Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/fcb0bcb2-dd5e-3eb3-b644-c55fb3617c53.roa
File:                     fcb0bcb2-dd5e-3eb3-b644-c55fb3617c53.roa (raw, json)
Hash identifier:          RwQQtzWVEdu7g2hCqNAVUQ6z1zKMaripSO67ejw5OV8=
Subject key identifier:   D4:37:EB:DA:40:56:9B:51:88:F3:7B:12:1D:AE:8B:94:AC:BE:C0:89
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584A00DAC9CB9318E852735AF780
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/fcb0bcb2-dd5e-3eb3-b644-c55fb3617c53.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     26744
IP address blocks:        68.170.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c9:cb:93:18:e8:52:73:5a:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=f8f12f57-8af5-474e-8417-79f0a69faa53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:f0:37:26:ed:1c:36:c4:66:32:03:7e:30:
                    c6:bd:2e:19:b0:1d:08:58:b6:4d:5f:14:6b:30:d3:
                    c1:bd:27:43:b1:a4:c8:3c:00:9b:47:17:19:9c:55:
                    40:3d:af:49:9e:18:ca:77:bf:a8:ab:97:89:1b:16:
                    b2:e2:28:4d:a5:f2:bc:7f:22:d1:51:5b:a9:0e:da:
                    a3:39:bf:f5:ed:1d:09:43:91:42:0d:41:e3:fb:c5:
                    c1:e1:fa:92:54:29:50:2f:74:3f:e7:f8:91:d0:dd:
                    07:94:13:96:70:82:73:d2:ce:11:95:49:89:f2:f2:
                    39:27:f7:73:c9:97:7f:4f:eb:cb:1e:0f:a4:bb:82:
                    08:fd:70:08:7f:dd:3c:15:b3:65:ee:47:9c:fc:f5:
                    18:ac:5a:7d:09:0c:d6:6d:25:fe:b0:d7:17:9d:f4:
                    75:da:97:69:37:96:93:9b:15:32:43:75:2a:15:e6:
                    a1:db:01:9c:bc:16:ce:b8:ee:e9:03:24:53:c7:b2:
                    a2:6e:ad:e1:04:28:8e:fe:de:aa:f1:3b:52:68:6a:
                    b5:ce:e8:a2:e5:78:2a:97:e6:8c:af:6f:93:4a:77:
                    d7:13:b2:69:fa:df:a6:51:30:b9:3d:16:1c:e8:5d:
                    9d:55:88:d3:b4:ff:48:b9:5c:bc:a2:17:c8:28:62:
                    18:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:37:EB:DA:40:56:9B:51:88:F3:7B:12:1D:AE:8B:94:AC:BE:C0:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/fcb0bcb2-dd5e-3eb3-b644-c55fb3617c53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:8d:a8:4b:79:d1:4b:f9:5a:0b:59:a9:0f:c3:39:44:eb:e7:
         a6:86:73:c6:65:d1:2c:20:a0:75:79:93:9e:6c:b3:63:c0:bf:
         9a:3c:b4:51:e2:d5:d3:b5:51:23:34:47:e3:dc:31:7c:67:6a:
         33:de:50:c4:31:3f:ce:49:73:f2:b1:03:5c:7c:55:5d:2d:da:
         14:cb:bf:1e:bb:e3:ee:ab:9f:41:2a:6f:37:42:07:ac:f3:53:
         4b:cb:76:a0:3d:3e:5d:29:89:3c:6d:ff:2e:db:50:71:cb:3d:
         4b:bf:8e:c5:d1:de:d2:0c:5a:58:d2:d4:71:00:5c:90:3b:36:
         ef:80:78:8a:ee:f5:66:02:3d:c0:04:9e:5b:bb:51:19:2d:44:
         48:c1:5c:2d:7a:f7:d4:10:d1:4d:55:c4:9f:f9:1e:32:ea:93:
         0d:bf:30:84:39:3e:ec:ad:5b:6a:08:8b:7f:87:ae:78:ec:d8:
         ae:4c:20:16:7d:44:fb:98:6c:67:0f:e8:3e:4f:28:ed:ee:c6:
         55:74:bd:88:c8:ea:d7:e0:2d:75:92:ca:b8:f8:3f:ac:77:2e:
         c5:c6:7a:bf:04:0f:c1:10:51:2d:29:94:58:6b:a5:64:4b:1d:
         7e:f8:66:50:86:2b:ff:a8:13:9f:77:1c:f8:6e:69:14:b7:00:
         6b:3c:12:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:23:52 2025 by rpki-client