Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/054175b1-9773-35a5-8219-9e7c82980f4c.roa
File:                     054175b1-9773-35a5-8219-9e7c82980f4c.roa (raw, json)
Hash identifier:          vNbCHaYstpmBhGempnieRjAh3FJa68Cvi6Q+yjojyaM=
Subject key identifier:   72:33:05:4C:7D:DB:61:B2:41:61:B4:34:9A:AB:AC:7F:40:EC:D9:8C
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584ACB40F83E20362979209BF588
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/054175b1-9773-35a5-8219-9e7c82980f4c.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     701
IP address blocks:        68.134.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:40:f8:3e:20:36:29:79:20:9b:f5:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=b84668e0-54fb-42ab-a9b4-7e8c42b31257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:75:a9:ed:94:1a:3a:b4:a0:fe:20:21:d5:e2:
                    da:6e:82:a9:7f:fb:db:e2:22:64:19:49:58:70:c6:
                    78:ee:91:97:2b:52:4c:65:95:1b:51:8e:9a:84:ca:
                    1c:f0:e8:40:f2:e9:9d:0d:24:91:f2:36:a3:4d:71:
                    fc:25:4d:b3:b9:db:75:c5:3a:6e:27:34:c8:a9:34:
                    a4:b8:1a:e7:78:6d:7d:fb:0a:19:ed:55:2e:79:7d:
                    5b:1e:d9:59:09:fe:81:28:b3:fa:ed:47:b1:e8:54:
                    29:7b:4d:58:8e:3d:54:af:78:1f:b3:ab:cf:e7:7b:
                    86:70:ef:23:9f:a4:2c:99:37:66:80:46:6f:66:d0:
                    ee:9f:c5:fa:4b:f0:21:a6:16:09:4e:b3:55:e3:d9:
                    19:20:05:9d:9e:ca:a1:4f:80:19:b8:59:9e:18:07:
                    c0:f1:ef:0f:5a:3f:50:44:9a:47:2a:fc:50:aa:66:
                    90:9c:04:bf:30:60:a9:0e:95:34:d0:3c:7b:55:95:
                    b5:df:e4:58:f5:08:ee:40:fb:d2:f9:d4:46:74:07:
                    e0:44:f2:c8:40:62:af:b8:91:be:74:c1:5f:4f:13:
                    0c:38:8b:57:ba:da:6b:e9:5d:a9:e2:33:70:41:73:
                    dc:77:47:aa:d5:9e:f5:ac:5b:bb:07:a0:44:b1:40:
                    a5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:33:05:4C:7D:DB:61:B2:41:61:B4:34:9A:AB:AC:7F:40:EC:D9:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/054175b1-9773-35a5-8219-9e7c82980f4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:68:cc:81:71:e7:7d:37:3a:ae:12:2f:d9:20:9e:d1:48:49:
         ba:a9:24:4b:4a:e3:12:69:3d:c0:45:50:41:b6:75:9c:49:65:
         db:ef:7f:66:29:ad:1a:c0:dd:54:fc:0a:3b:01:8e:46:15:33:
         83:bb:49:2f:ae:5f:dc:ed:c6:8b:62:45:e3:e7:d7:5d:36:81:
         27:5a:aa:31:43:24:7b:d2:c3:2e:ee:9c:0b:02:99:ee:6c:9e:
         bc:c7:06:3b:c0:b7:0b:e2:95:59:4d:f2:0d:3c:87:47:57:ef:
         24:f7:d9:cd:2e:58:5e:c8:ab:de:c7:76:cf:34:84:73:ce:82:
         94:38:55:38:50:c3:c8:53:09:8f:b5:a3:b9:a4:27:4c:0a:72:
         e7:9d:0b:98:5a:79:49:7a:01:0f:e7:52:27:a9:13:4f:18:81:
         4f:97:3e:6a:dc:05:e6:03:7e:2a:37:d2:57:35:f1:a9:ed:98:
         52:1d:e8:9b:00:ef:c0:1f:fa:d1:a7:f4:e6:c4:04:1d:59:1b:
         df:85:5c:fc:86:16:14:87:fc:a9:ba:da:24:c9:57:b9:76:eb:
         7d:2b:6e:a9:7b:6e:37:96:3c:d8:88:c8:64:8f:15:59:6e:60:
         81:1b:58:ba:0c:8f:5f:fe:64:12:5e:2c:14:d4:39:57:38:84:
         b7:75:00:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:19:52 2025 by rpki-client