Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/45b9477e-868c-34f2-8a79-7724b571e110.roa
File:                     45b9477e-868c-34f2-8a79-7724b571e110.roa (raw, json)
Hash identifier:          3XhX1moVZfRSBX4vn8DfhMNMU/wJpsqNCgxtLGi6MFE=
Subject key identifier:   D2:B8:F3:70:B3:96:A2:DE:FD:2E:6F:80:B8:8C:05:1B:D3:D4:2E:D8
Certificate issuer:       /CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
Certificate serial:       010D0C9F4328584B36BC580027976EC236E9E480
Authority key identifier: 03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/45b9477e-868c-34f2-8a79-7724b571e110.roa
Signing time:             Tue 16 Sep 2025 13:00:41 +0000
ROA not before:           Tue 16 Sep 2025 13:00:41 +0000
ROA not after:            Mon 15 Dec 2025 14:00:41 +0000
asID:                     21782
IP address blocks:        68.66.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:36:bc:58:00:27:97:6e:c2:36:e9:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a
        Validity
            Not Before: Sep 16 13:00:41 2025 GMT
            Not After : Dec 15 14:00:41 2025 GMT
        Subject: CN=1b35ecbe-41a2-4ba4-848b-767ca9bfe490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a4:e0:9c:76:85:d5:2c:f9:61:ab:6c:21:d1:
                    1d:fa:7e:95:0c:f8:ea:49:60:e7:19:79:7a:a5:88:
                    b6:8f:8a:f3:c0:6b:91:1c:c0:05:44:0e:87:1a:8f:
                    2f:b4:f3:7e:4a:e0:9e:47:84:3a:0b:9d:f8:60:9c:
                    31:ae:ca:4f:99:6a:f3:38:1b:bf:c5:8d:6c:e0:b7:
                    40:58:1c:f7:6c:78:95:ce:f9:97:44:e0:fe:d9:11:
                    b6:74:9e:7c:6a:d5:68:1f:77:c2:f6:4e:40:77:f5:
                    cb:a5:26:27:4a:7f:a8:f9:c0:86:ad:c3:73:d6:9e:
                    58:51:84:ae:39:55:0d:ef:34:d6:5b:8f:24:b6:27:
                    93:59:ee:be:90:13:8a:71:50:97:65:24:26:ac:58:
                    b8:a3:01:32:39:95:ef:d2:51:b2:21:b8:c1:79:ff:
                    81:7f:97:23:13:4d:7c:51:12:c3:07:9c:ed:11:27:
                    12:b8:b1:93:4a:e3:a1:ad:b4:90:2a:37:b8:2b:91:
                    b7:1e:b7:a8:b5:5d:c7:60:d4:b7:93:b8:53:14:f6:
                    d1:6c:24:af:92:0e:cb:af:05:31:92:b1:e9:79:4a:
                    f2:1f:dc:d5:cc:91:c6:0f:94:b1:2a:28:c1:8d:ce:
                    31:9b:d2:d0:6d:d2:1f:27:4b:57:f3:48:f4:57:f1:
                    e1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B8:F3:70:B3:96:A2:DE:FD:2E:6F:80:B8:8C:05:1B:D3:D4:2E:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/45b9477e-868c-34f2-8a79-7724b571e110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.crl

            X509v3 Authority Key Identifier:
                keyid:03:37:8F:29:E8:D9:77:9E:0C:C5:1E:F5:E8:CB:25:A4:0C:0A:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8c7dbcd5-d6bb-4a89-98ae-e2550ea3e93a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:46:11:54:54:66:e6:fc:d7:66:6a:1d:01:4f:c1:05:55:2d:
         e9:69:dd:0c:61:3c:4d:c0:87:05:6e:dd:2a:44:26:55:4d:11:
         d6:9e:73:cf:11:9f:75:a5:9d:29:b2:a7:41:e6:b3:9e:d3:00:
         66:93:cd:56:b8:36:60:cc:9b:09:5f:7d:39:e5:a8:a8:02:30:
         c3:91:a1:ca:fa:bc:fa:36:d7:75:43:fa:83:c7:51:db:3f:4d:
         28:69:46:f2:49:9d:cd:02:46:b0:6d:94:51:89:f8:1e:cd:f9:
         86:6f:8c:e3:93:28:14:db:46:92:31:db:ab:1f:c5:67:50:93:
         8c:71:f7:e9:38:80:55:f6:a5:50:c5:c8:06:f8:e0:b4:7f:64:
         ce:3d:8d:0d:fd:1c:e5:e4:7b:11:5c:b9:fe:6d:2d:75:5b:f6:
         79:3e:ce:fe:52:d8:95:c2:e1:1a:96:b2:7b:24:c1:35:0f:16:
         9d:8e:bd:b0:b8:b6:f6:6e:1a:9d:0f:5c:90:52:90:46:24:46:
         ab:18:95:bc:1b:13:38:a6:18:4b:d7:8d:d0:47:aa:c4:7b:1e:
         52:af:a7:53:e0:f2:22:25:e5:4b:08:13:0d:8a:1e:cb:ae:c2:
         8d:6e:ba:d1:32:1f:84:8a:df:bc:ef:dd:cc:45:31:3c:5e:bc:
         a3:68:d1:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 19:52:19 2025 by rpki-client