Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/09b13d55-aafa-359a-af4e-3a5bbbf991a9.roa
File:                     09b13d55-aafa-359a-af4e-3a5bbbf991a9.roa (raw, json)
Hash identifier:          RCiJRHWPA5t4WF6WN3bWei4R3NidQaFT3IL17qtudBs=
Subject key identifier:   91:FD:85:82:85:02:49:80:F1:B6:2B:0F:51:84:E8:52:AD:AF:90:7C
Certificate issuer:       /CN=8450660f-e06c-43ee-910d-d4b472fdc395
Certificate serial:       010D0C9F4328584A8DD5F443A7DF2C239EE97D00
Authority key identifier: 69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/09b13d55-aafa-359a-af4e-3a5bbbf991a9.roa
Signing time:             Fri 18 Jul 2025 01:00:48 +0000
ROA not before:           Fri 18 Jul 2025 01:00:48 +0000
ROA not after:            Thu 16 Oct 2025 01:00:48 +0000
asID:                     5065
IP address blocks:        68.64.184.0/24 maxlen: 24
                          68.64.185.0/24 maxlen: 24
                          68.64.186.0/24 maxlen: 24
                          68.64.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8d:d5:f4:43:a7:df:2c:23:9e:e9:7d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8450660f-e06c-43ee-910d-d4b472fdc395
        Validity
            Not Before: Jul 18 01:00:48 2025 GMT
            Not After : Oct 16 01:00:48 2025 GMT
        Subject: CN=90c424c8-4626-4292-939b-6d1124c58c90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f2:f5:02:ab:b4:5a:99:16:78:17:e5:1b:8b:
                    5d:f1:f4:de:c3:51:8f:e2:49:5f:55:5f:6e:f9:ac:
                    82:25:81:84:63:2d:2f:f2:41:d7:d5:c2:d7:22:b4:
                    83:5e:0a:83:87:1c:e2:b8:4c:b8:99:57:ae:81:6e:
                    e4:64:e1:50:f7:2f:5b:7d:c3:01:df:95:b9:fe:b2:
                    84:13:56:87:60:5e:ca:4e:d0:d9:83:1f:7f:51:17:
                    67:bf:5b:81:83:b6:6e:b8:40:05:fb:7d:fc:78:3f:
                    0f:b8:84:90:7a:76:0f:2d:c3:dc:bb:b5:3a:59:4b:
                    52:c2:f7:5c:a5:37:96:7e:58:72:59:1b:93:83:2f:
                    59:80:f0:ff:9e:28:03:9c:ae:3b:b8:e0:c8:1d:9b:
                    b1:d4:64:fa:85:78:e7:60:b3:d3:66:80:4c:73:59:
                    b7:a7:24:da:95:26:4f:70:d1:1b:1b:c5:40:5e:c7:
                    cc:b5:85:06:e2:a7:d8:3e:4b:d5:1b:6c:11:84:e2:
                    0d:f8:48:90:ca:c1:2a:f0:16:a5:74:85:e3:ae:46:
                    ca:d1:ea:8f:3d:77:7c:ab:6b:35:3d:79:24:31:8f:
                    ed:85:93:c2:9d:5b:fb:b8:a6:12:98:5f:7b:11:e8:
                    77:1d:04:84:99:51:1f:44:32:94:8c:65:54:44:f2:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FD:85:82:85:02:49:80:F1:B6:2B:0F:51:84:E8:52:AD:AF:90:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/09b13d55-aafa-359a-af4e-3a5bbbf991a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395/8450660f-e06c-43ee-910d-d4b472fdc395.crl

            X509v3 Authority Key Identifier:
                keyid:69:25:75:77:04:3B:95:B1:7E:16:48:72:04:EF:23:AC:0A:A8:81:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8450660f-e06c-43ee-910d-d4b472fdc395.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:bd:a5:15:57:12:c7:39:ac:ed:ee:34:4c:b2:bb:01:73:f8:
         48:7a:2a:d7:d9:de:f6:15:6d:58:20:4b:b3:d7:86:42:a1:c8:
         01:b3:ba:9a:65:0e:e9:f5:18:12:09:c1:57:fc:30:c0:14:d1:
         17:1e:56:45:64:3b:4e:d3:6e:d1:f1:89:79:cd:a7:06:98:89:
         f7:2d:cf:ad:18:d1:76:a7:17:e9:57:73:0c:44:e0:39:c5:ec:
         64:e7:48:20:a8:fa:ca:07:3e:83:97:31:92:e4:23:44:62:77:
         3d:a3:a0:b8:d4:fa:eb:5a:f5:71:9d:a9:97:58:8d:27:9c:09:
         a3:ab:6a:b3:25:09:d7:4d:51:26:0f:33:c8:87:d7:d9:93:8c:
         bb:20:94:fa:b5:ce:d9:79:63:bc:57:50:21:64:c8:46:ef:dc:
         dd:04:cb:ff:fe:5e:3f:ad:a9:2c:9b:82:66:5c:62:56:1b:2a:
         f6:fc:2c:8e:fc:14:b1:85:4b:c8:9b:da:06:7c:df:9c:59:85:
         c8:c3:01:9f:a8:09:a2:2a:02:2d:96:6d:5e:9a:e9:d2:f0:ff:
         50:4c:ee:7c:92:75:74:71:e3:9f:37:1f:8e:24:cf:d9:34:77:
         4b:53:9c:8b:fe:89:55:5d:bc:bb:b8:f8:07:70:7e:f7:32:bd:
         3e:e7:b3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 19:19:18 2025 by rpki-client