Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/224c5e47-3bdd-30b1-abf2-c0f14b80044c.roa
File:                     224c5e47-3bdd-30b1-abf2-c0f14b80044c.roa (raw, json)
Hash identifier:          9jXnYEMkZUh/CArSIiWf2iLzrndpj4newM6Bh99Gz38=
Subject key identifier:   25:FC:2D:87:27:51:5D:91:C4:FD:E2:5A:75:1B:2C:75:7B:9E:14:1D
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B78C70CDCA27BC020B629F460
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/224c5e47-3bdd-30b1-abf2-c0f14b80044c.roa
Signing time:             Fri 10 Oct 2025 04:45:46 +0000
ROA not before:           Fri 10 Oct 2025 04:45:46 +0000
ROA not after:            Thu 08 Jan 2026 05:45:46 +0000
asID:                     395793
IP address blocks:        68.167.176.0/23 maxlen: 24
                          68.167.178.0/23 maxlen: 24
                          68.167.184.0/23 maxlen: 24
                          68.167.186.0/23 maxlen: 24
                          68.167.188.0/23 maxlen: 24
                          68.167.192.0/23 maxlen: 24
                          68.167.194.0/23 maxlen: 24
                          74.2.230.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:78:c7:0c:dc:a2:7b:c0:20:b6:29:f4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct 10 04:45:46 2025 GMT
            Not After : Jan  8 05:45:46 2026 GMT
        Subject: CN=354db1fa-f5d0-41c9-8547-416433173bfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:85:c9:e6:18:6e:40:1d:9b:99:9d:9f:0e:e5:
                    1f:a6:c8:51:b6:fc:45:72:42:d4:09:8f:c4:c5:7e:
                    51:88:91:aa:a5:61:f3:bf:f1:50:3d:27:6c:d2:6a:
                    25:4a:4f:d3:b2:8d:c0:00:62:29:46:1e:eb:df:4d:
                    2a:ae:62:f5:ee:cf:8d:dc:8f:74:d0:a3:6b:d2:40:
                    7e:72:c3:6b:7f:a6:de:62:47:95:34:23:2f:c8:64:
                    96:17:62:f6:46:26:ed:81:c9:ee:cd:63:f2:b9:a5:
                    70:c1:e5:93:31:f2:21:6a:59:cb:72:c1:2b:d9:d3:
                    58:4b:2c:a0:57:ea:89:f5:40:c4:2c:1f:b9:5f:b4:
                    3e:f6:d2:cd:f0:c2:dd:53:a7:38:d4:14:ea:09:5f:
                    76:69:bc:34:7b:be:64:28:98:96:41:57:25:83:f5:
                    d6:d9:30:13:c3:0d:79:a0:e6:fc:7d:16:fe:73:86:
                    3e:dc:d2:e0:ba:c5:61:ba:32:8f:46:9d:ef:14:e5:
                    50:6a:96:1f:f6:e0:8c:17:d4:14:da:66:24:f1:17:
                    3a:48:f3:41:86:54:91:09:54:55:a6:72:ed:3a:39:
                    55:0c:b9:9e:50:c5:19:c1:7a:cb:85:45:61:b3:7b:
                    8f:31:f9:59:74:9d:4e:0b:29:f8:a3:c3:22:2c:23:
                    1f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:FC:2D:87:27:51:5D:91:C4:FD:E2:5A:75:1B:2C:75:7B:9E:14:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/224c5e47-3bdd-30b1-abf2-c0f14b80044c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.167.176.0/22
                  68.167.184.0-68.167.189.255
                  68.167.192.0/22
                  74.2.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:e4:2a:e8:f2:5f:7b:d4:c7:a8:94:7c:9d:e3:bf:91:29:ec:
         6d:a6:86:a6:f7:ef:32:b5:06:24:c7:63:72:5a:fa:d6:8f:6c:
         20:fc:f6:75:7a:6f:6f:29:a1:4c:ec:f8:c9:2c:1d:49:53:9f:
         e8:84:23:8c:05:51:dc:af:7e:6e:8d:c3:82:6c:eb:4f:a6:a9:
         72:79:64:2e:7e:43:c8:c6:62:d2:99:31:12:70:04:d4:dc:f4:
         11:76:f6:ae:0d:f3:ae:4a:51:4d:1d:c3:9c:16:f4:8d:af:98:
         12:7f:ac:b5:83:b2:b3:9f:70:4d:ca:b6:85:f9:38:4b:a0:3c:
         c7:08:50:bd:91:57:27:9f:3f:86:07:bd:b9:d7:02:c4:98:06:
         78:bd:26:b1:c5:43:5a:75:a3:80:71:e8:6d:be:1d:1e:16:75:
         ca:b2:3d:72:c8:ea:02:67:66:09:ef:f6:85:02:81:ca:d0:e7:
         0a:2e:94:ac:85:71:de:b2:b6:ba:48:74:b5:6b:2e:e9:6d:23:
         60:27:40:43:1c:e7:fb:1c:b3:fa:c6:12:d9:be:17:b8:be:d3:
         21:74:a0:71:8e:63:11:91:e4:d3:ea:16:ed:62:05:ae:47:fc:
         5b:e8:de:1a:89:9d:e1:52:bb:9f:50:f7:34:0a:a7:23:b3:5f:
         f1:a5:b6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:50:48 2025 by rpki-client