Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa
File:                     1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa (raw, json)
Hash identifier:          zqabjcrbsiIc7wiPhQnezq2bEcn5cuBNxJXWwltZRFo=
Subject key identifier:   B9:20:10:FD:89:C1:3C:3A:FD:89:C7:91:36:63:39:A6:C0:B7:5D:0B
Certificate issuer:       /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial:       010D0C9F4328584B6BC75C98D068A1EE995A7A80
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa
Signing time:             Sun 05 Oct 2025 13:00:40 +0000
ROA not before:           Sun 05 Oct 2025 13:00:40 +0000
ROA not after:            Sat 03 Jan 2026 14:00:40 +0000
asID:                     16509
IP address blocks:        68.233.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6b:c7:5c:98:d0:68:a1:ee:99:5a:7a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
        Validity
            Not Before: Oct  5 13:00:40 2025 GMT
            Not After : Jan  3 14:00:40 2026 GMT
        Subject: CN=b4d18d50-c265-402a-9d2a-226ccbd70734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:64:5b:e3:82:15:d2:28:cb:f6:92:c3:c0:ce:
                    6a:00:68:8f:be:09:17:e2:9a:26:5a:d5:6d:e8:ea:
                    5f:78:8d:c2:a2:36:7f:de:24:cd:71:dc:45:77:59:
                    09:fb:11:5d:98:46:88:1e:e0:41:e7:ff:80:9e:f4:
                    71:60:fd:14:e6:3f:87:4c:40:c8:ce:e5:2a:2b:af:
                    94:ad:c2:dc:eb:94:1c:d9:8c:01:e8:34:ea:7d:cf:
                    1e:48:af:f0:b9:29:ae:0d:93:09:3d:12:c7:14:d9:
                    23:05:02:ea:42:09:ac:d9:81:37:94:a2:2d:ac:91:
                    1d:98:2e:7c:01:26:fb:37:f2:93:3a:13:04:57:84:
                    20:9d:2c:29:66:d5:db:64:8b:94:86:7a:96:13:c9:
                    f3:fb:63:23:33:ff:af:61:5f:7a:c6:ab:5d:0a:a2:
                    20:3a:c9:79:d7:44:5a:67:48:73:85:c0:8c:a8:99:
                    90:05:ca:ed:33:dc:1e:a6:68:64:9c:35:4c:a1:1a:
                    dd:64:d5:1a:c3:9a:22:87:80:b6:ad:46:48:d2:f3:
                    db:9f:e4:8d:ce:09:7c:51:c7:fa:e3:e3:8d:f5:8b:
                    b2:84:4f:8a:50:ee:ec:3b:b1:62:a1:83:a3:18:4d:
                    19:6a:7f:f1:1b:92:71:97:ab:da:d7:1f:d2:31:2c:
                    f5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:20:10:FD:89:C1:3C:3A:FD:89:C7:91:36:63:39:A6:C0:B7:5D:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/1b19f8c5-3cd1-3ecc-82a4-2046e39f9586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl

            X509v3 Authority Key Identifier:
                keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.233.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ed:08:fa:34:d5:d3:8c:0e:ca:ed:8e:93:bb:62:8e:df:bb:
         07:13:14:7e:77:69:73:fd:17:17:2f:c9:9f:07:83:4c:8b:ad:
         70:aa:67:90:62:5a:a7:3d:a5:e2:25:de:d1:65:b6:39:6f:47:
         7f:3b:58:cc:dd:1d:81:9d:3a:05:a5:3e:75:44:c1:b9:56:a0:
         2d:3c:0c:27:ef:bd:29:48:bc:9b:7d:90:55:7f:01:a1:37:7c:
         b9:68:7a:1f:ca:37:0c:01:72:b7:58:8a:bc:4f:c3:cf:e3:1f:
         a8:d0:76:32:c2:53:75:39:42:d2:07:89:a7:28:33:e3:86:87:
         4c:6c:60:5c:d9:80:7b:a2:f3:b4:c4:9e:29:a1:84:8c:97:5e:
         fd:a9:b3:3b:4f:89:1e:84:db:7b:c9:8d:1f:10:61:34:bb:b2:
         f9:7f:2d:48:53:e5:12:e2:ec:c5:f7:ab:b1:c1:4a:d3:db:e2:
         6e:c5:e5:43:0b:d3:65:18:d9:60:3e:1a:60:c4:8e:ec:0e:c3:
         ea:f3:ef:ad:0a:87:21:00:af:68:7f:ca:f6:c8:89:38:5a:f6:
         98:c2:67:8a:b6:1c:2d:e4:af:ee:8a:9c:46:11:5a:2f:ee:7b:
         ba:35:4c:e3:5e:ab:91:e4:34:9a:ce:f4:41:ea:8d:f5:79:e1:
         42:1a:fc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 17:37:41 2025 by rpki-client