Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/68a189f6-d878-3750-bf65-8c6843f738fe.roa
File:                     68a189f6-d878-3750-bf65-8c6843f738fe.roa (raw, json)
Hash identifier:          GO/0jDs37w6V7CdHiiHnSlc+zUYzo6OqLkcjNnnLfW8=
Subject key identifier:   65:96:57:60:2E:B4:5B:B0:DA:49:2B:06:C7:36:63:83:7B:6D:20:8A
Certificate issuer:       /CN=dd758471-203f-4eb9-b2e3-2061f2a9397b
Certificate serial:       010D0C9F4328584AAE410ECF94CEF3EC826C4500
Authority key identifier: 4E:54:E4:17:CE:24:A0:CF:49:4A:32:72:1B:9C:86:4B:8B:20:7E:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/68a189f6-d878-3750-bf65-8c6843f738fe.roa
Signing time:             Tue 29 Jul 2025 15:42:30 +0000
ROA not before:           Tue 29 Jul 2025 15:42:30 +0000
ROA not after:            Mon 27 Oct 2025 15:42:30 +0000
asID:                     399937
IP address blocks:        158.222.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/dd758471-203f-4eb9-b2e3-2061f2a9397b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/dd758471-203f-4eb9-b2e3-2061f2a9397b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ae:41:0e:cf:94:ce:f3:ec:82:6c:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd758471-203f-4eb9-b2e3-2061f2a9397b
        Validity
            Not Before: Jul 29 15:42:30 2025 GMT
            Not After : Oct 27 15:42:30 2025 GMT
        Subject: CN=0293fe3f-08a3-41b3-91d5-1c282aac37bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:01:f8:e7:73:51:77:46:9f:b8:25:75:c1:4c:
                    b9:a0:f8:19:7e:60:c5:94:19:44:f5:08:b9:a8:d2:
                    63:c7:f7:8b:d7:d4:d3:10:a7:cf:8d:57:c6:c1:72:
                    73:14:20:0c:ce:32:4a:9c:82:93:8b:0c:68:64:1c:
                    b6:9f:46:21:10:f8:a8:c4:30:72:70:19:52:6e:3f:
                    57:a3:ec:de:55:7f:57:81:77:28:2c:70:34:0a:f8:
                    5d:eb:fc:c1:7e:d5:de:e9:ca:0d:de:9f:d9:6d:ed:
                    f8:39:d9:a2:59:1c:6e:d6:10:59:4f:a7:e2:b0:c3:
                    4a:08:ed:16:3b:65:9e:b0:df:d8:ca:7d:23:0b:79:
                    39:74:9f:a8:bb:63:61:8c:f0:8a:d2:6b:39:eb:f9:
                    06:2a:7b:2b:92:0d:25:5a:68:af:1b:d3:0d:0d:b0:
                    16:7e:72:4a:8b:37:a8:33:b0:d6:47:04:04:77:e8:
                    1c:f2:14:d5:c3:9b:b5:48:66:83:84:7e:04:36:1b:
                    7d:26:a0:2a:2e:25:c4:1c:73:98:61:f4:7d:78:bc:
                    5c:52:8c:74:cb:96:59:ad:9a:67:ad:1e:d0:03:ba:
                    98:69:b3:62:0c:a9:a7:ae:da:33:22:cf:7e:b7:e6:
                    66:e8:cc:9c:aa:6f:12:e8:f1:44:39:08:4d:58:ff:
                    86:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:96:57:60:2E:B4:5B:B0:DA:49:2B:06:C7:36:63:83:7B:6D:20:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/68a189f6-d878-3750-bf65-8c6843f738fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/dd758471-203f-4eb9-b2e3-2061f2a9397b.crl

            X509v3 Authority Key Identifier:
                keyid:4E:54:E4:17:CE:24:A0:CF:49:4A:32:72:1B:9C:86:4B:8B:20:7E:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.222.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:46:59:ef:00:08:81:2f:19:9f:d1:ae:ed:eb:75:87:28:81:
         43:05:81:cf:67:54:b3:58:35:d7:40:51:21:2b:31:b9:c5:f6:
         b6:d8:ca:19:80:2b:c9:1b:cd:2e:21:06:d2:1a:5d:89:ef:63:
         eb:b5:9d:4b:93:a5:c7:2a:13:61:6a:d7:a3:5b:86:ef:69:90:
         10:9b:ad:61:84:55:b1:07:ef:a3:76:04:d1:f7:9c:83:c4:64:
         0e:0b:50:38:e7:c2:9b:aa:b5:fb:83:af:5f:ee:8a:e7:d2:91:
         d0:6f:7b:12:e8:31:db:38:a9:44:5c:26:49:40:b4:14:0a:81:
         8a:19:21:c0:8e:85:ce:94:9f:be:81:c0:2a:19:8f:06:f3:d4:
         ca:4c:f6:3b:7f:18:0e:c4:05:7c:0f:04:46:5e:33:1d:7f:9a:
         04:f2:64:15:f6:22:b1:70:9c:72:1b:f6:83:25:7b:62:19:9b:
         9a:d6:54:f1:61:8c:2f:5b:3e:54:23:59:52:49:a1:a0:89:94:
         67:17:23:da:33:de:de:35:8e:db:75:3f:ab:0c:80:c5:d3:14:
         60:99:ff:4c:46:0c:73:1f:fc:fd:90:60:f6:d8:5e:b5:91:fc:
         41:ef:3f:0f:94:9a:e3:8d:fa:9d:8a:aa:62:ca:37:3c:ff:fc:
         39:5a:92:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 06:09:02 2025 by rpki-client