Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/8b9703ea-15af-3104-8c2a-8494561f93c3.roa
File:                     8b9703ea-15af-3104-8c2a-8494561f93c3.roa (raw, json)
Hash identifier:          Eeh9in1M2oz1NBRHkHD+XefW1+D5T3Pz/8ItksmL+2k=
Subject key identifier:   C2:08:63:C2:A0:60:F8:7D:DF:E8:B6:A6:47:DF:14:96:D0:EE:59:65
Certificate issuer:       /CN=e085fa70-312c-4786-b587-bdb5fc87c36e
Certificate serial:       010D0C9F4328584B95A79388B44EE360E38494A0
Authority key identifier: FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/8b9703ea-15af-3104-8c2a-8494561f93c3.roa
Signing time:             Mon 20 Oct 2025 13:00:38 +0000
ROA not before:           Mon 20 Oct 2025 13:00:38 +0000
ROA not after:            Sun 18 Jan 2026 14:00:38 +0000
asID:                     32098
IP address blocks:        68.64.224.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:95:a7:93:88:b4:4e:e3:60:e3:84:94:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e085fa70-312c-4786-b587-bdb5fc87c36e
        Validity
            Not Before: Oct 20 13:00:38 2025 GMT
            Not After : Jan 18 14:00:38 2026 GMT
        Subject: CN=e7a6eea8-f608-4fa4-8116-22a5442ea73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:73:23:0c:23:e6:a1:e3:28:1c:18:85:82:22:
                    e0:09:02:8c:9a:d0:17:b2:b1:5b:7d:1f:cc:c3:5b:
                    dd:2a:89:da:a5:69:02:0f:a2:c7:ca:e2:15:63:1f:
                    f9:21:da:de:ec:bf:a9:e5:25:4a:9e:ae:d9:ca:3c:
                    3e:5e:1e:b0:46:d9:43:8a:d0:4f:f4:05:1d:40:66:
                    8f:c2:07:c5:24:f5:52:98:ad:6a:18:0a:17:a9:d9:
                    86:7a:68:48:88:1d:2b:96:d4:63:6b:5d:7b:13:66:
                    f8:7b:a0:2c:80:fc:ca:f9:83:26:ca:92:1b:da:e6:
                    54:75:2d:75:f0:c7:4e:3a:fb:7a:1f:06:40:aa:27:
                    b6:74:47:7c:87:27:d0:1e:a0:a1:84:52:f0:03:d5:
                    be:49:5c:8a:fe:50:c9:10:31:1c:a3:47:04:44:ab:
                    27:c7:4f:9d:ff:58:0f:31:ed:a1:f0:93:9d:d9:4c:
                    33:af:44:b0:99:a4:49:13:39:6b:80:1c:9c:c5:47:
                    16:a3:41:97:c6:a6:2c:5c:f9:84:6e:d9:f3:eb:a1:
                    dc:b0:fb:eb:91:22:53:1f:42:e5:21:18:be:d6:dc:
                    4c:27:e0:58:b7:27:3c:5b:82:8e:62:53:05:bf:c4:
                    5b:75:ac:1b:cd:b3:da:ca:ec:90:28:88:26:5d:51:
                    63:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:08:63:C2:A0:60:F8:7D:DF:E8:B6:A6:47:DF:14:96:D0:EE:59:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/8b9703ea-15af-3104-8c2a-8494561f93c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e/e085fa70-312c-4786-b587-bdb5fc87c36e.crl

            X509v3 Authority Key Identifier:
                keyid:FB:01:59:26:25:6A:E3:27:F8:7E:FC:D1:9C:57:E2:7B:34:1B:58:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e085fa70-312c-4786-b587-bdb5fc87c36e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.64.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:e0:d0:3a:2f:80:1f:40:cd:0e:0e:58:bc:74:d8:2a:18:8c:
         a5:b5:36:9a:81:ad:7a:66:5e:ab:b7:b1:3b:70:16:04:07:04:
         d5:8f:39:78:c6:56:35:56:f3:a7:a5:9b:f2:b0:1d:f1:ce:d4:
         75:8c:f8:43:31:cb:76:23:f3:7e:99:70:02:f9:c8:8e:2a:e8:
         e0:a5:e3:44:2c:6a:4b:ea:e5:91:7b:2c:35:0b:b3:32:2b:12:
         92:1f:21:89:50:d7:9c:0d:2d:0e:f6:c2:73:c7:b6:28:1e:ae:
         38:8a:60:23:44:95:1d:c6:53:aa:8c:1f:76:a4:a4:01:0a:03:
         21:a9:81:6d:09:f3:4b:8a:a1:e6:6d:59:3b:4c:7e:aa:21:96:
         a8:32:e7:56:d9:79:7e:8c:31:fb:d1:19:81:43:81:74:d3:45:
         14:b3:27:01:53:84:70:68:82:58:c9:ee:00:53:bc:57:21:87:
         74:f2:e0:cd:ae:57:a4:ff:35:c8:91:54:d6:1d:ee:00:94:54:
         25:ab:fa:a8:d8:34:36:70:12:77:78:ef:c4:f8:19:b5:59:15:
         d1:2c:d7:3b:1d:a2:a5:7b:86:e3:06:15:96:da:bb:23:a3:2f:
         95:74:fb:37:fd:d9:98:50:50:df:c0:49:ec:b5:8b:79:3e:a8:
         de:e9:d0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:03:46 2025 by rpki-client