Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f842fac7-cd73-3534-92f5-b9959d9393b4.roa
File:                     f842fac7-cd73-3534-92f5-b9959d9393b4.roa (raw, json)
Hash identifier:          scfAzQTF71BCrTFAvB/yPs4dO0ooRu5Hsze4E9JOajY=
Subject key identifier:   AD:E2:4D:F7:A4:24:7B:8E:19:98:62:CF:2F:63:FE:CA:05:10:A4:19
Certificate issuer:       /CN=cbfbd197-84de-44e6-b527-b42dddca269d
Certificate serial:       010D0C9F4328584B67BB3D0F3C1CE23281B4B8C0
Authority key identifier: 60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f842fac7-cd73-3534-92f5-b9959d9393b4.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     46414
IP address blocks:        68.68.225.0/24 maxlen: 24
                          68.68.227.0/24 maxlen: 24
                          68.68.228.0/24 maxlen: 24
                          68.68.230.0/23 maxlen: 24
                          68.68.235.0/24 maxlen: 24
                          97.107.152.0/24 maxlen: 24
                          97.107.155.0/24 maxlen: 24
                          97.107.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:67:bb:3d:0f:3c:1c:e2:32:81:b4:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbfbd197-84de-44e6-b527-b42dddca269d
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=95f51009-674d-40b9-81df-91c30bf641b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:42:0b:c3:06:7e:2d:0c:ba:b6:2c:6e:55:b2:
                    03:4e:02:ed:ce:2a:45:c6:3a:ab:0c:d3:32:8b:6b:
                    8d:60:91:df:64:c7:a7:11:cf:91:11:fe:52:1b:77:
                    ca:89:b6:2b:8f:f6:45:4d:89:2e:84:af:cb:9d:e4:
                    d1:3c:38:6c:e2:41:f6:77:95:1d:fc:4d:3b:e5:79:
                    bc:23:7c:ee:30:05:10:ae:f3:87:08:c9:84:cc:85:
                    69:a7:fc:8d:7b:99:98:8b:8b:97:ad:fc:ae:1e:a6:
                    1d:b3:b9:8a:3d:ee:f1:ca:3c:a9:1c:96:6b:59:42:
                    9c:fb:15:c9:8c:9a:fb:9b:8d:1b:c9:24:8d:5d:74:
                    66:f3:f7:36:18:aa:fa:90:58:06:2a:1f:47:e1:f4:
                    03:4b:62:31:f1:08:65:62:ba:06:84:c4:1d:b4:f8:
                    3a:82:12:a7:ac:26:ad:e1:61:37:ab:07:19:48:d1:
                    97:09:d9:be:6c:04:24:f9:dc:da:41:59:07:38:d4:
                    8b:b3:61:e8:cc:7c:32:a1:e3:a2:9b:58:bd:f4:c0:
                    1a:56:89:f2:81:82:77:bd:89:56:69:29:83:d7:f5:
                    6c:00:16:3c:8f:74:f4:e8:1d:e9:be:eb:33:be:db:
                    5e:1a:3f:48:ac:3b:eb:62:3b:8a:59:eb:39:83:50:
                    7f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E2:4D:F7:A4:24:7B:8E:19:98:62:CF:2F:63:FE:CA:05:10:A4:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/f842fac7-cd73-3534-92f5-b9959d9393b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d/cbfbd197-84de-44e6-b527-b42dddca269d.crl

            X509v3 Authority Key Identifier:
                keyid:60:0E:2C:A4:4F:50:A8:12:87:F8:AA:8D:F8:F5:E8:4C:A5:40:9A:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/cbfbd197-84de-44e6-b527-b42dddca269d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.225.0/24
                  68.68.227.0-68.68.228.255
                  68.68.230.0/23
                  68.68.235.0/24
                  97.107.152.0/24
                  97.107.155.0-97.107.159.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:df:ad:9c:04:24:7a:df:38:54:84:a9:12:29:6d:7d:d9:fc:
         0e:9b:81:8d:b8:9f:6d:af:56:64:cc:c8:30:f6:15:ff:fb:30:
         58:2a:90:9d:7e:d5:4c:b2:48:4b:a9:f9:7b:3f:a6:61:ab:6a:
         33:29:dc:53:eb:ab:75:f2:89:da:57:e9:ef:8b:3f:94:df:4a:
         ba:f2:9e:29:7f:8b:0c:1a:14:b8:9e:90:02:9e:e2:df:2f:f2:
         99:79:5e:32:94:fb:4a:14:6e:92:ad:26:4e:7b:cd:d9:9a:aa:
         a6:e8:7f:81:f5:c0:37:62:3a:ab:4c:e7:68:4c:a5:50:ab:c7:
         ce:a7:39:be:2b:82:12:4f:65:6c:4c:5a:97:f4:c3:f4:d8:6c:
         6e:d6:d7:25:2b:b8:eb:16:28:89:71:25:d4:3a:2b:de:f6:89:
         97:11:aa:e8:8b:6e:ad:86:b9:82:85:91:44:56:7c:de:0f:e7:
         00:24:f3:89:e6:ed:f4:61:66:e2:0b:9f:10:17:3e:6b:93:ea:
         d0:99:ce:e0:0e:2c:13:86:25:4b:cb:30:3a:4e:4e:16:12:80:
         60:5f:0d:ca:44:e1:c8:96:b8:ed:b7:3d:3d:57:6b:3d:1d:78:
         ea:4d:d6:f0:dd:4e:57:e2:5d:f0:2a:9e:7a:fd:79:98:41:43:
         80:12:cd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 20:07:38 2025 by rpki-client