Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/c0d3d381-ce71-32c0-b6c3-3faf5f652583.roa
File:                     c0d3d381-ce71-32c0-b6c3-3faf5f652583.roa (raw, json)
Hash identifier:          YSlMfpN43vGLv/wG+DvwnstXmY6gwaN7QzwIC5jGKnU=
Subject key identifier:   6D:81:BC:BA:CD:1C:91:70:42:EA:65:62:50:DB:6F:B4:4B:3E:25:8C
Certificate issuer:       /CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
Certificate serial:       010D0C9F4328584A4C3B1163B2588CBA95C833C8
Authority key identifier: C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/c0d3d381-ce71-32c0-b6c3-3faf5f652583.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     36103
IP address blocks:        68.70.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:11:63:b2:58:8c:ba:95:c8:33:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a8a6f79-08ff-4512-9f3e-58c42a84ed25
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=d1ca12bf-0185-4d78-b875-f8e4a6eb348c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:17:f9:85:4c:3a:a2:a1:72:84:ad:8b:84:20:
                    c6:8b:93:52:41:7c:e8:54:1e:b5:83:b9:37:b1:f5:
                    db:a8:d1:c7:81:c6:13:42:ff:b9:28:38:3a:8d:bd:
                    63:46:d2:55:11:e4:62:ac:07:69:75:b6:8b:78:36:
                    8d:5a:c0:a5:17:9f:96:ea:cf:ca:fa:88:62:65:b1:
                    f6:68:62:63:61:d3:ed:26:53:a4:45:9d:49:e5:93:
                    e4:9e:77:c4:74:59:38:99:b8:92:34:1c:00:6c:ef:
                    90:e2:50:4b:95:e4:ee:16:88:f7:50:7e:1e:86:a7:
                    b6:58:05:9d:1d:49:83:8f:18:fc:e4:34:d0:2c:50:
                    66:68:b5:89:ab:42:72:5d:32:6c:b7:38:63:8b:88:
                    97:bf:bc:04:66:0d:0c:e2:74:3c:27:76:1a:0f:7c:
                    bb:aa:46:5e:90:e2:a8:be:d2:03:7a:dc:ec:6d:87:
                    db:c5:bc:29:b5:47:76:06:93:3b:e2:81:a4:17:38:
                    c9:78:09:7d:68:e1:d9:9c:32:69:e5:f5:b8:68:b5:
                    89:e6:a5:be:fe:5c:3b:57:26:ca:0a:32:d1:5b:ea:
                    0d:28:a5:93:7a:28:bb:ef:cd:fb:39:9d:19:d2:fd:
                    82:29:4b:df:57:da:27:39:c0:71:8d:c6:7c:16:f3:
                    79:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:81:BC:BA:CD:1C:91:70:42:EA:65:62:50:DB:6F:B4:4B:3E:25:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/c0d3d381-ce71-32c0-b6c3-3faf5f652583.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.crl

            X509v3 Authority Key Identifier:
                keyid:C2:C0:7A:6B:38:EF:AA:81:55:58:0F:37:73:DA:9F:93:48:1E:B3:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6a8a6f79-08ff-4512-9f3e-58c42a84ed25.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.70.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:6f:fc:f0:39:f7:35:6a:64:43:16:8c:2c:40:75:a9:73:38:
         47:10:06:f7:f2:ed:cc:59:d9:88:a4:68:0b:23:5e:31:90:da:
         da:a4:e6:fe:f8:e7:cf:f8:a4:d5:26:8c:40:ff:e3:66:99:7a:
         c9:64:59:c9:e1:6b:a9:a6:0b:d1:61:a5:ca:85:47:dd:12:67:
         e3:58:f0:1d:60:e2:28:4f:bc:e9:6e:91:00:ab:97:7f:0a:0a:
         7b:bb:3f:6d:c5:40:a8:e1:53:8c:4b:e8:ad:04:b4:85:36:ee:
         1d:9a:62:dc:84:1d:a8:65:72:c3:e7:6f:c0:0a:76:10:16:12:
         df:e9:3a:93:14:e1:91:8d:a8:de:ef:0f:e0:7e:2b:a3:dc:67:
         84:02:07:5f:ee:75:72:71:49:09:0a:31:1f:0e:1a:1d:a9:33:
         04:61:c0:ed:c7:c6:68:05:2d:fe:18:d7:54:30:43:79:2a:9d:
         c2:f7:00:c5:56:70:db:df:62:b8:71:14:ba:95:c8:49:70:fa:
         4c:1d:5b:6d:13:56:9f:49:70:13:14:2a:bf:fa:c3:10:db:55:
         3e:cd:a1:dc:2f:82:21:6a:2c:30:31:ce:d2:d5:1d:0c:d9:cb:
         a5:22:17:5e:a2:3f:7b:b9:50:fe:ce:50:c7:a0:72:88:ac:35:
         51:89:62:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:33:36 2025 by rpki-client