Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/47b0d014-f668-316c-bfc2-353bec3216a0.roa
File:                     47b0d014-f668-316c-bfc2-353bec3216a0.roa (raw, json)
Hash identifier:          oCHzgCileQtwYNRDIPuHzGUxZOkCDMfZ+zszENHulBg=
Subject key identifier:   0D:8C:C3:77:4C:FB:68:E1:BF:D8:AC:FC:C6:AE:D8:67:BA:88:53:78
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B65B13E686A68480200CD08A0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/47b0d014-f668-316c-bfc2-353bec3216a0.roa
Signing time:             Fri 03 Oct 2025 08:41:28 +0000
ROA not before:           Fri 03 Oct 2025 08:41:28 +0000
ROA not after:            Thu 01 Jan 2026 09:41:28 +0000
asID:                     20473
IP address blocks:        68.167.36.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:65:b1:3e:68:6a:68:48:02:00:cd:08:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  3 08:41:28 2025 GMT
            Not After : Jan  1 09:41:28 2026 GMT
        Subject: CN=b312c679-2714-429d-959b-4c808fe7c5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3f:b4:10:08:47:b5:b7:a4:60:d8:2f:58:de:
                    00:bc:50:bd:04:7f:f2:b3:fb:5e:f4:65:3d:3d:e5:
                    fb:78:2c:2e:1f:b4:88:51:bf:ab:94:a8:f3:51:e6:
                    3a:6e:d6:9c:99:31:91:b2:b2:dc:36:1d:07:bb:ae:
                    77:f7:3e:c6:b4:9d:ae:2b:f3:80:69:d5:57:cf:a1:
                    35:39:ce:f1:8f:0a:92:6f:bf:49:7d:da:e8:2d:17:
                    c7:b1:77:39:df:e7:3d:ec:90:da:78:7b:41:8b:a2:
                    94:3c:71:a1:d8:69:61:de:64:7c:be:4c:38:91:e5:
                    2b:10:c0:aa:83:91:17:4e:31:d9:a6:a8:df:3a:f4:
                    c8:11:2c:02:2b:e1:b3:d6:f0:a6:5a:ec:b3:9f:74:
                    42:d6:50:f5:47:f2:d8:66:df:5d:6f:a2:b8:0f:94:
                    a8:d0:67:9b:03:bf:2d:27:90:63:10:6c:e7:69:bd:
                    85:8a:2f:4c:54:50:40:08:87:31:79:5d:c7:df:13:
                    be:32:a1:f5:23:e5:a1:30:9c:53:e0:73:7f:97:5b:
                    28:14:6e:c0:6e:59:10:36:93:ee:b6:b1:5a:93:fd:
                    42:52:d0:a9:ae:a0:4c:1f:a8:3e:a3:84:2c:ed:2a:
                    bf:57:8e:a7:8c:ae:11:cb:53:6e:ef:1d:14:4b:ca:
                    f1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8C:C3:77:4C:FB:68:E1:BF:D8:AC:FC:C6:AE:D8:67:BA:88:53:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/47b0d014-f668-316c-bfc2-353bec3216a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.167.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:8a:01:25:5f:d4:c5:c3:b2:d4:9e:0c:11:51:15:3a:91:2e:
         cd:73:07:91:77:da:7c:95:ac:bf:98:4d:27:0a:92:93:e8:35:
         fa:ee:c3:2f:48:aa:3b:6a:79:cc:9d:32:31:01:c2:9a:9f:95:
         f2:26:d9:df:80:27:b0:1a:12:34:55:ae:b6:93:92:b3:46:91:
         ea:ef:96:a3:9e:d1:42:5f:65:b7:6a:3e:9d:95:7d:6f:fc:ec:
         f9:3c:1a:65:7f:a5:3c:67:52:92:d2:15:c3:51:c1:11:8a:43:
         83:2b:6e:b2:cf:c9:ec:62:99:ac:bc:f5:27:67:e6:08:8c:24:
         46:40:81:f6:67:a3:0a:14:b9:c9:ad:f2:bb:a8:03:19:8e:1b:
         47:4d:f2:5e:86:38:70:19:33:68:09:38:4b:97:2d:41:ed:f4:
         0d:9f:df:cb:87:60:95:73:de:9f:2b:96:c2:38:f8:d4:6a:78:
         5a:4d:ae:ac:45:6a:cd:f0:df:ac:66:c0:29:51:10:f7:13:72:
         3b:97:3b:d4:0a:92:39:7c:10:6f:83:0f:6a:29:96:af:10:de:
         14:e1:69:b2:d8:96:70:72:20:ec:ea:93:ab:15:0d:bd:43:3b:
         a1:35:ab:79:40:e8:7d:05:5f:d1:b0:25:10:69:d3:1d:95:09:
         e1:ff:99:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 08:57:36 2025 by rpki-client