Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/540f3fa3-50e9-3a75-aa95-eefc62b65fea.roa
File:                     540f3fa3-50e9-3a75-aa95-eefc62b65fea.roa (raw, json)
Hash identifier:          iUOEGjAfGETRRr3Ot6fTC3x4zJZakkyos79/NOD3tQ8=
Subject key identifier:   7D:C6:76:3C:10:3A:BE:EC:54:B9:A8:E0:AE:B6:4E:F4:15:4B:9B:35
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584B0CDC1485E2E709F06AA70740
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/540f3fa3-50e9-3a75-aa95-eefc62b65fea.roa
Signing time:             Mon 01 Sep 2025 13:00:40 +0000
ROA not before:           Mon 01 Sep 2025 13:00:40 +0000
ROA not after:            Sun 30 Nov 2025 14:00:40 +0000
asID:                     26744
IP address blocks:        68.170.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 21 Sep 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0c:dc:14:85:e2:e7:09:f0:6a:a7:07:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Sep  1 13:00:40 2025 GMT
            Not After : Nov 30 14:00:40 2025 GMT
        Subject: CN=85905142-9c0a-40f8-8bdc-2f185c537647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ad:b9:13:d8:47:2f:e5:b1:69:97:01:60:1d:
                    e2:f8:23:a5:d3:d6:e6:43:54:2e:77:b9:d2:a4:62:
                    47:cc:45:ba:e8:00:12:74:63:26:5e:3c:77:a9:dd:
                    1c:03:b2:d9:21:26:71:d9:33:6f:8e:f3:13:e4:36:
                    38:4f:cf:94:ad:6c:63:84:18:c4:57:f5:48:8a:34:
                    ab:92:ba:61:a6:51:41:99:2b:c3:49:80:6f:6e:09:
                    8b:c7:1f:be:4e:ba:67:3c:cc:ef:7e:2a:8d:c2:d7:
                    2e:c2:e1:b6:04:4b:13:29:06:3b:58:10:8f:03:a0:
                    1e:ce:97:db:9d:a5:5b:0c:4f:90:3c:82:76:81:9c:
                    e1:61:99:93:d7:ff:28:b6:17:86:db:be:e8:87:71:
                    5f:40:a2:2a:e8:96:ff:44:0d:fd:3f:a8:de:c6:43:
                    ec:9d:0a:74:b1:4c:a0:3f:0d:e1:db:67:8a:fb:e4:
                    bc:01:1e:27:17:04:61:75:4a:a2:73:12:d1:95:06:
                    2e:16:83:a6:86:b4:54:1a:34:63:5f:61:7e:a2:a5:
                    56:86:fa:17:b7:28:1e:84:88:53:5a:ea:b1:0e:4a:
                    d5:8e:bb:40:67:61:f8:a2:19:c6:f9:52:9e:b1:39:
                    ff:05:1e:e8:d4:97:7b:96:ba:11:8c:e0:dc:28:4d:
                    02:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:C6:76:3C:10:3A:BE:EC:54:B9:A8:E0:AE:B6:4E:F4:15:4B:9B:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/540f3fa3-50e9-3a75-aa95-eefc62b65fea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:46:42:77:73:63:e9:3b:20:15:ee:0b:bd:18:e0:99:b6:65:
         f7:61:2c:4d:52:90:ba:22:9b:5b:d0:b8:8b:9e:05:7e:50:fc:
         ab:88:73:68:dc:c0:33:d8:81:8f:86:bf:01:00:25:65:84:4c:
         28:7a:af:43:d7:60:8c:b9:ab:76:7c:dc:aa:31:3c:56:f9:18:
         28:44:e2:ad:55:d5:27:68:f1:b5:f5:e8:32:d3:6f:63:ef:7f:
         05:fc:1e:78:a8:b3:ba:0c:50:3e:fd:91:33:36:a2:08:8f:76:
         64:3e:1e:37:fb:97:33:f3:94:6e:40:4f:e1:da:ac:61:ec:4d:
         3e:8c:32:e7:d5:d5:6e:a2:9e:a0:ab:36:7c:a1:b6:fa:3c:0b:
         d5:d2:c0:3b:91:dc:dd:d5:ad:2e:c4:a0:00:cf:18:d7:8c:f5:
         cd:0e:ca:ac:5c:47:2e:50:f5:38:61:db:71:9f:9e:69:1d:80:
         26:2d:11:c5:65:2e:7b:19:4e:a8:d8:cd:4f:9c:1f:64:c8:dc:
         c3:9c:9d:93:39:6f:2d:73:c9:7c:41:7b:27:d9:d4:c3:9b:cf:
         61:64:10:2f:14:91:6d:b8:7d:80:33:fe:73:c6:cb:8f:bc:1e:
         1d:79:6b:9f:7a:c0:4b:9f:8e:b7:96:bc:7e:9a:a3:90:3f:89:
         a6:ea:54:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 14:20:23 2025 by rpki-client