Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/62b60a0a-2df1-3e7a-8192-108b0e86b27b.roa
File:                     62b60a0a-2df1-3e7a-8192-108b0e86b27b.roa (raw, json)
Hash identifier:          KiQWrIBEwc7GP2IihqgKg4mWMhmBjQvtg0L5M5/KI3g=
Subject key identifier:   4E:97:59:43:84:20:19:0C:AE:28:C6:AA:02:56:6E:E5:65:2F:69:C8
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F4328584AC9DB9E7C83FB6C63D7DA8F00
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/62b60a0a-2df1-3e7a-8192-108b0e86b27b.roa
Signing time:             Fri 08 Aug 2025 13:00:40 +0000
ROA not before:           Fri 08 Aug 2025 13:00:40 +0000
ROA not after:            Thu 06 Nov 2025 14:00:40 +0000
asID:                     64269
IP address blocks:        168.245.216.0/21 maxlen: 24
                          208.56.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c9:db:9e:7c:83:fb:6c:63:d7:da:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Aug  8 13:00:40 2025 GMT
            Not After : Nov  6 14:00:40 2025 GMT
        Subject: CN=26c3625f-3f5b-4b99-aa80-259c35876977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:bd:26:c2:72:3e:4b:0c:ba:92:be:ec:2e:97:
                    1e:af:4d:ea:53:57:fc:89:18:06:b3:47:86:30:8b:
                    4c:74:6b:72:8b:12:64:c0:f6:f3:49:ea:0a:1b:f8:
                    36:a7:b0:7b:08:84:19:a1:59:57:ba:af:66:d3:da:
                    95:71:db:86:0b:6b:7b:10:ca:e3:47:06:b4:05:0f:
                    06:b8:ad:cc:20:0d:9f:a2:17:cb:27:7a:b6:cb:bb:
                    b0:0d:24:b1:ff:46:2b:31:79:88:7d:6c:37:87:9f:
                    3d:44:ac:d2:ba:15:b8:4b:64:88:34:c3:dd:84:f8:
                    5f:fe:44:b4:68:ec:1c:02:4b:09:21:f7:16:f8:8e:
                    15:4e:af:e2:6d:d6:af:db:f7:8b:a7:26:d5:2f:91:
                    20:1e:4d:a6:4c:47:45:5c:84:99:88:cc:a3:32:8a:
                    cb:f6:bb:87:37:57:bc:e0:a7:eb:eb:cb:f1:50:ef:
                    88:08:06:6e:4c:78:76:81:9b:ef:f6:80:c0:3a:31:
                    68:79:ac:93:9b:47:d4:5d:12:33:1e:da:07:66:7f:
                    0d:1f:bf:1b:ea:42:d7:52:ef:44:db:c3:80:84:ab:
                    ff:d1:10:81:45:5e:ee:97:c3:4e:a0:a6:2f:5d:a3:
                    e5:78:78:f7:97:75:92:62:76:d4:90:56:cf:1d:a7:
                    5c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:97:59:43:84:20:19:0C:AE:28:C6:AA:02:56:6E:E5:65:2F:69:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/62b60a0a-2df1-3e7a-8192-108b0e86b27b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.245.216.0/21
                  208.56.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:7c:a9:d6:26:c6:56:e1:4b:e5:5f:c4:5f:97:d6:cd:01:4d:
         bf:06:67:94:61:15:5e:dc:ff:79:0c:c7:4e:e2:d9:b6:64:39:
         52:c5:cb:8d:f7:41:60:c6:b6:d7:f6:9d:1c:91:82:84:be:e6:
         7b:f2:39:09:54:a0:84:73:ac:79:a1:61:6c:23:36:40:3b:16:
         1a:31:29:32:19:8e:88:21:51:7c:ab:d1:42:93:a0:46:55:28:
         b5:cc:cc:d2:27:0b:dc:3d:61:52:57:72:34:c7:56:0e:58:ad:
         a1:82:ed:ae:1b:2c:df:7e:b1:ae:f3:17:3a:73:57:77:22:f3:
         f8:34:2f:e8:08:68:0c:a7:12:a3:bd:11:e6:38:79:f2:87:b9:
         ee:8f:fe:f8:af:7b:fa:80:a3:c3:03:ae:6b:60:48:2f:2c:4b:
         90:44:12:c5:b5:f9:f6:d1:3d:38:52:31:8d:c8:a3:79:dd:ca:
         46:71:03:35:2f:2f:73:6d:fb:1d:7e:20:c9:a5:43:67:7e:90:
         85:78:ca:38:fe:b7:a9:83:67:0b:4c:08:e4:85:a0:64:1f:83:
         b0:f3:4f:a6:e2:0d:91:30:30:30:29:cf:fc:29:f6:dc:49:a8:
         3d:9c:2b:e6:e8:78:10:1d:f4:48:df:2e:8e:98:aa:97:e2:53:
         43:35:b5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:41 2025 by rpki-client