Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/0cbbb2e9-d3a0-39c7-ab15-dc0fc623b2ba.roa
File:                     0cbbb2e9-d3a0-39c7-ab15-dc0fc623b2ba.roa (raw, json)
Hash identifier:          VmD32frsTJYBAJ9BgMGR9fI7eBB5qA9N0SZ9tnG9FTE=
Subject key identifier:   7B:31:A5:4B:B2:F3:DC:46:DE:D5:0D:02:2F:EA:92:18:1E:1C:89:2D
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584B2A2C3C9E03D8B5CBEBF6C700
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/0cbbb2e9-d3a0-39c7-ab15-dc0fc623b2ba.roa
Signing time:             Fri 12 Sep 2025 01:00:32 +0000
ROA not before:           Fri 12 Sep 2025 01:00:32 +0000
ROA not after:            Thu 11 Dec 2025 02:00:32 +0000
asID:                     109
IP address blocks:        171.68.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:2a:2c:3c:9e:03:d8:b5:cb:eb:f6:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Sep 12 01:00:32 2025 GMT
            Not After : Dec 11 02:00:32 2025 GMT
        Subject: CN=b496bf49-87ac-4c19-a66f-a067d894f5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0c:fa:6d:de:11:a9:f9:05:85:24:1c:61:73:
                    db:16:e2:f3:cc:a0:db:e7:c0:02:87:9a:0c:70:16:
                    49:ab:e0:35:72:fd:41:1e:1d:2d:f0:e5:4e:e4:dc:
                    d0:6e:6a:18:0e:ca:c0:96:cf:26:91:71:ac:a8:f9:
                    b0:48:d4:61:da:99:fb:ef:97:f3:4f:e7:50:02:92:
                    8e:24:8d:f2:a4:40:34:3b:4e:05:46:72:0b:1c:cf:
                    d5:05:d8:bf:30:02:d7:5f:73:be:6b:6f:ac:37:0a:
                    bf:2f:5c:83:3a:e4:f8:b1:a2:28:0a:6f:d0:24:6e:
                    e5:34:a9:5c:46:26:f9:15:14:2b:18:51:80:34:6c:
                    64:d1:c8:b0:26:26:4b:ce:04:f3:63:43:8b:a6:65:
                    35:e0:d1:8b:97:38:d4:d8:50:6f:92:fd:7d:a6:2c:
                    ca:c2:e4:9a:f8:02:af:06:ec:62:3e:94:fd:b0:3a:
                    c7:fc:9a:bb:70:25:30:ac:8b:2a:7f:69:4a:08:3d:
                    c4:67:6b:2f:b5:4d:61:00:be:d3:d6:45:d0:36:d0:
                    9c:11:b3:31:93:2d:55:a1:a3:08:d9:37:9a:90:68:
                    c9:e5:42:22:bd:c7:4c:4d:c3:40:1f:cf:4c:21:d5:
                    fd:a8:e6:ab:73:7f:bb:f8:bb:11:77:fa:00:c0:9f:
                    fa:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:31:A5:4B:B2:F3:DC:46:DE:D5:0D:02:2F:EA:92:18:1E:1C:89:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/0cbbb2e9-d3a0-39c7-ab15-dc0fc623b2ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.68.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:32:3c:eb:fa:ec:77:39:a2:a5:12:b8:97:a6:72:86:03:ad:
         95:9f:13:71:27:3f:db:c1:b5:96:97:7e:5c:fc:ea:74:d9:ad:
         a4:f2:49:e0:da:cc:d1:d8:97:a4:25:86:9f:f5:f0:af:6b:6b:
         6e:7c:2c:2a:c1:3a:19:56:23:12:4c:8c:6e:53:5e:5d:a4:ac:
         ac:44:08:0b:75:c6:e6:16:1b:5d:ec:9b:3f:4d:84:a7:a6:73:
         c6:51:fa:58:4c:d6:23:0d:02:40:f4:62:9e:82:ff:ae:0c:6b:
         84:c8:6e:b6:f1:ed:cb:f6:55:42:34:b5:9f:a8:2e:43:89:ef:
         01:5a:4a:27:42:41:96:32:36:f8:a6:2d:cd:63:58:93:a3:f3:
         3d:23:8b:f3:69:b7:8b:b9:32:15:c9:57:f0:58:a8:87:6c:5a:
         22:31:e0:55:c3:e0:a5:9a:21:9c:80:03:59:d4:1d:21:f7:d2:
         1a:f5:c6:f6:45:fa:00:f0:bf:cc:8b:c4:5c:b3:c9:d9:fe:49:
         2c:b8:62:7c:2d:a2:39:d4:ca:42:a7:3b:f7:08:65:9e:c3:98:
         e7:50:da:d8:b5:52:20:77:14:71:38:48:52:ca:63:60:fc:e2:
         65:39:a8:91:39:c4:33:a3:0c:c0:15:39:e2:e2:7c:86:76:33:
         de:56:1e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:41:11 2025 by rpki-client