Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/379a4041-9b9d-3d0e-bb79-4431614aa2db.roa
File:                     379a4041-9b9d-3d0e-bb79-4431614aa2db.roa (raw, json)
Hash identifier:          GdLficp+D2OPkfwBjFKB2P1MP0chYQ1RMEfKR10k7LY=
Subject key identifier:   53:BA:AA:46:B4:80:1D:DD:25:39:38:70:FA:F3:03:12:9E:E8:10:15
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584A71EB4CEBF5009687FAF0D780
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/379a4041-9b9d-3d0e-bb79-4431614aa2db.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     212238
IP address blocks:        68.67.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:4c:eb:f5:00:96:87:fa:f0:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=17da326b-4a83-4652-ad94-00de316e823f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e7:6e:da:f8:63:81:2c:03:a0:7d:14:43:e6:
                    ed:92:9f:2e:bf:16:aa:26:79:2b:8e:bb:e9:e7:c4:
                    2a:10:ed:f3:8d:d3:3f:df:1e:61:7c:27:f5:44:26:
                    bb:96:9b:98:4c:a0:62:62:99:27:2f:4e:30:ee:a5:
                    8b:82:e8:2e:21:11:1c:40:e5:4b:e5:9f:3c:70:48:
                    fc:d6:01:d0:82:19:36:d2:2c:7e:0a:94:8a:e0:91:
                    7f:b4:bc:d0:4b:3a:09:f4:7e:67:8f:9d:6a:35:dc:
                    41:e9:08:c0:66:b8:72:90:66:83:06:07:f7:6f:03:
                    85:20:9c:cd:c2:4f:8f:27:b6:66:28:8c:7e:df:f5:
                    f9:93:86:21:f5:2f:06:12:d1:21:34:59:50:e0:3f:
                    3e:8f:c2:82:f8:42:ac:94:79:34:54:ec:62:08:03:
                    d0:54:53:c4:e6:12:78:0f:8e:2d:b0:b2:58:60:28:
                    f4:77:dd:61:c6:4e:a8:80:a7:bb:0b:0e:34:33:6b:
                    b7:9b:0e:4f:48:e3:1b:4a:75:5d:ff:18:59:f6:e6:
                    11:8a:25:7e:ce:30:3c:94:d2:fc:5d:ee:d9:e6:93:
                    a6:06:61:cb:c4:e1:50:1d:30:b6:41:fe:13:ee:f0:
                    b6:67:32:a9:dc:0f:aa:2d:95:18:a1:b0:1c:b2:96:
                    e0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BA:AA:46:B4:80:1D:DD:25:39:38:70:FA:F3:03:12:9E:E8:10:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/379a4041-9b9d-3d0e-bb79-4431614aa2db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:ac:4e:4d:0f:13:c0:9c:c1:1a:db:e6:26:8c:2f:05:cb:1b:
         11:af:ca:58:01:f5:89:28:48:3c:2d:01:2a:b6:3b:08:5f:cf:
         79:d7:08:0a:8d:c0:ba:ca:33:d7:e5:d6:16:1f:b3:ed:ac:e1:
         2d:79:e1:53:4c:ab:17:bc:d8:b4:87:d6:53:c9:d5:3b:70:58:
         60:57:2d:45:95:c6:8b:4a:e4:59:6c:94:29:db:cb:c6:b2:58:
         82:cf:a1:b8:c8:2e:23:db:c3:37:5f:ba:be:aa:c8:f5:ec:d9:
         f7:d0:a3:05:7a:b7:66:b7:2e:82:91:5d:9d:89:df:a9:1e:50:
         ec:4d:f4:1c:12:ab:bd:87:40:f1:1f:1f:87:a5:8c:d2:84:7f:
         d7:44:cd:06:ac:c3:9c:c4:e2:09:5d:2f:87:a6:86:59:4f:11:
         88:e6:ef:40:5e:cb:53:5f:31:85:00:c4:df:25:db:ff:50:3f:
         46:99:b1:82:44:26:23:fa:d7:ad:3c:06:ab:3b:9d:85:c0:25:
         d2:b6:d7:20:45:f6:d5:e1:d4:cb:c4:76:ed:d1:4a:d5:0d:f9:
         70:df:a9:8f:8d:bd:83:75:8e:0d:31:f9:4f:de:4c:18:c7:e5:
         08:4c:aa:f9:11:8d:67:9e:c1:c4:58:63:13:83:15:f4:ad:b6:
         07:72:00:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:13:53 2025 by rpki-client