Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/b0403191-5287-3373-93c3-761d2f4e51bf.roa
File:                     b0403191-5287-3373-93c3-761d2f4e51bf.roa (raw, json)
Hash identifier:          TK4btb9P232yZ1sr9ll7WjS974YT3+FKQKkN+ROOo1o=
Subject key identifier:   A5:7F:CD:BA:59:DD:7C:27:9A:9C:96:67:54:EA:F5:E7:BA:47:E3:27
Certificate issuer:       /CN=095a6ac2-781a-4599-be6c-28b6bc2857c7
Certificate serial:       010D0C9F4328584B398707166AD2B5B60D6B8580
Authority key identifier: 73:F6:C4:3B:A4:97:46:BA:00:26:CD:98:06:C7:D0:20:D1:65:F1:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/b0403191-5287-3373-93c3-761d2f4e51bf.roa
Signing time:             Wed 17 Sep 2025 13:00:41 +0000
ROA not before:           Wed 17 Sep 2025 13:00:41 +0000
ROA not after:            Tue 16 Dec 2025 14:00:41 +0000
asID:                     7018
IP address blocks:        68.69.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:39:87:07:16:6a:d2:b5:b6:0d:6b:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095a6ac2-781a-4599-be6c-28b6bc2857c7
        Validity
            Not Before: Sep 17 13:00:41 2025 GMT
            Not After : Dec 16 14:00:41 2025 GMT
        Subject: CN=ae4dbeb2-5256-4176-afd6-e3a5a2330fe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cb:ff:8e:76:e9:ca:74:60:77:32:aa:10:42:
                    8a:f3:90:52:42:7b:96:95:86:bf:bd:fa:da:95:c2:
                    0c:4f:c5:e4:e9:e0:25:22:fb:8b:e3:3d:b2:e2:e7:
                    cc:bc:33:b2:c5:ed:7a:55:ff:1c:f9:51:81:19:ef:
                    33:26:7f:d8:32:21:e0:67:0d:2e:a9:c8:76:49:98:
                    b8:32:ed:5c:3c:b0:59:8e:25:16:c9:4f:c3:9b:8a:
                    f6:1b:b6:d9:2f:5a:84:9e:6e:c6:c0:8f:09:7b:7c:
                    cc:d0:5a:d4:ef:d0:33:81:0b:c0:d6:16:e8:85:ad:
                    40:37:2e:f5:8b:76:d6:99:3c:42:45:f9:a5:f4:a7:
                    3d:e2:a7:ff:0d:aa:f7:40:6e:02:17:fa:13:45:13:
                    d5:f7:40:1e:1a:ae:ff:0a:75:7b:d0:67:d1:b0:8e:
                    11:66:72:5b:56:ec:f7:ed:16:f5:3f:bc:24:d0:3d:
                    b7:24:63:d5:ee:b5:08:c7:4a:67:cd:5a:65:2e:14:
                    5b:04:b0:b7:34:fa:42:f9:28:16:09:48:7b:a7:36:
                    30:7d:02:e8:97:69:22:9e:f1:e5:8f:03:b4:9f:d1:
                    82:9d:80:5f:6f:fc:15:68:46:28:de:02:9e:24:0b:
                    4f:e1:31:39:5c:e1:e1:85:3b:97:bd:4b:b8:e1:8e:
                    35:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7F:CD:BA:59:DD:7C:27:9A:9C:96:67:54:EA:F5:E7:BA:47:E3:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/b0403191-5287-3373-93c3-761d2f4e51bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7/095a6ac2-781a-4599-be6c-28b6bc2857c7.crl

            X509v3 Authority Key Identifier:
                keyid:73:F6:C4:3B:A4:97:46:BA:00:26:CD:98:06:C7:D0:20:D1:65:F1:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/095a6ac2-781a-4599-be6c-28b6bc2857c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:e7:89:86:63:cf:ea:8b:61:8f:1f:9e:b7:12:c4:52:39:81:
         f6:04:24:66:b3:13:4f:55:a0:82:f1:63:9d:0e:c2:c4:91:5b:
         91:52:48:77:80:f8:89:3a:ff:87:21:29:90:34:b8:73:99:b1:
         a5:c4:d1:9c:9a:54:a8:f9:c4:15:a9:a0:fc:3f:ad:18:61:68:
         b4:ef:e9:bd:44:fe:ac:3c:42:98:18:de:8e:9a:45:a4:c6:65:
         ca:6c:0f:2e:bc:fc:33:cd:a1:d4:73:21:36:99:22:c8:78:fc:
         a3:1b:4d:ae:42:c7:70:fb:67:72:f9:95:80:1e:c8:7b:8a:87:
         3a:63:b8:0b:ed:0f:cc:ff:d1:f3:c5:86:80:ca:16:2c:4a:77:
         34:8a:c3:75:8f:2a:f2:c1:e0:07:a5:c7:79:64:86:58:f7:8f:
         66:f8:42:f9:ac:8b:e8:05:2e:64:18:fc:15:6e:22:eb:0a:b2:
         20:73:51:6d:8a:b5:9e:17:bf:03:bc:fc:90:10:ed:17:89:0b:
         fc:3c:8f:16:ea:9d:5a:bf:c9:20:cd:c0:bb:bb:57:3b:2c:bd:
         c1:70:e5:78:08:29:c1:91:1a:b9:b6:a6:d6:d8:c1:e6:8d:c5:
         a0:bf:8b:1f:2c:e5:95:3a:c7:e7:89:38:a6:c5:49:20:7c:1b:
         0b:70:9c:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 22:21:20 2025 by rpki-client