Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7c058591-a6fd-32a2-b066-c591171fa040.roa
File:                     7c058591-a6fd-32a2-b066-c591171fa040.roa (raw, json)
Hash identifier:          6bG8glLJqX4SvKzeRzV4BVXnDq1In883Fi8ghFT7HH4=
Subject key identifier:   2A:2A:7D:6B:70:10:84:40:97:9B:0E:91:3B:38:84:69:E9:1B:EE:CB
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A45403E8C876008DB3AC27B60
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7c058591-a6fd-32a2-b066-c591171fa040.roa
Signing time:             Sun 22 Jun 2025 01:00:50 +0000
ROA not before:           Sun 22 Jun 2025 01:00:50 +0000
ROA not after:            Sat 20 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        68.182.190.0/24 maxlen: 24
                          68.182.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:45:40:3e:8c:87:60:08:db:3a:c2:7b:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jun 22 01:00:50 2025 GMT
            Not After : Sep 20 01:00:50 2025 GMT
        Subject: CN=96798ab0-4b25-416b-a481-e0443ef2ba51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:a0:e3:90:02:5f:e2:db:8a:58:ee:a5:51:
                    08:6b:af:33:2c:ee:fe:62:b9:a9:d2:be:38:ec:82:
                    0e:e7:3f:4c:68:81:7a:15:53:cc:ca:94:aa:0b:f1:
                    78:db:15:01:f4:cc:95:a5:85:91:cf:94:ad:e6:96:
                    08:83:0f:78:09:fd:7b:13:b8:0f:af:5e:6f:66:b8:
                    01:c5:8e:59:2b:b9:6c:92:e3:ab:91:24:8d:fd:9b:
                    17:ee:84:78:64:5f:3c:17:d9:6a:d3:c9:70:db:ef:
                    2e:d9:6a:c7:8f:d4:e8:ff:39:43:bc:fc:5e:41:9b:
                    f6:a4:90:63:5b:f8:f4:0e:db:19:d1:f8:3b:07:2f:
                    77:ad:82:42:cc:7d:73:8a:28:d3:a2:b8:9b:6f:ca:
                    f4:56:dc:c3:3a:af:2d:41:f0:69:02:04:ea:62:b5:
                    25:a2:5d:af:76:2a:5d:ee:9d:2c:2a:cd:58:f1:61:
                    cc:6d:58:03:67:14:06:3a:b7:74:ad:dd:14:92:9e:
                    e2:af:53:7c:1a:29:97:d1:4d:f3:a0:fa:0c:f9:e6:
                    93:fc:89:4f:36:7e:50:94:1f:76:86:76:5c:85:e7:
                    67:5a:aa:ef:1e:4b:61:51:6c:33:b4:72:87:69:b3:
                    2e:4e:1d:99:bc:8b:73:49:a6:64:16:e3:8f:fc:fe:
                    40:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:2A:7D:6B:70:10:84:40:97:9B:0E:91:3B:38:84:69:E9:1B:EE:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/7c058591-a6fd-32a2-b066-c591171fa040.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.182.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:d1:c7:d3:41:80:7b:7d:1a:a8:33:08:90:00:8d:29:de:06:
         fd:17:08:8b:55:78:bd:82:c6:99:d7:47:b7:96:7c:bc:e4:8c:
         bd:9a:27:23:d6:fc:ae:b3:da:18:38:1e:f2:72:3f:f1:d0:ce:
         83:98:06:b5:c6:a6:45:96:c0:6a:52:19:6d:71:55:39:ba:78:
         c7:88:24:ef:d2:50:39:af:5e:c8:fb:fe:b0:bf:e2:25:e7:b6:
         37:96:06:99:6b:2b:83:76:97:15:e6:c5:97:31:c7:3d:ee:e7:
         be:88:2e:f8:bd:cc:a1:66:3f:05:4e:f7:83:15:3c:2c:93:4e:
         fc:3d:a8:e7:38:52:43:46:8c:3a:d2:80:4c:94:56:d5:00:f1:
         1a:47:25:a3:ca:f7:b9:a8:f6:b0:d1:5f:cb:f2:e1:e3:55:0b:
         c6:fa:23:8e:20:12:ba:b3:db:7d:55:32:64:0e:17:dd:f9:ee:
         16:71:23:6f:d3:10:8d:dd:ed:c3:64:1c:62:e5:09:67:d0:b6:
         79:cd:da:9a:0d:15:a4:dd:7a:33:2c:b8:91:bf:70:09:a0:2f:
         cb:7a:2a:f0:ec:4a:bb:d8:e7:0d:3c:fd:f9:7d:62:42:d2:49:
         b5:62:fd:38:ef:bd:da:c7:90:e8:0f:fd:d5:eb:23:36:43:07:
         c8:7d:60:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:35:11 2025 by rpki-client