Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/eb314902-c439-3a6d-b09b-293e9d9bacc7.roa
File:                     eb314902-c439-3a6d-b09b-293e9d9bacc7.roa (raw, json)
Hash identifier:          t52YJA+THcGke3uhYQG/ofwLxWVZgnjVXCYiMaAD72g=
Subject key identifier:   DD:34:DF:49:88:08:B2:47:C8:32:5C:72:00:79:C0:8A:C2:47:B0:F5
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584A9900C3D2A380A2562FD1C280
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/eb314902-c439-3a6d-b09b-293e9d9bacc7.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     834
IP address blocks:        68.67.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c3:d2:a3:80:a2:56:2f:d1:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=a86e4628-ce0c-4b31-929c-81bc61341445
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:91:b5:b9:f4:ef:b1:81:19:78:f8:cf:85:d2:
                    5b:3b:e5:19:d1:01:b3:e7:a9:f7:fe:95:04:da:14:
                    39:5d:d2:d7:0b:52:bd:c2:62:4a:85:03:94:a4:6f:
                    b9:bc:b1:79:04:f6:e3:3d:41:1a:a0:d3:d3:69:f6:
                    f0:e9:78:b1:57:12:47:ff:46:8f:2f:4d:e0:60:18:
                    33:14:19:09:c0:55:8e:f0:e2:e4:ef:39:cf:47:77:
                    e2:00:20:63:c6:98:c4:ad:3d:01:ff:29:0c:8e:6d:
                    3a:c6:4b:10:f6:54:ff:eb:f6:7a:ec:f1:33:6b:c2:
                    3b:e5:53:fc:af:54:13:91:d8:5d:b7:a2:57:d1:5f:
                    12:22:bb:8f:65:3f:93:63:b5:58:c2:25:c3:48:9e:
                    7c:fa:07:14:1c:97:54:84:fc:45:1f:19:4e:d6:e0:
                    8a:a4:02:72:96:8e:13:7b:05:2b:f1:95:c2:8c:a1:
                    f6:18:4c:bb:31:48:1a:fd:be:d9:69:54:05:7c:11:
                    97:05:f2:b9:86:4c:37:14:b1:73:ab:b1:08:b9:95:
                    30:27:11:d9:44:d8:3f:2a:6a:55:70:52:a8:89:5a:
                    97:15:68:ee:cf:50:90:d7:8d:a8:c2:57:ff:c8:14:
                    22:1d:ae:b7:fa:e6:c8:94:7a:84:a2:29:64:3a:80:
                    f8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:34:DF:49:88:08:B2:47:C8:32:5C:72:00:79:C0:8A:C2:47:B0:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/eb314902-c439-3a6d-b09b-293e9d9bacc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:9d:f7:39:37:58:2d:46:cd:8f:a0:e4:15:2b:7f:ec:13:4e:
         91:e6:f2:ea:9c:f1:bd:dd:2d:82:9f:b8:15:1d:eb:08:09:0e:
         48:f0:a3:fc:c5:22:b3:c5:7a:0a:26:18:52:7d:21:ea:e7:77:
         ea:5c:9c:fc:5c:72:d1:e3:5f:16:f0:ab:2e:e6:c1:94:ce:e6:
         f3:44:04:92:9f:45:9e:d4:c4:ee:07:8f:4e:db:17:51:f4:99:
         57:e7:37:eb:d9:69:88:1d:f0:eb:4a:70:6e:a7:13:7f:bb:6b:
         ae:2e:ad:4f:2e:c8:f9:46:e7:8c:e0:2d:db:70:70:a0:33:b9:
         76:35:ce:26:8d:90:a8:87:b8:b4:9d:eb:0e:c1:89:e3:4a:f6:
         4d:02:cd:09:0f:99:98:ab:1a:68:4a:fa:81:36:03:6e:5f:d2:
         ee:c1:9e:dd:44:e5:11:c0:79:71:5a:0e:23:52:96:5b:49:7a:
         ef:10:df:f7:53:19:06:32:56:7f:1d:09:7d:2a:9d:b2:f7:8d:
         f5:9c:75:fb:27:2f:17:7c:5c:3a:49:55:68:d2:65:54:04:cd:
         f6:53:24:6c:47:06:15:57:dd:07:8d:37:ec:18:be:e3:46:1c:
         7a:da:c8:ef:70:f7:d5:c8:da:a7:3e:f0:5a:fc:0d:c8:27:34:
         22:45:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 23:30:42 2025 by rpki-client