Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/98414261-a9c5-331c-907b-334e7923dd0d.roa
File:                     98414261-a9c5-331c-907b-334e7923dd0d.roa (raw, json)
Hash identifier:          /81QOrRsB4tFcVVon9kf1TJQyEgVtEXFkzQHnh7K8io=
Subject key identifier:   BF:FB:11:9A:EF:96:AE:36:2E:29:63:34:1E:1A:54:70:91:9B:23:A9
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285849F17FAF41CEEA8829A3C00680
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/98414261-a9c5-331c-907b-334e7923dd0d.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     3356
IP address blocks:        68.67.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:af:41:ce:ea:88:29:a3:c0:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=80190f60-c335-4db3-9fc8-98d267c21b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ed:cc:8b:4b:f2:d9:65:0c:9a:50:85:23:f5:
                    cf:35:72:b9:d4:c4:35:2e:7c:03:84:a8:af:a7:5e:
                    4f:57:17:6b:85:27:5d:12:45:68:7f:cc:e9:bb:95:
                    b6:eb:8d:6d:02:fc:e3:21:bf:17:d9:19:4f:34:23:
                    42:5f:af:a3:05:85:4c:4a:6d:9a:bd:fe:55:d8:82:
                    75:24:32:9e:99:51:94:dd:14:07:95:2c:a7:49:19:
                    f5:dc:8c:31:55:4c:97:6b:bc:6c:6f:c3:16:cb:a9:
                    f8:a2:2c:f5:11:17:de:10:3c:e6:11:8d:5d:42:ec:
                    8e:ee:02:b2:b7:a4:cf:cb:c1:c7:87:99:f6:38:85:
                    9b:75:35:78:84:ac:58:13:3c:a4:af:fa:1d:81:77:
                    32:df:ec:75:b6:54:17:4c:5a:6c:b9:98:4e:cc:1a:
                    76:cd:ef:2d:08:59:8a:14:58:93:4f:0d:61:c0:c6:
                    7e:54:ba:72:56:52:40:9e:c9:13:22:6a:0e:14:d9:
                    1a:e1:10:5e:9c:ea:f3:ec:8c:58:ae:06:02:2c:37:
                    a6:ea:5a:97:c4:52:83:6b:44:8b:e4:10:7c:8a:4f:
                    b8:b5:18:e6:fe:82:ab:e3:47:03:e8:e7:4f:44:7f:
                    6b:27:1f:d7:4d:07:a8:93:8e:b8:f8:16:62:16:28:
                    ae:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:FB:11:9A:EF:96:AE:36:2E:29:63:34:1E:1A:54:70:91:9B:23:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/98414261-a9c5-331c-907b-334e7923dd0d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:0d:27:d7:ea:ec:57:27:3f:52:b8:01:d5:32:08:57:fa:98:
         f5:d9:ed:ae:f7:42:e5:40:4b:3d:6d:9f:00:af:d9:67:f1:2b:
         15:0f:a6:29:ac:44:87:1d:59:b3:28:2d:f1:cf:d3:e2:92:59:
         9d:38:ad:7d:ab:68:02:22:9c:fc:52:cb:3f:e7:05:a3:74:25:
         2e:fb:0f:74:b0:05:b0:6b:48:34:60:51:cd:2f:d5:59:d6:36:
         5a:3e:31:c8:63:54:f7:bb:5e:a4:36:c5:d6:79:60:dd:7a:f3:
         87:58:8c:36:a8:9f:c6:a5:2e:e6:6b:7d:b1:55:af:7d:ca:39:
         b6:52:8d:0d:e6:88:fd:67:6a:fd:e2:76:07:2a:d7:f6:cb:fe:
         55:c9:1c:24:a4:e1:e4:66:24:92:74:18:8f:f1:c3:5c:be:b1:
         4f:ad:12:49:f0:f5:2f:ac:bc:95:82:f7:5c:fa:1d:23:ce:b6:
         20:0a:cb:c9:be:fb:f8:a8:1d:64:c6:e4:c0:7e:65:73:0c:65:
         c6:09:33:33:59:cc:79:f3:84:9b:22:b4:25:b3:ae:b4:11:fd:
         41:54:6c:de:33:95:77:b8:58:1c:6a:1b:33:43:bd:52:ed:07:
         d2:33:06:d3:da:a8:a2:78:5e:67:d9:24:7e:e4:ee:e7:55:65:
         cc:26:20:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:58:16 2025 by rpki-client