Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/b7bce095-e4d8-3e20-b621-fa58a93ddd59.roa
File:                     b7bce095-e4d8-3e20-b621-fa58a93ddd59.roa (raw, json)
Hash identifier:          wqyb52AaCp7vjlDLR6Oe5rKgwWzuUmWHrdDtDP39+y0=
Subject key identifier:   85:A9:29:92:F4:DB:01:AA:34:E9:6F:18:9F:31:C9:24:2D:48:FA:BE
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F4328584AB650D1390158AC6E4C5B3180
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/b7bce095-e4d8-3e20-b621-fa58a93ddd59.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     16904
IP address blocks:        68.169.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:d1:39:01:58:ac:6e:4c:5b:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=651795dd-92d3-405d-a7f0-1b620b55bfd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:25:f0:f1:57:a0:18:60:39:33:bd:13:b9:
                    8b:60:1a:a3:cb:87:46:51:0e:2f:6e:ca:32:f8:a3:
                    f3:27:76:8f:0d:ef:57:e9:82:4b:34:43:05:c1:5f:
                    b4:36:ed:53:3b:69:7d:77:df:de:68:fe:96:63:f6:
                    50:7d:71:ea:89:9f:01:10:e4:66:e3:43:83:bf:09:
                    df:7c:2a:9c:fd:05:ae:e6:1b:f6:87:5b:78:a4:94:
                    ea:93:cc:a9:83:e4:2c:e3:c3:78:c2:24:d6:d7:d9:
                    6d:ca:d8:42:8f:c5:84:6c:5b:d8:2b:ac:f2:1f:3f:
                    ce:6d:aa:49:c7:62:c6:0f:de:eb:64:42:c7:80:e2:
                    0a:50:5c:2f:2e:99:3c:6a:ce:af:96:d1:6f:50:98:
                    9b:69:56:57:80:ed:39:bb:3e:86:d2:95:b3:eb:97:
                    1a:30:ed:03:97:a7:29:87:49:8e:5c:8c:92:6a:4d:
                    ce:dc:52:a2:f9:6f:3e:b3:44:32:67:a3:ee:3f:25:
                    75:66:a3:33:ff:5f:d0:4d:a0:49:39:d1:bd:c7:57:
                    5b:d8:37:e8:e0:ab:30:6c:c6:b9:ba:e1:a5:c2:5c:
                    32:b6:85:3f:6d:a1:ff:f2:40:95:9c:bb:82:90:85:
                    d5:03:28:0a:f6:59:db:f7:03:d3:79:88:21:81:dd:
                    a6:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A9:29:92:F4:DB:01:AA:34:E9:6F:18:9F:31:C9:24:2D:48:FA:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/b7bce095-e4d8-3e20-b621-fa58a93ddd59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.169.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:7d:ef:22:f9:f7:9d:18:db:9f:4e:cb:90:c1:19:1b:19:9e:
         d0:e0:3a:8c:03:2a:07:85:a4:5d:b6:4b:07:bb:39:c9:1d:49:
         01:7d:d1:4f:b9:85:ba:41:84:5e:6c:f4:af:46:61:cb:bf:1e:
         aa:01:80:11:20:66:de:86:e8:4c:6c:92:ff:20:34:26:6c:1b:
         e4:93:0a:70:06:42:e4:e3:f8:6b:48:0d:4a:e9:a7:49:e9:98:
         8c:38:b5:49:88:3d:6d:3c:98:a3:d7:4f:4d:4e:d8:15:57:aa:
         16:3c:f9:bc:0a:76:7c:28:7a:50:e2:e6:48:36:67:32:01:e9:
         49:a1:4a:d7:a5:09:59:e7:00:6d:fe:f4:4d:58:56:a6:7e:e2:
         06:71:4f:9b:4d:8c:14:1c:99:a3:69:bc:e9:8b:23:83:b7:ca:
         6e:66:b7:6c:af:83:63:8e:19:65:36:9f:41:27:ab:4c:b2:7b:
         e0:dd:15:bf:cd:82:24:f9:bb:f0:9c:f8:a3:71:5a:28:10:01:
         91:8b:33:d2:c8:bd:91:73:04:d9:21:c5:ab:a5:bc:c3:52:fc:
         71:77:34:1f:2c:21:b5:0e:ba:2a:07:ad:4b:3a:b2:7c:29:ad:
         6b:0f:c4:c4:30:3a:d0:30:6c:89:44:77:64:55:a2:5b:2f:92:
         69:b2:c0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:53:30 2025 by rpki-client