Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8f83a025-4c20-3f17-8d78-fe614226ddcb.roa
File:                     8f83a025-4c20-3f17-8d78-fe614226ddcb.roa (raw, json)
Hash identifier:          eEUY7WuiEkpPTk2IlA0ilN2R1r7TZ9GklLWOPue3BaQ=
Subject key identifier:   17:E0:CB:E0:82:C6:96:81:8E:45:A9:B4:8E:FB:E9:FF:C2:3B:94:19
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584A2ABAE28BD84E4289A6F08AC0
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8f83a025-4c20-3f17-8d78-fe614226ddcb.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     394285
IP address blocks:        68.68.144.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e2:8b:d8:4e:42:89:a6:f0:8a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=6f67919f-f034-40f5-b141-fef8802c38e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b2:f9:a1:28:a3:55:34:0c:1a:e2:b6:f8:26:
                    4f:b6:94:aa:03:aa:b7:64:d9:5e:82:8c:67:7b:f4:
                    c4:0d:5f:52:44:44:ea:fa:86:fb:3a:28:03:26:ab:
                    ae:ce:1f:ad:03:b5:94:de:b2:46:fe:5c:30:b2:08:
                    72:3f:56:88:be:65:1a:0e:41:c7:8a:7e:23:99:16:
                    48:19:aa:03:b9:95:bb:6c:76:ef:0c:08:93:38:5c:
                    39:1f:cc:30:99:ad:dd:18:65:42:df:1e:19:de:60:
                    ac:78:4d:06:8a:43:5a:5d:d5:c8:d7:8a:a4:42:be:
                    2a:45:83:8f:42:e7:91:75:78:3b:ee:8c:ae:c5:59:
                    14:14:53:8f:3b:77:27:70:c7:96:a1:32:a9:bf:77:
                    68:0c:78:be:2b:ad:d1:55:74:92:ae:d3:e2:6b:a4:
                    4e:70:a8:11:05:83:8d:72:d0:40:76:1d:0d:bc:b8:
                    49:fd:71:8d:05:75:0f:04:2b:a1:9d:b0:2e:5c:5b:
                    00:ed:98:c0:45:6f:ed:9c:8f:c3:fe:dd:99:dc:43:
                    d6:75:cf:66:a5:23:c4:a7:f8:af:26:f2:91:a7:5a:
                    3d:f3:49:06:90:41:a9:e4:29:e6:28:28:50:33:15:
                    3b:5e:6d:e0:dc:cb:5b:92:61:17:b6:ce:70:96:24:
                    9d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E0:CB:E0:82:C6:96:81:8E:45:A9:B4:8E:FB:E9:FF:C2:3B:94:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/8f83a025-4c20-3f17-8d78-fe614226ddcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.68.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:ac:cf:c6:10:c9:46:16:40:c2:c0:c7:d8:57:23:19:6e:f2:
         7b:35:27:df:ed:ee:55:04:5c:db:7a:d8:46:7c:8c:05:12:3e:
         f5:ba:b2:d7:6b:f9:52:f3:29:dc:ac:ea:2a:61:88:57:73:18:
         89:dd:b0:ca:11:7b:b9:32:ae:21:8e:a1:0b:18:d5:a5:66:eb:
         18:bb:89:70:98:f5:94:f5:34:53:88:82:28:8c:85:d0:56:aa:
         34:4e:90:b8:0a:e3:19:27:79:b8:be:a7:5f:64:cc:1a:30:d8:
         7a:00:98:b1:27:fb:16:e8:03:e1:6a:c4:98:f8:b2:39:d1:2a:
         89:8d:c1:8b:19:f1:b6:3a:ac:09:a1:da:53:c9:70:25:25:ad:
         40:7c:c8:96:19:c7:9e:9c:5f:f1:88:05:d5:47:c9:9b:c1:aa:
         cb:b7:47:c6:c5:73:8b:5f:b0:bb:36:28:1e:0c:64:0b:f7:01:
         a3:3c:24:a7:99:71:34:f1:b9:ce:1e:df:48:5a:ee:54:41:e8:
         cc:d6:46:63:4a:00:8c:d1:c0:a8:eb:e6:ed:03:bf:fc:89:0e:
         85:61:11:93:53:5a:78:a4:fe:39:48:d9:a0:d2:fc:83:d1:fb:
         e8:97:74:1d:63:9a:ae:87:df:f3:25:93:a0:71:e9:96:ee:72:
         9c:70:92:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:25:40 2025 by rpki-client