Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/f1e5fe4f-72e7-3a39-a046-dd4f666c3204.roa
File:                     f1e5fe4f-72e7-3a39-a046-dd4f666c3204.roa (raw, json)
Hash identifier:          Oyayh+KTR1fkooWebw8CCbvXuqfJr/917C+j8//X5BA=
Subject key identifier:   C9:37:A7:8F:BC:FC:C0:1B:FC:19:3E:E0:D6:9A:FE:CE:B6:80:D4:B8
Certificate issuer:       /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial:       010D0C9F4328584AB91BAABB342E90EC0A876300
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/f1e5fe4f-72e7-3a39-a046-dd4f666c3204.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     25899
IP address blocks:        67.59.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:aa:bb:34:2e:90:ec:0a:87:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=74a48247-b846-4956-b482-f258a9b71dbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7b:49:2f:eb:e4:77:0b:d6:9f:7e:da:64:4e:
                    da:32:15:b5:70:c0:68:ab:ad:70:db:6e:6e:88:5f:
                    8d:ab:7c:b0:c1:12:2e:f0:b7:4e:cb:0a:fc:73:b9:
                    29:94:2c:9f:66:5a:0c:fb:49:d9:c9:c5:0c:c9:dd:
                    22:95:17:60:9c:ea:97:bc:da:58:4c:f5:4f:09:e3:
                    c0:fa:36:c0:db:ae:90:d6:3f:3b:f4:45:a3:33:8e:
                    8c:ca:4b:82:73:e1:9a:d3:28:16:77:06:d0:98:f7:
                    59:b7:e3:9a:56:d3:fb:ec:e1:53:e3:21:32:dc:22:
                    13:32:7c:2f:4c:a9:62:6c:83:a2:95:c6:63:cf:2d:
                    d6:d8:05:5c:12:cb:a6:32:49:f2:f8:2f:f2:9e:81:
                    9e:62:49:54:c7:7f:b7:12:c9:f8:e5:db:8e:ac:8f:
                    3f:40:06:74:af:04:5b:a9:48:1a:13:27:fa:d3:51:
                    1a:69:42:8c:d1:60:2a:9b:cb:f1:d1:32:64:95:a2:
                    44:72:64:18:28:52:fc:17:ad:89:95:84:b8:cc:8a:
                    b6:74:98:ab:b5:8b:eb:fe:2e:98:3f:38:b5:d1:26:
                    6d:b6:1d:61:63:84:94:4d:ff:5d:02:50:6a:99:9a:
                    20:5f:53:d7:55:a2:ed:56:70:10:7c:0a:67:a5:c0:
                    1b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:37:A7:8F:BC:FC:C0:1B:FC:19:3E:E0:D6:9A:FE:CE:B6:80:D4:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/f1e5fe4f-72e7-3a39-a046-dd4f666c3204.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl

            X509v3 Authority Key Identifier:
                keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.59.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:0b:3c:cc:91:d6:8b:6a:14:c3:05:1a:fe:02:03:f6:e5:d9:
         32:00:35:0d:8a:9b:a0:7f:41:48:c6:51:b9:ae:16:38:83:87:
         97:04:11:a7:28:05:87:2c:58:c0:1a:ae:43:0f:75:bb:37:db:
         6e:8a:08:1f:2c:0e:73:6f:b0:aa:bd:15:6d:9c:79:e8:e3:40:
         3e:ab:c1:26:7b:29:fb:4b:39:96:3a:1c:7d:5b:1f:5d:ea:2c:
         b4:90:9f:7f:45:56:14:b3:de:1d:33:09:e9:9e:37:24:8c:91:
         5d:90:04:64:ff:51:0b:26:33:a4:e8:75:18:71:1d:4f:b2:6e:
         a7:f4:86:7d:a5:a8:10:7d:f0:c9:f2:08:90:93:0d:b2:65:1d:
         45:4a:ff:78:9d:37:b1:05:d9:f1:1f:62:0e:1b:c7:26:47:f7:
         e9:c1:d6:bf:90:7e:f5:fc:35:63:73:bc:bc:09:53:5c:3c:e7:
         1c:b8:1d:60:5c:1b:bb:e7:76:03:ea:5a:c0:1e:5a:0b:0e:af:
         e4:0e:7e:ce:90:76:65:5b:28:8b:ff:9c:c0:11:8b:f6:af:f5:
         4e:fe:b3:ea:fa:bc:e0:10:41:81:31:df:a4:2d:33:9e:8b:5e:
         d1:50:b9:4c:c8:3a:25:29:b4:e0:cf:a5:d5:80:50:18:67:c0:
         34:61:53:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 21:48:37 2025 by rpki-client