Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/2136fbe9-084d-389d-99c4-54b075432424.roa
File:                     2136fbe9-084d-389d-99c4-54b075432424.roa (raw, json)
Hash identifier:          OBYM4EhnjYe7S6pJA20/f77chbPjq94H3lXY+18kGIM=
Subject key identifier:   66:D9:61:0D:C1:FF:98:1D:11:4B:99:2F:F6:3C:FB:9E:C4:BE:4D:5D
Certificate issuer:       /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
Certificate serial:       010D0C9F4328584B4DADBC43A345AFE919E45C00
Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/2136fbe9-084d-389d-99c4-54b075432424.roa
Signing time:             Wed 24 Sep 2025 18:15:00 +0000
ROA not before:           Wed 24 Sep 2025 18:15:00 +0000
ROA not after:            Tue 23 Dec 2025 19:15:00 +0000
asID:                     62787
IP address blocks:        68.69.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:4d:ad:bc:43:a3:45:af:e9:19:e4:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976
        Validity
            Not Before: Sep 24 18:15:00 2025 GMT
            Not After : Dec 23 19:15:00 2025 GMT
        Subject: CN=b6216b10-6728-458e-81ba-bcf5c82e796f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:19:a5:83:cd:e6:bd:38:b3:56:ef:e4:29:9f:
                    c7:dc:86:58:76:3e:b4:97:3b:d0:c9:c7:31:a5:2c:
                    01:d1:1f:46:cb:4f:a4:9b:45:b5:63:46:8e:4d:da:
                    5c:c1:58:a3:08:41:99:25:25:22:ef:d7:1d:07:e8:
                    d0:8b:87:7e:1e:b1:f5:ae:42:51:6e:db:73:64:10:
                    cb:87:91:e9:16:12:18:87:ce:b5:d5:bb:a8:28:95:
                    47:8a:bf:49:63:c1:95:e5:74:07:ab:00:d3:b4:09:
                    fd:84:a0:91:b2:f8:85:01:6e:4d:cf:6e:5f:11:bc:
                    b0:ef:80:9d:38:1c:c1:ef:3b:fb:c4:e9:e8:37:95:
                    ec:d6:00:f6:fc:ed:dc:1a:87:fc:96:92:21:03:cc:
                    12:85:83:ac:bc:12:67:f0:8a:99:3c:5b:b5:e5:13:
                    f5:a0:30:d9:61:e7:7c:05:36:e6:8d:55:6b:85:de:
                    59:27:c6:71:41:06:f1:f4:c1:83:5f:e4:7d:61:58:
                    1f:cf:73:6b:73:75:f6:f8:af:d1:e4:21:c1:27:c3:
                    7f:68:ab:11:a7:a2:e9:99:96:36:bf:5a:bd:f9:bd:
                    95:12:93:b2:e6:d8:ff:79:c2:68:ee:53:55:1c:0e:
                    35:0e:b4:37:55:c5:4e:07:0f:bd:87:17:ee:4e:64:
                    f8:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D9:61:0D:C1:FF:98:1D:11:4B:99:2F:F6:3C:FB:9E:C4:BE:4D:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/2136fbe9-084d-389d-99c4-54b075432424.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl

            X509v3 Authority Key Identifier:
                keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:c9:84:3f:0e:06:63:14:2a:cc:f3:23:b9:2a:fa:48:c1:32:
         99:ee:c0:22:b2:49:9e:ec:59:aa:53:a7:fd:e0:0e:fa:26:ce:
         7d:6c:ca:9b:56:8d:ca:8b:44:9c:b4:8b:1a:38:dd:ca:ac:6e:
         a5:be:00:2b:95:7c:49:e9:e6:35:f8:47:3d:56:0e:75:a7:17:
         77:0f:62:16:37:1a:bf:c2:f0:66:12:54:0d:1b:00:2a:14:9b:
         ea:62:d4:11:a3:03:8d:8f:32:6a:88:9e:4e:08:90:45:13:4d:
         44:fc:ae:83:2d:72:08:6a:82:5a:dd:8d:4e:9f:31:01:e2:c4:
         3f:d7:31:38:c1:5a:d2:ed:30:a8:f8:55:95:53:0c:d4:5d:8b:
         44:32:09:ac:20:d1:41:1a:e9:ad:1d:26:4c:01:e4:7c:c7:14:
         17:bd:df:fc:51:81:62:f4:89:ae:75:a6:66:a5:28:cd:e1:57:
         f3:7d:a2:9b:53:3d:8e:a8:27:a1:73:55:31:f1:a4:6a:6f:fd:
         d9:f8:63:e0:7e:8a:95:8b:1b:98:b9:f3:92:16:94:ea:dd:01:
         99:7f:c5:bc:3d:2c:23:3a:72:a3:3f:0c:d0:31:74:1e:bc:c3:
         9e:c4:d9:cb:90:2c:a0:5f:52:fd:2d:3f:55:62:0b:2e:8b:65:
         51:e9:b8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:19:32 2025 by rpki-client