a1:28:89:
                    ee:54:c4:6f:68:e5:5c:da:04:7b:33:4d:37:b5:95:
                    df:f0:e5:87:69:65:8e:74:48:39:d4:d4:98:43:f7:
                    dd:b9:dd:37:15:47:45:b0:62:0d:c7:64:d6:d2:c2:
                    48:79:21:ba:b5:3d:55:84:1c:44:a8:55:b4:cd:4e:
                    af:a1:7f:ba:f5:2f:d2:32:8d:07:2c:a8:0b:41:7f:
                    40:e0:44:4b:e3:55:63:ce:90:15:08:12:e7:07:9d:
                    3c:50:42:b7:c0:8e:a1:03:ac:21:6c:03:ad:45:56:
                    87:0d:03:f2:61:a6:9a:fc:52:72:13:49:7c:b3:b5:
                    d7:44:aa:8d:73:64:0c:f0:d5:09:ba:75:2a:a2:92:
                    e4:70:ae:9e:4a:48:a6:d5:00:ce:79:aa:f4:a5:9c:
                    f6:d6:37:63:50:e7:fe:15:5c:9c:19:59:76:86:10:
                    45:73:5a:b6:72:95:49:d8:08:a7:d8:fd:3d:9b:2e:
                    95:6f:24:ff:a6:16:ea:c9:a5:37:b5:f2:53:ab:c8:
                    2c:91:52:be:aa:49:eb:c0:f2:6b:3f:7c:37:cd:28:
                    69:f6:29:54:fb:d9:3e:61:1b:a7:d0:86:44:75:1c:
                    5f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:E1:3B:C8:27:1C:C8:97:31:C8:8B:79:B8:7E:7B:39:B1:C1:DC:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b413c04-5a71-3230-83e5-f43cd8a9d626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.182.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:5b:d7:da:7b:18:65:07:c2:7e:b2:1a:e0:81:95:5b:90:e2:
         53:ba:bb:23:f2:09:6f:9d:f3:11:01:48:d2:51:fe:5b:40:f1:
         d1:d6:1b:a8:0f:92:26:82:66:9c:35:d1:3f:d9:2d:37:17:95:
         92:dc:c8:10:17:06:7b:3c:42:a0:80:87:23:6d:08:a2:e3:cf:
         60:23:a8:23:1e:2e:8c:6e:ef:88:45:04:b1:d4:a7:c1:10:bb:
         62:69:4f:1e:a5:86:6c:15:d5:5d:62:72:ca:9d:ae:77:97:f7:
         9d:f5:99:93:2a:22:0a:fb:25:0b:ec:85:ee:1d:81:21:cc:0d:
         7e:41:c1:d5:b4:80:ac:4a:29:b7:5b:0c:0b:31:d8:2f:a7:1c:
         9c:a4:ef:cd:c0:82:6c:cc:ec:ef:09:74:b9:db:d3:0b:bf:1a:
         10:05:6d:4c:30:9d:e5:c3:63:5f:84:17:57:80:56:c5:95:27:
         ca:71:ab:61:87:27:10:f1:09:2b:61:05:69:14:3a:2e:1f:f9:
         f7:7d:c8:26:19:c0:75:9e:87:2b:ea:54:85:c6:f7:aa:8c:54:
         37:d6:6b:d3:c1:c9:5b:a0:7a:64:45:76:c0:94:15:78:c5:d5:
         31:78:53:ac:64:28:b0:ba:a0:7f:ce:27:d5:f9:16:7d:9f:4c:
         c6:d6:70:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:32:11 2025 by rpki-client