Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/755e284d-86ed-37d3-acf1-c76b054b77e4.roa
File:                     755e284d-86ed-37d3-acf1-c76b054b77e4.roa (raw, json)
Hash identifier:          JxR6f8goprdneR4tBzv77M+AAARWWlymwCde8eUykHc=
Subject key identifier:   E3:82:4C:16:78:68:35:69:08:7D:07:AA:FF:EC:6D:B2:1E:9A:0F:F2
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F43285849F715176D98E8416819312900
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/755e284d-86ed-37d3-acf1-c76b054b77e4.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     38622
IP address blocks:        68.142.68.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:17:6d:98:e8:41:68:19:31:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=56871c7b-2e59-465b-a8f0-668d23c13b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b4:6f:de:9b:43:32:6a:0e:ff:e6:ef:2f:d9:
                    95:cc:fa:dd:ff:c9:86:ef:d9:f3:bc:a9:55:0e:bb:
                    57:ec:e9:63:1d:34:71:90:50:52:dc:37:c1:1e:dd:
                    72:1d:79:f3:3d:6e:54:0d:47:c9:df:0d:cc:6d:41:
                    5a:bd:76:66:15:99:07:c6:61:0c:1e:59:77:d3:7d:
                    6a:f3:27:02:bb:14:27:87:d2:3d:ba:60:2c:54:fa:
                    a3:74:c5:58:82:51:d3:22:e6:c8:e3:c9:0f:ec:d3:
                    66:04:d6:07:bc:74:16:97:1c:92:bc:24:cc:2f:c7:
                    f7:67:bb:7f:a8:af:37:0f:18:f9:3a:7d:2b:62:63:
                    5f:f0:ac:5d:e0:df:31:8b:70:09:cf:b3:db:e7:63:
                    a3:a9:a9:a9:8f:fd:56:d6:6f:b6:8b:84:42:27:df:
                    e0:c3:ca:70:0a:bb:0c:8d:8e:f2:f6:c1:ad:6d:35:
                    c5:5e:31:88:bc:98:a9:3c:da:e1:15:c3:c5:25:d6:
                    a8:6d:91:77:62:f1:e3:53:d5:75:e8:79:6d:49:37:
                    a1:0d:7d:b2:5e:1d:a9:ad:c2:b5:b8:cc:2f:23:ae:
                    68:cc:a8:d7:a5:db:42:08:9f:03:89:f3:00:bc:42:
                    b5:58:e2:96:1f:ab:44:c8:c3:8c:88:36:a1:6b:ec:
                    64:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:82:4C:16:78:68:35:69:08:7D:07:AA:FF:EC:6D:B2:1E:9A:0F:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/755e284d-86ed-37d3-acf1-c76b054b77e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.142.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:24:b7:37:7f:0a:6e:37:d6:eb:df:0a:10:78:4d:b4:85:f9:
         4f:06:6e:65:b8:a4:05:15:3f:fa:f5:ef:4b:d7:59:69:15:c1:
         f2:d6:38:91:e2:88:1b:93:f4:f1:97:42:45:1f:c2:95:cb:81:
         0d:e2:bc:d8:7c:6c:2a:dc:7f:36:cc:11:4d:5b:6b:4e:29:78:
         ea:3e:28:b0:0a:02:08:3a:94:61:86:82:c8:90:8f:8d:05:48:
         ca:4c:7c:92:a9:e9:f1:02:65:44:fb:d1:e4:69:e7:97:f3:97:
         ad:de:ec:c4:c2:2f:f7:c3:87:fd:cc:1c:00:75:61:e7:db:b0:
         20:dd:76:88:23:27:0f:e5:50:63:d0:f6:ea:a4:ae:9e:4b:89:
         b9:dd:ca:f1:ce:54:b5:1e:1c:f5:d9:12:01:b0:d8:b7:76:fb:
         fa:3f:fe:65:22:3f:46:a3:11:4d:7a:a9:23:30:02:b2:87:47:
         aa:43:a9:33:8a:ef:d1:54:e1:58:d3:bb:73:dc:c9:b6:aa:45:
         37:b8:61:ea:fc:a0:0f:00:41:fc:4d:68:52:20:5a:05:81:95:
         62:fd:34:cf:21:88:0a:2e:c8:41:cd:82:6a:de:37:59:08:95:
         19:2d:a3:e6:e2:48:c9:47:f3:9e:91:e2:fc:7b:85:67:41:a5:
         0f:a3:9b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:23:05 2025 by rpki-client