Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd014180-a8c8-3a16-a1b3-72fbe5df7860.roa
File:                     fd014180-a8c8-3a16-a1b3-72fbe5df7860.roa (raw, json)
Hash identifier:          6JN7XOUGXwQ+7IblsVY5uy/Szl6OWNlzcQxXsaPUAcQ=
Subject key identifier:   37:4C:76:FA:D1:20:BE:25:86:CD:76:BB:2E:E5:0B:95:32:A2:10:E7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B95A8D73116BF6CE9AD817E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd014180-a8c8-3a16-a1b3-72fbe5df7860.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     33668
IP address blocks:        68.61.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a8:d7:31:16:bf:6c:e9:ad:81:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=3db26ca6-084a-4b4c-adb2-9834ae3e9e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5b:93:91:36:86:90:79:f0:11:78:9b:17:39:
                    5d:1e:1a:aa:1d:d9:16:a6:a1:d3:0f:35:11:11:16:
                    b5:11:4b:08:0a:d5:2e:95:12:ed:2e:af:15:23:ca:
                    3e:70:9b:69:43:36:1a:b5:c8:4a:77:79:37:aa:95:
                    de:34:8b:f1:81:19:60:96:f4:73:28:1b:56:b8:ed:
                    7c:71:47:d7:71:71:71:be:30:be:64:12:0c:42:40:
                    de:b0:e4:2d:8c:ac:0c:ab:02:2e:53:b4:d4:ae:74:
                    ee:b8:af:87:ef:6c:9f:32:9a:87:26:7d:c5:b2:7f:
                    c5:8f:39:23:05:70:51:d8:d9:bd:c8:15:88:be:de:
                    3a:57:a9:a0:fc:be:57:9b:be:ac:a1:75:7d:70:82:
                    ff:13:f0:a6:2a:1f:f3:20:b8:ed:d2:a4:e0:24:87:
                    33:8e:4d:f5:cd:24:d6:32:8f:fb:81:f3:e3:03:42:
                    25:6c:b0:f9:01:3c:cc:9e:43:18:30:b2:cd:e1:e0:
                    6a:63:0e:8b:fa:28:da:56:f0:04:a4:3e:1e:0f:bd:
                    c1:99:ce:b8:7b:35:70:de:58:5f:8a:41:97:a7:4d:
                    48:33:31:e2:c4:50:d9:2d:81:72:50:bc:8c:b6:0e:
                    de:d6:a3:f8:82:f9:ee:73:8d:fa:ea:d1:bd:bb:23:
                    2f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4C:76:FA:D1:20:BE:25:86:CD:76:BB:2E:E5:0B:95:32:A2:10:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd014180-a8c8-3a16-a1b3-72fbe5df7860.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.61.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:1d:ab:8e:81:89:a9:7b:0c:c8:b4:72:11:7d:e3:69:64:24:
         9b:21:31:a0:d0:61:5a:b9:e4:71:b1:c8:ac:ca:09:c7:3f:b1:
         60:53:b8:e6:27:e9:e9:7a:3e:cb:29:e4:be:67:f2:1c:6f:0f:
         50:51:95:84:66:af:d3:f4:54:fc:5a:39:f5:01:f3:59:23:82:
         4d:85:94:9b:61:2e:f4:65:72:06:60:99:3b:f8:6e:d9:e9:e0:
         0f:3b:f4:af:b4:7d:54:13:14:87:2c:30:1d:c4:44:a9:b6:09:
         1a:d4:76:35:2a:d3:ba:16:6b:b9:23:9d:99:58:6c:f4:a8:9f:
         84:3d:61:a4:20:be:a7:71:67:67:e1:e4:a1:55:b6:e6:29:eb:
         7d:db:a7:5d:47:0c:25:7a:00:f6:99:1c:50:be:1c:32:91:81:
         d4:0b:85:9a:e8:66:45:fd:79:25:e5:19:19:b3:b9:2f:f0:39:
         93:be:94:58:aa:94:51:af:61:94:04:6c:1e:a1:0d:98:f6:d9:
         48:fa:33:6e:e8:bf:6e:c1:75:47:b8:d4:fc:6c:72:c7:12:62:
         f0:a6:dd:77:23:a4:97:db:23:ab:ff:f9:ae:16:95:3e:db:55:
         0b:59:ff:c6:48:e7:6e:d3:f6:97:7a:84:b4:d0:10:c5:42:13:
         79:60:67:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:38:53 2025 by rpki-client