Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/13e1b1c0-4cf9-3d57-af48-df8c573eece6.roa
File:                     13e1b1c0-4cf9-3d57-af48-df8c573eece6.roa (raw, json)
Hash identifier:          1X1fF2dRHTlnfKLTd3nJO2JhjoQeoqaLaNXI5qY9LpI=
Subject key identifier:   DD:ED:50:5B:4D:5C:7A:2C:20:EB:D2:BC:E7:15:50:46:DC:BA:18:ED
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B717A65C14FCED83D2537F924
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/13e1b1c0-4cf9-3d57-af48-df8c573eece6.roa
Signing time:             Tue 07 Oct 2025 14:00:40 +0000
ROA not before:           Tue 07 Oct 2025 14:00:40 +0000
ROA not after:            Mon 05 Jan 2026 15:00:40 +0000
asID:                     396356
IP address blocks:        68.167.76.0/23 maxlen: 24
                          68.167.132.0/23 maxlen: 24
                          68.167.134.0/23 maxlen: 24
                          68.167.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:71:7a:65:c1:4f:ce:d8:3d:25:37:f9:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  7 14:00:40 2025 GMT
            Not After : Jan  5 15:00:40 2026 GMT
        Subject: CN=052d0fbd-f113-43da-9b72-6513ec7e4099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:11:11:e4:c0:33:95:1b:f8:5a:c2:3c:67:ba:
                    9d:60:ab:37:03:3a:98:91:bb:89:17:c6:5b:6b:a1:
                    f0:7f:49:86:9a:3b:97:68:45:d4:7d:e1:44:fe:30:
                    87:49:ce:33:85:7c:93:bc:57:38:54:9c:bd:c4:f6:
                    01:9b:87:2f:c5:c8:9b:bc:41:ba:ff:e8:cf:9a:e9:
                    ab:8c:3c:e5:c5:e9:23:8b:97:94:9b:54:d7:b0:3b:
                    7b:57:fb:24:76:bf:a3:b6:2c:54:23:f1:53:5a:41:
                    a1:de:99:07:ca:58:4a:be:ec:49:88:c7:94:3c:a1:
                    bf:f6:f2:e6:1a:bf:0e:0f:7d:08:2d:65:63:25:45:
                    64:3f:3f:f7:86:cb:51:99:85:62:2b:5d:b8:6f:a1:
                    66:5d:be:58:5b:ac:55:7f:62:a2:00:70:62:c0:b2:
                    eb:f6:a5:f2:7c:2b:0b:77:db:d5:47:b3:b0:22:db:
                    2b:d7:4e:d2:87:97:16:00:2d:ce:5a:71:b3:9c:40:
                    51:31:36:5f:ee:81:fb:bf:ff:2b:88:fa:70:0c:be:
                    ff:e0:a3:a8:e5:1f:e4:75:06:b8:55:ed:88:08:92:
                    41:58:9a:de:4a:01:55:4b:53:26:de:63:57:03:ce:
                    12:10:64:64:14:19:19:96:68:9a:80:ce:02:86:b0:
                    e1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:ED:50:5B:4D:5C:7A:2C:20:EB:D2:BC:E7:15:50:46:DC:BA:18:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/13e1b1c0-4cf9-3d57-af48-df8c573eece6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.167.76.0/23
                  68.167.132.0/22
                  68.167.150.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:13:72:bb:9a:f7:75:bf:04:3f:43:5f:10:ba:c6:09:ec:27:
         93:15:6a:b5:6b:4b:d4:f3:76:a3:56:b0:0a:29:56:db:50:3a:
         18:88:9c:b1:32:77:54:00:10:15:be:11:4c:e6:b5:5e:f6:b6:
         1b:03:33:bd:d4:6e:1c:db:f1:2d:99:18:3c:ff:dc:62:fc:b5:
         f0:0a:44:25:29:26:ad:f3:17:72:68:7a:b3:e7:11:32:8b:f5:
         0e:b1:b2:2f:4d:52:9e:2b:3c:27:a2:6c:be:c3:99:17:5d:de:
         12:c0:40:b2:60:85:b9:5e:f9:3e:7a:36:16:1c:93:5f:76:2a:
         18:55:66:eb:0a:d0:f1:e3:d4:94:0d:ca:99:1c:c7:50:85:25:
         44:5e:d8:21:a4:38:35:ad:82:dd:e4:13:9e:ec:ac:3b:de:a7:
         95:5f:57:2d:a2:d4:6b:99:27:d4:cd:86:05:0b:08:e2:0c:00:
         f6:f6:0f:6b:09:d0:f2:f7:da:ab:77:c0:a3:b8:42:b9:87:35:
         23:3f:df:0b:b7:59:fa:12:d6:0f:8a:f5:a5:ec:bd:99:6c:e2:
         84:7b:70:d0:62:9b:12:72:4a:ab:e6:6d:ed:fb:b6:70:a2:23:
         11:ab:9b:ef:5f:fd:6b:e4:98:70:8e:9b:95:0e:8c:0c:1b:93:
         09:9f:c3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:50:50 2025 by rpki-client