Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/68d16d04-7b58-3bef-a5a7-0125a7efcd07.roa
File:                     68d16d04-7b58-3bef-a5a7-0125a7efcd07.roa (raw, json)
Hash identifier:          C5VoyBXfjj/tkt/24DGdG+hHZCY3WJqd/4j0Wn6u3Ik=
Subject key identifier:   2E:73:C2:3B:45:00:1A:84:E0:8F:C9:F6:A2:88:8E:8B:61:58:4B:BF
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584BAF058370A221764FE56DB980
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/68d16d04-7b58-3bef-a5a7-0125a7efcd07.roa
Signing time:             Wed 24 Sep 2025 13:00:41 +0000
ROA not before:           Wed 24 Sep 2025 13:00:41 +0000
ROA not after:            Tue 23 Dec 2025 14:00:41 +0000
asID:                     46606
IP address blocks:        67.222.32.0/19 maxlen: 24
                          69.89.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:af:05:83:70:a2:21:76:4f:e5:6d:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Sep 24 13:00:41 2025 GMT
            Not After : Dec 23 14:00:41 2025 GMT
        Subject: CN=2872a56b-f800-4bf2-8a40-8f3e1f9c3cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9e:7f:3b:d5:9a:ed:78:6e:62:b2:80:3d:bf:
                    d8:78:46:cb:8c:95:45:bf:31:97:b8:8c:4f:e4:42:
                    01:14:d8:78:02:21:87:e2:4d:ea:8b:09:f3:b7:4a:
                    0c:a0:78:82:49:67:cb:c9:08:c8:6b:c4:3e:33:7e:
                    eb:d6:1a:8a:15:35:87:17:aa:d7:e7:1f:6e:fd:7a:
                    16:55:e1:44:2a:c3:68:46:37:31:8a:e6:10:ed:47:
                    f3:8b:31:88:1d:93:f5:96:7a:34:bc:af:b7:1a:46:
                    f0:c3:ef:c0:66:9c:8f:0b:16:f1:cb:9e:48:99:be:
                    6f:c8:3c:0a:73:b2:4d:80:bb:45:88:32:1a:a1:14:
                    94:50:e7:fa:f9:2b:d9:d9:3c:cb:28:3c:f6:b4:a5:
                    c7:99:2f:35:bb:16:1a:13:4a:13:79:59:5b:46:84:
                    dc:c0:ad:2b:a6:8b:6f:24:a0:ad:c1:1a:91:29:8b:
                    5a:68:37:d0:45:20:9f:b6:b9:0d:8e:99:16:73:41:
                    42:b9:48:00:b3:34:e4:bb:19:41:1b:d6:41:2c:25:
                    3b:90:69:91:84:31:48:67:f3:0c:ac:8f:c6:b3:75:
                    71:86:5d:bd:26:1a:e5:e0:a4:73:63:d3:cd:fd:f7:
                    97:78:c3:dc:08:db:39:fb:fc:c6:26:e3:ca:37:10:
                    84:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:73:C2:3B:45:00:1A:84:E0:8F:C9:F6:A2:88:8E:8B:61:58:4B:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/68d16d04-7b58-3bef-a5a7-0125a7efcd07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.222.32.0/19
                  69.89.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:aa:cf:fc:8f:ca:2f:57:a7:83:13:fa:cb:0e:0d:0f:ef:1c:
         54:5b:29:c9:81:d9:0a:c7:14:9e:2c:07:fe:96:fd:43:8d:33:
         08:02:c9:c5:8a:90:5f:74:fd:bf:e6:0a:5a:af:9a:74:29:04:
         87:29:fe:c3:de:b0:e1:45:22:aa:4c:35:50:28:b3:ed:21:48:
         5e:53:bc:90:9a:30:77:0e:a9:7b:7c:9a:b3:88:6d:df:ee:ea:
         97:8e:ac:37:bc:7e:7c:3b:53:18:c9:ea:96:c7:bb:38:d6:12:
         46:de:c7:38:77:82:27:7c:a6:31:89:41:75:09:8b:fe:66:c9:
         b4:21:c5:3f:9d:bb:ea:e9:0c:45:b8:12:52:a3:fd:68:80:a0:
         41:d1:58:2a:e5:7e:8d:08:6c:28:0e:e3:bf:8f:35:40:a9:5e:
         99:d0:f3:11:aa:51:5d:ca:13:06:be:f9:c8:67:ec:2e:6b:0f:
         e8:b0:21:a4:85:6b:aa:9e:5d:2e:fb:9a:b0:ca:e2:be:ce:c7:
         12:63:1d:e2:0a:67:00:c9:6a:1c:89:de:af:80:fe:ba:18:c1:
         9e:e2:9b:ea:ab:84:10:d8:58:47:87:da:81:cd:31:fb:76:ee:
         3c:75:b1:12:9d:58:22:47:76:81:16:67:65:22:85:4d:e5:0f:
         90:4c:5d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:57:22 2025 by rpki-client