Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/29236e4a-8133-37fa-a4bc-d5c0a7721d8c.roa
File:                     29236e4a-8133-37fa-a4bc-d5c0a7721d8c.roa (raw, json)
Hash identifier:          SVkPQ2l2SGh49Jc5CAOwhxNXW1SeUpTEW9UxLqLrhJo=
Subject key identifier:   1D:F0:48:99:2B:BD:4A:E1:B1:FC:C9:2B:E4:AA:8D:7F:47:78:B1:C0
Certificate issuer:       /CN=c7554e9f-a3b0-474f-b728-4f959aa35449
Certificate serial:       010D0C9F4328584BA5023E47E2EF21DAEAD902A0
Authority key identifier: 96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/29236e4a-8133-37fa-a4bc-d5c0a7721d8c.roa
Signing time:             Sun 26 Oct 2025 01:00:31 +0000
ROA not before:           Sun 26 Oct 2025 01:00:31 +0000
ROA not after:            Sat 24 Jan 2026 02:00:31 +0000
asID:                     7843
IP address blocks:        68.170.0.0/24 maxlen: 24
                          68.170.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:a5:02:3e:47:e2:ef:21:da:ea:d9:02:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7554e9f-a3b0-474f-b728-4f959aa35449
        Validity
            Not Before: Oct 26 01:00:31 2025 GMT
            Not After : Jan 24 02:00:31 2026 GMT
        Subject: CN=8eba0fa3-49dd-4ab1-964e-40280a7b754c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:75:ca:6e:90:6f:8d:64:7f:e7:79:22:7e:1b:
                    62:6d:19:f8:09:1c:71:ae:83:02:10:19:73:53:4b:
                    28:83:d6:cb:f6:6a:ee:92:b3:42:0f:54:41:74:30:
                    cc:8a:6f:13:54:b1:c7:d0:e6:9c:ca:2f:d6:03:d7:
                    96:77:01:67:73:34:16:d1:87:a2:ed:dd:0a:9f:c8:
                    bc:25:1b:51:91:b1:93:7c:df:6e:68:4a:bc:a4:79:
                    11:e7:09:60:66:da:85:56:f7:0f:5a:ed:28:f2:86:
                    0b:51:0c:34:e6:5b:93:20:9e:aa:d0:4f:3f:15:4d:
                    dd:63:75:ef:12:af:58:d5:5f:48:e9:4e:5d:1b:e2:
                    e3:4e:b2:bc:3a:80:b0:79:ac:76:51:22:90:fa:b8:
                    64:e9:f4:a4:b9:34:9c:c2:53:b1:94:54:17:71:19:
                    b0:b8:51:4b:99:97:1b:7c:43:d9:47:5b:60:1b:64:
                    d5:67:dc:9a:4e:20:1e:51:83:25:c2:2c:0a:78:4c:
                    8e:ac:d4:83:65:07:7e:01:f0:19:87:e4:2e:5b:09:
                    66:e5:67:4c:84:f8:b4:8d:3d:83:bf:72:14:d8:a3:
                    67:61:10:53:f2:70:3d:ac:a1:b9:6a:1d:d9:5a:0e:
                    de:98:f7:15:61:93:ec:63:27:e3:b0:99:48:48:67:
                    76:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F0:48:99:2B:BD:4A:E1:B1:FC:C9:2B:E4:AA:8D:7F:47:78:B1:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/29236e4a-8133-37fa-a4bc-d5c0a7721d8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl

            X509v3 Authority Key Identifier:
                keyid:96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:5b:3f:9c:65:50:a5:d3:7c:14:17:20:bf:1e:71:7e:cc:e5:
         5c:1a:1a:98:f1:d8:da:45:73:b8:a7:e7:60:d5:0e:52:ff:b9:
         0f:92:58:e1:bb:a2:08:29:bb:63:24:3b:e7:e1:14:f3:6a:58:
         17:e2:d5:4c:f1:ff:88:df:93:20:b4:67:7e:5d:c8:62:9b:93:
         05:16:9b:fb:10:a6:e0:28:9e:89:04:52:5c:99:d6:c4:a4:58:
         ec:ff:9b:f4:96:97:5b:b6:ec:28:29:ff:70:64:96:fb:d0:ee:
         ba:7d:2b:bc:4e:75:b6:f2:9b:48:98:1c:f8:cd:a2:3e:5a:ec:
         54:2c:94:e3:e3:c0:f5:6d:e0:ec:2f:45:e5:64:8c:21:1f:8b:
         ad:0a:ff:de:a7:33:ef:e0:6c:1f:40:eb:21:5f:de:8d:9b:12:
         af:c4:c7:49:22:73:a0:c4:61:cf:13:23:a1:2d:7b:ee:68:d1:
         7d:24:17:84:35:e8:9e:27:49:fc:fd:c2:f7:d4:ea:c5:72:e3:
         df:da:25:ad:20:72:5b:02:c7:e3:d7:c7:2a:4a:a8:a1:57:2b:
         7e:1b:be:7a:59:08:f9:6b:55:3b:88:e7:9b:f9:40:34:3e:1b:
         df:88:ba:03:93:d2:62:58:4c:24:5a:89:0c:b7:31:cf:cf:f9:
         a6:6d:8d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:07:06 2025 by rpki-client