Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5f969a12-5cb2-36ef-aaab-e4b979add84d.roa
File:                     5f969a12-5cb2-36ef-aaab-e4b979add84d.roa (raw, json)
Hash identifier:          VO3FS8IxVZI9HW2RIL+j1kB//fD/LhemsdnAIWPN3hQ=
Subject key identifier:   40:7F:7B:97:33:89:3D:F6:37:61:25:F6:7A:C9:9B:8A:DE:12:4F:77
Certificate issuer:       /CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
Certificate serial:       010D0C9F4328584B6631FCE2249602CDB9750710
Authority key identifier: 14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5f969a12-5cb2-36ef-aaab-e4b979add84d.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     10430
IP address blocks:        68.179.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:fc:e2:24:96:02:cd:b9:75:07:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9bbb06a-e75b-41cb-b9da-2cb28f4c373f
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=375167db-eb19-473d-ab97-eaf9bd76abd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f6:6f:17:22:27:b4:94:62:1c:ff:07:31:77:
                    c4:3e:b6:ec:af:51:7b:b2:b5:b4:54:51:73:64:2b:
                    dc:50:b5:43:97:00:d0:95:a7:82:08:f4:e3:f6:d5:
                    54:f7:22:55:7c:b1:c6:90:cc:ef:2e:eb:ce:37:9e:
                    9a:f6:3e:32:b1:79:40:8e:87:c6:96:3d:4d:87:05:
                    64:d6:f0:17:8c:88:14:d2:03:2a:8c:97:5f:cb:9e:
                    cb:16:4a:2b:72:95:38:c7:df:8b:3d:6a:6b:86:11:
                    d0:db:4e:0e:30:25:75:18:46:6d:b9:1d:dc:36:23:
                    e2:88:b6:55:bb:42:e0:3a:1e:a5:2b:ba:77:c9:62:
                    e0:7b:3d:da:83:c2:8b:c2:51:ca:17:e0:3d:b1:5a:
                    6a:06:a0:2b:7d:07:c0:de:42:57:5d:9d:ce:5f:6d:
                    94:ae:8e:c7:b4:c7:93:5c:25:69:81:1f:33:a9:bd:
                    cb:57:c6:66:57:bd:4d:52:2c:15:12:39:57:35:5f:
                    69:92:e6:6c:9e:15:71:42:76:af:c3:1d:9c:5d:92:
                    cd:b8:e9:4e:be:20:17:15:65:ea:51:dc:89:05:be:
                    f1:bb:fe:bc:74:a1:e7:54:2a:37:82:2d:19:ac:1a:
                    88:c0:6a:10:71:4b:e3:0a:f7:b2:e5:75:bc:4d:d0:
                    8c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7F:7B:97:33:89:3D:F6:37:61:25:F6:7A:C9:9B:8A:DE:12:4F:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/5f969a12-5cb2-36ef-aaab-e4b979add84d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.crl

            X509v3 Authority Key Identifier:
                keyid:14:EF:79:E9:69:F3:05:38:9F:8C:5A:DE:3D:85:37:D5:98:C5:75:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e9bbb06a-e75b-41cb-b9da-2cb28f4c373f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.179.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:03:f0:7b:31:b8:56:0f:c9:f6:bd:18:ed:33:68:19:89:78:
         ca:af:ef:93:65:03:fc:93:58:2d:1c:e4:85:e5:0e:c9:25:e3:
         ec:d1:5c:43:e2:70:60:22:a9:94:32:93:5b:9a:47:42:55:da:
         72:83:b4:da:75:c7:4a:62:f6:2e:f1:99:01:fa:fa:c3:e0:cf:
         70:d8:35:36:b1:47:f4:ba:9f:ea:d3:39:86:61:44:41:de:a1:
         f0:02:b5:fd:5e:2e:73:76:50:84:b7:00:11:30:11:6e:84:55:
         01:9d:ff:53:ff:f0:cb:85:db:a8:af:a4:41:4d:7e:16:3a:a4:
         31:ee:4f:b3:12:c9:be:90:e0:fb:87:b7:b7:5d:53:e5:b6:08:
         70:12:b5:f8:99:2e:36:b9:7b:51:68:f5:cc:a9:6f:62:7e:d9:
         52:38:e8:37:60:26:fb:4b:d3:39:9e:79:ac:b0:1c:c4:2c:28:
         62:b6:0e:b7:88:2a:e5:54:4b:1c:f4:ca:bc:b9:2b:2c:4c:c3:
         d2:14:4c:e6:46:58:bc:f0:05:a2:ad:b8:6e:52:52:2a:88:08:
         af:78:ae:dc:fc:7b:03:2c:17:67:12:07:8c:4b:b1:3b:0e:fc:
         a5:7b:d2:01:57:e9:7b:9b:51:5d:a1:4f:b0:3a:55:2d:97:79:
         40:5b:ac:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:48:48 2025 by rpki-client