Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6a285f23-a6d5-3a05-839f-d1320f1944eb.roa
File:                     6a285f23-a6d5-3a05-839f-d1320f1944eb.roa (raw, json)
Hash identifier:          UHxs/S18wll0oSSC/UZtPdhyINyzEWOh2FlfWCndULM=
Subject key identifier:   E5:28:9B:3C:F0:B3:37:07:13:27:0F:D6:B2:90:4A:ED:FF:C0:95:31
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584B35E003C8CA114252DABC0B40
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6a285f23-a6d5-3a05-839f-d1320f1944eb.roa
Signing time:             Tue 16 Sep 2025 05:36:54 +0000
ROA not before:           Tue 16 Sep 2025 05:36:54 +0000
ROA not after:            Mon 15 Dec 2025 06:36:54 +0000
asID:                     3257
IP address blocks:        68.165.106.0/23 maxlen: 24
                          68.166.188.0/23 maxlen: 24
                          68.167.64.0/23 maxlen: 24
                          68.167.68.0/23 maxlen: 24
                          68.167.70.0/23 maxlen: 24
                          68.167.144.0/23 maxlen: 24
                          68.167.182.0/23 maxlen: 24
                          68.167.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 20 Sep 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:35:e0:03:c8:ca:11:42:52:da:bc:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Sep 16 05:36:54 2025 GMT
            Not After : Dec 15 06:36:54 2025 GMT
        Subject: CN=680a2bfe-f918-4217-96d2-170c61e88497
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:2d:54:e7:52:ad:8c:13:24:79:35:fa:dc:00:
                    91:dc:d2:c8:c6:66:f5:ad:4f:7a:9b:a8:82:12:6d:
                    15:7a:55:c9:17:ff:82:09:f0:07:99:2c:df:c5:a3:
                    55:22:71:48:e8:4d:2a:5a:dd:47:a5:ef:40:c8:65:
                    5e:54:8b:c7:82:23:36:f8:3d:67:83:f1:20:d3:3a:
                    ca:ca:f6:ca:ee:22:88:83:5e:8a:7e:5f:b3:e8:d2:
                    ec:61:33:3f:e1:2e:e0:04:0b:fe:9e:06:14:57:6e:
                    ec:70:c9:a8:bc:bf:4c:55:4d:f2:68:d6:27:b4:06:
                    9d:79:4c:c7:2a:3e:0c:f7:73:6e:6c:7f:48:86:4c:
                    b3:9a:1a:aa:a8:6f:98:f5:ec:19:7b:34:b9:62:69:
                    79:9c:77:a6:9d:8b:a6:c1:e9:56:9a:9d:59:bc:c8:
                    1a:33:8d:7f:16:d1:84:05:7b:89:85:72:44:94:10:
                    b3:2f:58:8a:b2:cd:51:d2:7e:29:d9:59:c9:4b:36:
                    39:64:cb:05:89:56:5d:ae:ad:48:2f:41:77:35:1f:
                    8a:fe:f9:ac:6b:c3:72:7c:ba:8e:66:3f:f2:da:62:
                    91:42:a5:74:bb:ee:20:19:d4:18:ec:9c:8e:98:e6:
                    2b:9f:4b:c9:e3:4a:e3:a5:e7:c3:b7:e9:66:2a:cf:
                    df:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:28:9B:3C:F0:B3:37:07:13:27:0F:D6:B2:90:4A:ED:FF:C0:95:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/6a285f23-a6d5-3a05-839f-d1320f1944eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.165.106.0/23
                  68.166.188.0/23
                  68.167.64.0/23
                  68.167.68.0/22
                  68.167.144.0/23
                  68.167.182.0/23
                  68.167.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b4:40:a4:36:c8:e9:a2:e4:2a:6d:2f:be:fd:71:94:c3:ff:
         6b:6d:91:2d:8a:8e:ad:4b:51:18:59:a2:21:95:20:00:33:ad:
         56:f8:72:1b:5f:40:ad:43:7f:fc:2c:75:49:61:01:41:a7:af:
         72:63:39:f6:b9:73:ef:3a:63:b3:ec:6c:24:37:ba:ad:cf:41:
         92:3a:5d:39:0b:b5:6d:7f:c1:18:6b:56:6c:b5:35:00:6e:ec:
         40:6c:73:08:56:b1:92:e6:e0:84:8f:19:fc:54:74:99:64:b1:
         5a:ac:a4:75:24:48:22:96:b0:ac:45:e6:db:da:84:1e:2c:39:
         66:4f:38:be:bf:21:38:fb:ad:ee:fb:50:a5:91:0e:7b:ce:6b:
         f6:b0:7b:f0:91:4a:06:69:61:89:cd:eb:53:b9:a4:ae:d6:bc:
         b0:93:aa:b2:cd:45:64:0f:d0:d9:2d:5a:3d:a8:c0:7c:b9:02:
         a6:77:5b:71:69:7d:eb:78:c8:42:4c:5a:80:c0:7f:32:2d:c9:
         f5:04:16:92:f3:48:3f:55:40:02:bb:09:90:6e:25:8d:c8:e2:
         40:07:55:3c:38:4a:14:bc:cc:cb:b5:ec:57:2b:4e:89:ae:50:
         68:3d:54:9d:72:d7:1e:fa:ca:d3:36:12:5f:09:6e:97:93:d9:
         7e:25:d4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 01:33:42 2025 by rpki-client