Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b6c0f12-0b2b-31a0-b47f-f2108c0a9114.roa
File:                     2b6c0f12-0b2b-31a0-b47f-f2108c0a9114.roa (raw, json)
Hash identifier:          LKGF7syGeSrJIeX62uh2S8w/mXVe+h3tf1T96rdq9PY=
Subject key identifier:   62:8B:26:2F:45:A4:53:0E:9C:65:50:29:0F:07:0D:BB:4D:00:3E:60
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B2B919113D0FD403DA0E4E8E8
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b6c0f12-0b2b-31a0-b47f-f2108c0a9114.roa
Signing time:             Fri 12 Sep 2025 13:00:42 +0000
ROA not before:           Fri 12 Sep 2025 13:00:42 +0000
ROA not after:            Thu 11 Dec 2025 14:00:42 +0000
asID:                     0
IP address blocks:        66.236.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2b:91:91:13:d0:fd:40:3d:a0:e4:e8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep 12 13:00:42 2025 GMT
            Not After : Dec 11 14:00:42 2025 GMT
        Subject: CN=43749805-f130-431d-9984-de1162670cd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e5:7a:9c:f9:99:b3:54:7f:e4:67:98:06:21:
                    ff:79:80:46:e1:79:4a:1c:41:ad:ba:b5:47:88:36:
                    0a:61:e1:33:40:24:16:26:4a:7f:ec:43:7a:14:e9:
                    8e:22:4e:c8:d8:37:a5:75:38:07:c4:e4:3b:ad:f4:
                    e7:66:78:d2:a8:ac:34:9a:76:ee:34:26:e2:99:fd:
                    49:99:68:7d:ad:a2:b2:bf:2f:b4:3c:65:a4:6b:82:
                    39:09:9e:c1:44:f4:81:db:a3:94:73:fb:e8:f6:62:
                    44:3d:f1:c4:86:a1:52:08:88:0a:fc:ed:74:56:8b:
                    5e:88:72:ca:dc:c5:7c:8e:f0:15:6d:00:85:43:5a:
                    d7:fd:47:69:d0:88:c1:82:78:26:f0:84:06:bb:15:
                    ce:bb:3e:c5:97:cd:b5:55:78:bd:1c:8d:9e:e4:35:
                    fa:ea:47:0d:24:9f:e8:aa:f8:52:c1:d6:96:7a:58:
                    74:01:27:89:9e:d2:e9:27:63:33:60:67:ed:2c:56:
                    34:37:d9:ad:d0:87:75:ba:4f:54:8b:67:10:9f:17:
                    c3:57:3c:ac:3f:4e:ea:4f:8a:61:a3:b8:a9:2d:2c:
                    9a:e2:3f:b4:9a:21:6b:8f:4b:50:40:2c:4e:ba:e0:
                    b5:55:8d:1f:48:80:ab:62:f1:b8:11:02:d3:dd:f5:
                    76:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:8B:26:2F:45:A4:53:0E:9C:65:50:29:0F:07:0D:BB:4D:00:3E:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2b6c0f12-0b2b-31a0-b47f-f2108c0a9114.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.236.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:f0:80:4e:01:d3:98:6a:12:8a:cb:13:13:22:57:db:b1:b1:
         86:a5:20:f8:f0:f6:dc:6a:11:3c:c2:f7:57:db:bc:34:ed:52:
         c0:3e:11:5b:25:1e:fa:9b:d7:63:6f:78:57:69:f9:53:74:36:
         07:5e:1e:34:51:96:04:44:6a:fd:2f:0d:08:f9:38:45:59:32:
         55:c5:f7:2a:3c:34:8a:fd:3b:a9:12:5d:20:21:87:2d:5b:e3:
         fc:29:4e:c2:be:ca:14:c9:c6:7b:fe:8e:9e:83:b5:46:59:6c:
         a2:93:63:85:b9:2b:f7:de:f3:be:dd:0b:33:d8:03:8a:07:75:
         8e:f3:4b:6a:59:7f:f6:69:25:20:b7:a6:94:aa:cd:b7:c1:5d:
         26:25:db:b5:aa:83:4a:9e:dc:e5:91:7e:58:d6:94:3b:60:ce:
         fc:a9:54:80:38:f5:7f:fd:39:44:96:1e:65:29:1f:b5:ca:aa:
         20:cf:da:90:5c:3b:1e:6b:4a:ca:2d:c7:12:1c:08:b4:cb:45:
         e1:4b:6a:59:1d:2e:13:6e:d9:62:20:e7:8e:ac:35:e0:fd:89:
         4b:08:cf:6e:9b:a9:69:72:56:cd:21:b1:ba:ce:52:83:88:74:
         03:a8:8b:c6:f4:6a:a6:31:08:ac:81:df:38:41:5c:e2:79:cc:
         3c:d7:a0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 23:59:45 2025 by rpki-client