Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5e0510bf-7fe6-3562-95f6-36692e747431.roa
File:                     5e0510bf-7fe6-3562-95f6-36692e747431.roa (raw, json)
Hash identifier:          /cfulsif92MbAJjw6WwVI42vEk2dpupKjecRB4sD53Q=
Subject key identifier:   DE:E0:C8:FB:C7:B8:B6:89:59:5E:87:40:25:37:4B:17:FE:09:8B:CF
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B70BD23C685D7A04F727E96B0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5e0510bf-7fe6-3562-95f6-36692e747431.roa
Signing time:             Tue 07 Oct 2025 07:39:20 +0000
ROA not before:           Tue 07 Oct 2025 07:39:20 +0000
ROA not after:            Mon 05 Jan 2026 08:39:20 +0000
asID:                     7922
IP address blocks:        68.167.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:70:bd:23:c6:85:d7:a0:4f:72:7e:96:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Oct  7 07:39:20 2025 GMT
            Not After : Jan  5 08:39:20 2026 GMT
        Subject: CN=4a14fc7a-b169-41cf-8482-c34d537007b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a7:43:35:1e:8d:3e:6c:b8:c0:c8:f8:b8:0d:
                    af:5c:91:43:b9:0a:0f:66:28:31:e6:38:a7:01:ce:
                    1e:7c:4b:bc:ce:20:fe:6b:12:fe:3c:9d:ea:e1:f6:
                    b5:9c:95:11:6e:31:a9:b8:5c:62:4f:f0:df:16:e6:
                    e2:a5:ab:99:c6:50:8e:56:91:06:e6:7e:4a:14:b8:
                    61:33:05:6d:cb:28:4c:54:85:c1:27:e4:be:a1:fd:
                    72:4c:70:47:e6:67:1b:cc:49:77:41:49:32:a9:37:
                    10:ad:92:c0:ff:49:5f:06:ce:a5:21:cd:fb:c8:fb:
                    ee:4b:a7:9e:49:6f:fa:fc:6e:98:d1:c3:4e:d8:25:
                    ee:14:92:e8:f1:65:f1:23:b9:2a:46:03:d5:54:4a:
                    21:50:9f:6f:e9:c3:56:e1:04:a6:bc:37:03:46:77:
                    7f:87:46:ad:c7:ba:46:42:36:71:39:71:5d:6c:c0:
                    52:42:9a:02:cf:1d:cc:c1:99:46:a9:23:7f:94:a2:
                    1f:56:fc:4d:40:90:93:4d:24:c6:b2:9e:5e:e4:ab:
                    69:2c:b6:0b:43:65:d0:87:2c:cc:d1:1c:12:ba:a5:
                    68:d2:1a:f5:bc:09:bf:f3:a5:3c:cf:09:8a:73:f8:
                    0c:69:08:eb:f1:33:86:ca:c4:6b:58:94:09:61:69:
                    d1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E0:C8:FB:C7:B8:B6:89:59:5E:87:40:25:37:4B:17:FE:09:8B:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/5e0510bf-7fe6-3562-95f6-36692e747431.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.167.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:7e:b0:37:10:74:ae:82:15:cc:01:7f:da:59:ef:81:f3:99:
         ef:27:76:bb:84:23:ac:25:b0:f9:5c:56:e2:10:ad:e5:c2:75:
         de:d4:23:78:98:88:48:4f:1d:70:85:fc:ed:90:7e:2d:26:eb:
         c3:52:cc:c2:36:70:12:68:81:44:e2:f7:9f:49:a2:b6:6b:65:
         a8:d3:d1:b0:ed:aa:f0:1c:8e:43:97:7d:fd:10:16:8c:c3:6e:
         cb:c9:0c:42:0f:e8:28:67:13:2c:ab:eb:66:b9:07:d5:05:b1:
         ab:63:d8:be:1f:63:8d:27:66:92:ce:23:af:ff:62:70:1e:31:
         68:0a:5b:d0:43:66:5e:5f:0d:a9:bd:c5:13:9b:06:57:c7:06:
         bd:f4:73:c8:4f:4c:f2:fe:df:b2:b4:3d:d4:8b:92:f6:35:83:
         42:68:82:52:b3:d7:62:73:4c:39:42:e3:58:ec:a0:ae:7a:d4:
         99:18:a0:ea:51:a4:9e:5c:24:28:e0:dd:c0:b9:20:d0:4b:fb:
         ab:94:97:66:4d:d4:65:10:13:c3:57:e0:27:89:ca:63:c8:1c:
         42:ed:52:e5:e3:db:80:0f:66:88:e9:85:61:78:37:ea:36:f1:
         84:2c:cf:0b:6e:06:8c:f6:3a:1f:ef:48:37:19:0f:aa:e8:91:
         bc:78:8b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:18:45 2025 by rpki-client