Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3270bf46-577e-342a-891f-2588c3f46da4.roa
File:                     3270bf46-577e-342a-891f-2588c3f46da4.roa (raw, json)
Hash identifier:          72lhAvlwVoiLfJYVsLegNphN8kqYHTFtOJbDMVhKnSM=
Subject key identifier:   16:AB:F4:7E:64:A0:20:B2:4D:DA:36:7F:C5:C3:C4:DC:97:EB:FE:7F
Certificate issuer:       /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial:       010D0C9F4328584ADB8EC85ED517E125A9ECF400
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3270bf46-577e-342a-891f-2588c3f46da4.roa
Signing time:             Thu 14 Aug 2025 21:10:29 +0000
ROA not before:           Thu 14 Aug 2025 21:10:29 +0000
ROA not after:            Wed 12 Nov 2025 22:10:29 +0000
asID:                     23473
IP address blocks:        68.180.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:db:8e:c8:5e:d5:17:e1:25:a9:ec:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
        Validity
            Not Before: Aug 14 21:10:29 2025 GMT
            Not After : Nov 12 22:10:29 2025 GMT
        Subject: CN=2dc3c972-48ae-4fb1-b007-2e90c02bbca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:41:e7:38:d7:7a:a3:71:aa:73:9f:b8:d6:2c:
                    f8:2d:86:5c:00:1b:d3:4b:9e:58:34:e4:ed:4e:11:
                    37:9a:50:31:52:c8:d4:56:b4:f1:ee:b0:45:da:0e:
                    1d:58:9d:d5:1d:4e:32:6a:4a:87:0e:56:b4:2a:80:
                    c1:1c:58:e4:ca:28:55:ff:14:59:40:53:99:f5:f8:
                    88:9e:fd:b2:56:59:30:3b:19:cb:e0:b7:87:19:ad:
                    78:ef:d4:62:1e:a9:0f:2f:f7:28:c5:21:92:35:08:
                    83:40:e1:86:64:8b:26:7b:62:2d:0f:f9:0f:71:67:
                    85:d8:ef:ec:92:e2:5a:ac:9f:8a:40:05:b2:5f:9e:
                    7e:29:29:6c:c9:ec:32:02:b8:94:72:50:54:49:36:
                    57:c3:e4:d0:b9:5e:74:d9:4c:02:29:0d:49:bc:b3:
                    02:ec:7d:b3:69:07:d1:1e:0e:d6:bc:34:7c:92:46:
                    4b:e3:f2:df:18:f3:9e:88:37:e2:ce:15:ee:58:9c:
                    1d:5e:20:83:15:0d:05:76:96:0c:b9:7e:51:09:8d:
                    ad:e0:b9:2d:95:73:e7:21:75:63:03:40:a9:b3:f0:
                    0c:0a:b6:35:c9:c9:79:0d:4c:0f:e5:60:5d:7c:ed:
                    99:33:ea:ae:ad:cd:79:ab:8b:84:3d:1b:52:14:11:
                    d8:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AB:F4:7E:64:A0:20:B2:4D:DA:36:7F:C5:C3:C4:DC:97:EB:FE:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3270bf46-577e-342a-891f-2588c3f46da4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl

            X509v3 Authority Key Identifier:
                keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.180.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:48:c5:9a:61:be:bd:ea:d3:5c:60:ab:74:83:40:df:dd:d6:
         5a:f6:ae:f7:dd:e4:b4:02:ad:46:c2:b5:07:19:c5:3a:f8:9d:
         98:13:52:b9:59:59:6b:f3:a8:e5:c8:20:30:7a:ae:eb:5f:b3:
         a1:3c:54:d9:a5:9c:35:29:92:da:a6:75:4f:11:9a:53:28:9b:
         0f:d2:4f:d0:72:af:77:d6:5a:70:f2:8e:e0:69:3b:b9:97:22:
         5d:45:f6:bd:90:af:e4:70:b7:fa:43:64:a1:ba:f0:ba:4a:d4:
         e2:e7:74:56:e1:af:6d:75:0c:39:8f:15:26:1d:6e:9a:a1:e3:
         06:67:1e:42:5b:d4:aa:a5:53:21:4c:ad:9b:78:e1:76:3d:04:
         a9:14:7c:70:fe:2f:06:e4:c5:b9:c0:00:4f:6f:4f:e3:98:fd:
         0e:b0:21:2f:04:30:bb:a5:be:5e:1a:31:35:f9:ea:05:0b:58:
         0c:03:0e:7f:8b:95:54:cc:8f:2e:eb:6f:e4:ee:4a:2d:aa:98:
         19:0d:8a:39:6a:c7:9e:f6:d0:74:22:75:c2:30:16:f4:22:88:
         7b:83:2a:04:08:3e:3b:32:0c:68:b1:94:3c:1d:55:10:c6:ec:
         ad:28:7f:d8:40:ff:64:92:bf:d5:16:8c:a6:68:00:ff:3d:cf:
         94:e2:0e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:55:15 2025 by rpki-client