Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/cef865ee-b2f3-3257-b04e-8d7011350c02.roa
File:                     cef865ee-b2f3-3257-b04e-8d7011350c02.roa (raw, json)
Hash identifier:          MJEbCS2Ee7wW36TU+gpeqfGcH1xt6mxzB/ubCcjKIfw=
Subject key identifier:   C0:2B:31:95:29:EF:EF:5A:59:92:9A:39:CA:6D:F8:34:D8:B4:4B:36
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F43285849F71510E8FDFF8DC0C8E15000
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/cef865ee-b2f3-3257-b04e-8d7011350c02.roa
Signing time:             Sun 25 May 2025 01:00:49 +0000
ROA not before:           Sun 25 May 2025 01:00:49 +0000
ROA not after:            Sat 23 Aug 2025 01:00:49 +0000
asID:                     23059
IP address blocks:        68.142.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f7:15:10:e8:fd:ff:8d:c0:c8:e1:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: May 25 01:00:49 2025 GMT
            Not After : Aug 23 01:00:49 2025 GMT
        Subject: CN=73dfdefe-d1fc-43ae-b3ee-9cf56933e124
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:53:c9:8f:d8:87:2c:47:e9:00:5f:1b:f6:79:
                    bd:4e:4b:4b:13:30:75:d9:37:59:b2:9f:4f:56:d4:
                    68:32:a6:7b:fb:75:26:66:c4:fd:1c:12:1e:bc:d4:
                    2d:f0:c9:01:19:f9:ae:ff:d2:f9:e2:8e:c2:7a:3a:
                    d2:99:36:cb:db:4d:d8:25:75:ee:36:dd:76:63:ca:
                    68:74:80:29:b3:53:66:62:4e:f1:dc:a5:4b:e6:83:
                    69:df:98:0f:4f:d3:38:30:24:0f:c5:76:65:6f:a7:
                    e4:f3:23:70:fe:19:f1:cd:c9:c5:25:f6:64:fc:c2:
                    a0:6d:b1:dd:97:ed:a1:1d:64:d6:6b:13:95:50:e0:
                    4c:c6:b1:52:26:0b:a3:b6:0b:eb:70:43:09:6d:1b:
                    37:34:8c:12:41:92:32:43:8e:29:ee:5c:fa:c1:50:
                    6b:9b:18:2b:d3:74:07:10:34:b3:e4:83:38:47:8f:
                    f0:32:68:e2:0f:22:28:d8:1d:14:46:8d:e0:83:75:
                    de:68:77:78:db:9d:9b:f2:68:82:09:27:68:6b:94:
                    cb:cf:c3:a9:40:b7:95:8a:8a:12:65:36:ea:df:96:
                    c7:b4:ec:ee:eb:d9:c9:ec:29:75:d7:86:fb:2a:77:
                    6e:a8:18:96:b3:35:52:9f:db:16:c0:3b:a8:0c:34:
                    95:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2B:31:95:29:EF:EF:5A:59:92:9A:39:CA:6D:F8:34:D8:B4:4B:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/cef865ee-b2f3-3257-b04e-8d7011350c02.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.142.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:4d:b6:7f:62:c5:7f:fd:30:59:35:cc:d1:a4:bf:38:db:0b:
         64:0f:26:05:1b:79:e2:10:09:cd:ac:57:2d:8a:5f:d9:63:c9:
         6e:d0:82:c7:22:4f:93:1f:03:4a:05:d3:83:3e:9d:26:d3:2c:
         1c:ca:eb:2e:94:c9:65:c6:a2:41:8b:f6:dc:e0:1d:a3:86:34:
         0f:76:c2:ee:ea:1c:b1:76:78:6f:b3:f1:23:cf:88:8c:af:55:
         59:5f:41:1a:01:fd:c2:b0:9b:cb:a8:54:d1:33:56:fd:92:4f:
         3e:15:85:bd:d7:61:cf:2d:73:c3:8a:ad:0d:4d:ea:d3:2d:61:
         19:34:2d:0b:e5:71:05:06:ea:26:b1:de:6c:bd:8f:3d:f1:ee:
         1f:2e:fa:ef:84:6c:6b:b3:37:c7:d0:80:b4:d2:24:c8:d2:da:
         31:6c:16:7d:59:45:c8:a8:40:61:6a:d8:fd:00:38:7c:36:5c:
         e1:0d:e1:c2:b8:f1:f7:1a:aa:a1:86:b8:6b:ff:b7:10:51:85:
         6d:94:63:a5:2c:c1:06:e0:57:2b:6d:b3:48:06:47:21:d5:e7:
         e4:1b:79:27:25:3f:cc:5e:ab:10:45:ed:d9:b4:c5:b2:0d:92:
         ce:c0:60:4f:c8:7b:87:cf:4e:99:c2:e4:6d:3b:b6:46:7c:aa:
         a7:c0:e8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:30:44 2025 by rpki-client