Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b7824e8-53ba-34cd-ba10-fc46bd862ac8.roa
File:                     9b7824e8-53ba-34cd-ba10-fc46bd862ac8.roa (raw, json)
Hash identifier:          pNsAw8pRZi5qob/eyndMbN0cbU7KSz5Cd32yLaIJRik=
Subject key identifier:   C6:46:D5:24:84:D2:20:CC:E6:6E:76:59:D9:3D:96:DF:17:C1:88:2A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584B3DB7ADFC2D8E6AB74010FC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b7824e8-53ba-34cd-ba10-fc46bd862ac8.roa
Signing time:             Fri 19 Sep 2025 01:00:33 +0000
ROA not before:           Fri 19 Sep 2025 01:00:33 +0000
ROA not after:            Thu 18 Dec 2025 02:00:33 +0000
asID:                     33660
IP address blocks:        68.86.180.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3d:b7:ad:fc:2d:8e:6a:b7:40:10:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Sep 19 01:00:33 2025 GMT
            Not After : Dec 18 02:00:33 2025 GMT
        Subject: CN=385d4b63-0f38-4743-a8b7-ec2124793dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:61:c1:60:99:53:e3:05:ef:02:23:5d:94:
                    71:40:9a:13:26:a4:06:ec:2d:66:62:60:60:3d:4e:
                    25:ab:c9:9a:01:21:29:92:0b:19:33:28:a0:34:c7:
                    19:2a:1b:74:95:78:d0:50:fa:cb:37:28:20:b0:3a:
                    58:49:58:d2:53:55:49:b5:21:bf:22:36:79:6b:81:
                    fc:2c:2e:bd:13:fe:1a:5b:bd:4c:78:96:10:cf:5e:
                    fe:8b:5e:db:88:e4:f9:d4:6a:ff:3b:7c:fc:20:63:
                    b0:8e:30:a8:dd:e2:09:b4:2f:83:cf:90:ae:15:2e:
                    d2:8a:3d:fe:e8:1a:7e:19:de:e7:0e:50:e2:fa:00:
                    4e:53:50:32:51:a8:eb:f0:24:5d:58:fa:44:a5:18:
                    f3:39:2f:dd:7c:03:6b:56:b3:23:55:60:24:8b:ec:
                    35:b2:91:2e:be:ee:89:97:32:70:f3:a1:c5:43:42:
                    b5:86:fb:ae:ca:57:a2:d3:47:4a:c3:91:3a:b0:b0:
                    ad:22:f9:8a:be:6e:1c:18:91:f4:56:58:e6:ec:ed:
                    db:fa:6c:f2:66:3d:08:07:38:8c:c2:57:1a:34:b6:
                    c0:54:e9:96:59:0a:1e:e0:c7:cc:49:94:8e:8e:56:
                    3c:ec:b1:72:63:43:eb:f5:04:ae:3d:f2:60:40:ef:
                    27:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:46:D5:24:84:D2:20:CC:E6:6E:76:59:D9:3D:96:DF:17:C1:88:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b7824e8-53ba-34cd-ba10-fc46bd862ac8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.86.180.0/25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a4:bf:45:ea:7a:0a:7a:51:af:b3:9a:95:e2:f0:70:f4:22:
         cf:f2:7a:f4:7e:70:e0:fd:f2:2a:2e:76:be:67:cb:86:75:90:
         0d:63:38:c6:20:fc:d4:ee:78:05:11:8c:75:d9:4e:0a:2c:49:
         0b:7c:d5:a6:15:ce:68:db:c1:d8:56:1b:5a:6f:da:a0:6a:25:
         25:0e:3c:79:58:9a:73:7f:20:94:27:49:2d:be:e0:e6:e2:cb:
         02:69:00:cd:b9:e9:01:b8:ef:55:64:17:ea:d6:06:ce:71:2c:
         cb:f4:ee:d2:9b:9a:d6:2e:ae:96:b4:06:15:ec:3e:d6:ca:c4:
         1d:b0:29:f1:a7:36:e4:79:d0:fd:fb:49:4e:c5:7d:42:0d:cd:
         2a:a4:dd:57:4b:70:cf:4e:a4:93:51:9f:b7:ef:af:5f:37:ef:
         7d:aa:38:c7:cb:d0:75:69:53:e2:28:1d:e3:43:75:46:ee:75:
         72:33:7d:f4:f8:d0:f2:ef:35:9a:f9:35:84:5b:61:cf:2d:24:
         a7:3d:aa:f9:8c:c5:43:a7:25:f6:02:a2:f3:61:40:53:ae:84:
         ad:1b:c6:c7:d5:1b:f2:8d:54:98:09:8a:17:ff:0a:3a:57:89:
         99:a9:66:53:d4:1c:cf:8a:b5:53:cf:ef:83:bc:b8:07:b0:dc:
         da:b0:60:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:48:43 2025 by rpki-client