Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c1cad078-8b5d-38b5-8141-35b1324af051.roa
File:                     c1cad078-8b5d-38b5-8141-35b1324af051.roa (raw, json)
Hash identifier:          NJaUmykYq1K9rnkMNDo+dC93+rsOGzCJC9dmhTR72mQ=
Subject key identifier:   F3:EE:B0:B1:74:02:45:57:3A:61:33:ED:CD:9F:A1:7B:D7:1F:89:62
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584A146552F15142A4565AFA4C00
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c1cad078-8b5d-38b5-8141-35b1324af051.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     400040
IP address blocks:        68.67.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:52:f1:51:42:a4:56:5a:fa:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=769b44f4-b5fa-4f9f-ad8a-4a86b90eb1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:dd:a7:82:23:4c:0e:1a:4a:e1:3c:ec:01:f2:
                    f9:da:5a:cb:5b:cc:63:96:42:e0:9c:8b:73:2c:af:
                    18:6b:3f:3a:59:a2:88:6f:72:1c:37:27:45:5d:f2:
                    c1:94:22:7e:a4:5f:df:19:e3:b2:59:6a:88:c2:ed:
                    9b:0f:0f:80:7e:08:ae:49:1b:32:72:19:5f:2c:86:
                    28:54:fa:fa:86:30:05:7f:6a:7f:36:ab:96:b0:f0:
                    d9:ca:64:ea:4b:d8:f4:02:d0:64:f6:51:db:13:21:
                    ad:c5:dc:09:42:46:de:fd:03:50:93:3a:24:79:66:
                    98:43:93:e0:44:87:12:27:5e:5f:e3:2f:63:cd:6f:
                    57:8d:d9:70:c3:5c:eb:ab:67:14:62:7e:0b:60:1b:
                    56:92:77:c8:56:60:f8:1f:f1:83:d1:5f:57:41:18:
                    e1:8b:10:95:ea:e6:80:95:38:38:4a:41:01:62:d7:
                    c8:52:1e:93:64:56:62:06:4c:c1:bb:e7:04:12:b3:
                    d8:ea:db:7b:e0:94:ca:80:8e:49:df:47:1c:49:f2:
                    20:45:3c:e1:32:9d:c3:24:76:26:78:da:f7:09:46:
                    8f:c6:ae:44:7f:0e:0d:6d:be:64:6b:30:e4:32:c5:
                    c7:1d:47:f4:be:98:f0:59:a2:9b:1d:59:27:57:a4:
                    f6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EE:B0:B1:74:02:45:57:3A:61:33:ED:CD:9F:A1:7B:D7:1F:89:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c1cad078-8b5d-38b5-8141-35b1324af051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:9d:4e:bd:ea:f9:20:f4:a4:24:8e:91:83:c7:45:29:8d:ab:
         2f:6f:52:d6:ad:a2:ab:d8:50:70:13:1e:45:db:34:fb:2a:41:
         2f:a1:a7:23:93:78:ef:23:66:63:c4:0b:2b:84:6d:a2:3e:71:
         03:a1:6a:4d:7c:c0:23:14:a6:84:bc:1d:6c:94:47:34:b0:5b:
         1f:dc:16:90:c3:36:cb:be:db:90:e5:67:c0:1e:72:bf:68:c6:
         a5:f9:d9:24:cb:ef:55:95:01:e6:bd:0c:6c:c2:9a:26:de:92:
         62:f9:60:b5:e4:20:0e:fd:1c:7a:44:2c:2e:7b:72:18:60:05:
         02:53:04:30:1f:da:08:af:a7:a6:6b:3c:c4:e0:c8:d6:44:87:
         07:58:e3:fd:20:33:7d:cb:1b:b8:51:16:02:74:c9:23:32:90:
         37:60:3c:53:6f:a5:36:ab:b1:b8:75:b2:81:2a:a8:a9:6a:f0:
         6d:48:91:9e:97:78:f7:9f:a5:d9:e9:d3:dc:88:16:4e:e2:af:
         0f:16:7e:63:dd:0a:86:e3:2c:35:c4:cc:48:1b:b6:a0:cf:f9:
         13:94:fb:4c:61:69:01:b8:a7:e5:f4:7d:3c:80:46:3a:f0:de:
         b1:77:04:81:fb:66:87:77:fb:3d:8b:63:2d:12:ff:28:25:23:
         59:47:13:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:08:34 2025 by rpki-client