Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/b2cd87c2-1759-3795-933f-12cda35b1c67.roa
File:                     b2cd87c2-1759-3795-933f-12cda35b1c67.roa (raw, json)
Hash identifier:          dt2SbOGaFGrr7BVFldU44aKcBWJXzD4yZWuOVyVi6gU=
Subject key identifier:   07:91:1E:DB:47:A7:BC:F8:3F:EE:23:B2:9F:12:E5:73:CE:5F:30:B4
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F4328584AD7D10E196A274BFFDEB22080
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/b2cd87c2-1759-3795-933f-12cda35b1c67.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     22822
IP address blocks:        68.142.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:0e:19:6a:27:4b:ff:de:b2:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=6a450543-bb39-42b3-a239-e6567bacdf29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:61:35:08:78:d0:6a:79:e5:60:a7:3e:6a:12:
                    a1:15:82:ea:47:d9:d3:53:79:cd:34:dd:e6:17:d7:
                    0a:e8:61:b2:54:e2:b3:4b:3a:31:62:93:1a:8a:b9:
                    d3:84:6a:b8:ea:b5:ba:24:a0:dd:4c:b4:79:ed:5b:
                    dc:de:d4:74:b5:fd:e2:4b:e1:fb:3d:36:d3:ff:53:
                    3a:92:17:57:60:35:71:d8:1c:d3:1d:43:47:fe:02:
                    dd:08:e6:65:3d:9c:78:f6:ad:ee:20:3d:22:5c:58:
                    78:04:70:15:70:ca:ff:64:b7:74:9f:92:fa:53:f9:
                    70:cf:ba:37:5e:90:fc:ea:6f:36:e3:8d:0d:8a:65:
                    97:9c:9b:ce:74:f2:3f:e3:9f:f0:19:ba:6e:ee:22:
                    a7:9c:fd:44:b9:c9:0c:94:29:4e:7d:1e:b7:38:5e:
                    ee:57:fb:80:fe:9d:c2:3f:7b:0f:e0:90:81:f6:73:
                    66:96:94:ce:6c:d2:33:5a:a6:5d:4e:1e:c1:38:24:
                    cb:91:0d:7d:11:ed:dc:02:ef:6b:0e:05:fd:0c:a4:
                    9d:cc:f7:f4:dc:ea:b2:8d:0e:49:4e:f1:27:f6:b0:
                    15:d2:88:b2:06:7f:c5:67:97:e7:be:78:9e:a0:07:
                    b8:a3:c4:a0:fd:a4:db:04:b0:39:99:d6:7d:12:59:
                    2d:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:91:1E:DB:47:A7:BC:F8:3F:EE:23:B2:9F:12:E5:73:CE:5F:30:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/b2cd87c2-1759-3795-933f-12cda35b1c67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.142.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:77:97:23:26:e7:df:87:4b:23:ec:5d:19:56:53:19:96:0b:
         12:22:ad:cb:1d:18:e1:df:ea:bb:51:95:7e:1f:6b:dd:65:7c:
         f0:62:2d:13:72:16:b9:35:19:92:0e:6a:98:fe:23:78:f1:9a:
         c1:8d:a4:15:a5:6f:72:05:6e:4e:e6:52:dd:ec:ba:cf:c7:bb:
         7c:7e:a1:5a:2e:6a:ae:27:ed:04:90:ea:42:28:30:7f:98:5f:
         b8:f7:8b:90:4a:d6:c0:1b:54:99:35:d4:02:e9:db:87:9b:fb:
         b8:13:ef:d2:78:44:a8:55:46:a4:c1:2a:f1:74:fa:f1:9c:e4:
         4f:b0:d6:34:03:fe:f3:eb:fd:88:d2:3a:39:52:34:82:ed:5c:
         32:af:71:47:22:5b:69:90:ee:a4:75:36:9e:30:14:e6:74:c3:
         3d:5f:0e:69:46:89:08:19:2e:8a:fc:33:1d:f0:59:f7:37:24:
         79:0d:cc:ba:1e:7d:63:4f:aa:b1:24:46:aa:ff:e4:56:49:12:
         cc:49:08:03:68:76:10:56:74:90:1c:53:aa:e4:80:c9:d7:26:
         0d:4a:cd:e3:4b:a0:9f:2c:12:30:f3:45:2b:db:42:6f:ad:7c:
         21:f6:d7:c6:73:b8:54:e1:cc:f8:d2:6e:9a:9c:f8:c6:31:f0:
         89:24:8e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:24:06 2025 by rpki-client