Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/78a41fcd-979d-309f-85fa-a1814d982c31.roa
File:                     78a41fcd-979d-309f-85fa-a1814d982c31.roa (raw, json)
Hash identifier:          2Usnipq/dTyC4yVQEMr4oQb1F/6GUYo6oP7cM7TAxJo=
Subject key identifier:   70:9E:47:95:EE:41:89:B3:BB:C7:76:CB:FC:F0:BE:CF:EF:CC:67:F2
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584A2C201B2CD6E4DBEDC8649300
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/78a41fcd-979d-309f-85fa-a1814d982c31.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     26744
IP address blocks:        68.170.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:1b:2c:d6:e4:db:ed:c8:64:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=6b827ec5-b96f-4642-8d9f-f5307edc94e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:10:88:73:d3:5a:1d:4e:26:d9:f2:da:94:b5:
                    90:9b:34:a2:85:1a:9c:24:80:07:9f:aa:1d:f4:d0:
                    27:c1:4e:44:66:85:e4:c8:c6:11:d0:e8:28:86:ce:
                    8c:48:e2:6a:44:89:d6:1c:d9:b5:92:25:3a:8f:e5:
                    f7:3c:33:d8:36:ba:d8:fe:20:bc:3d:4a:3d:02:fa:
                    2b:60:14:7e:a8:15:ab:3c:6c:22:83:4d:ab:de:9e:
                    77:0b:7c:80:9f:01:de:e9:ab:a9:ef:c2:0a:e1:98:
                    a8:8d:40:6e:45:28:60:58:6a:9d:08:35:17:bc:3c:
                    1d:a0:bb:ec:80:d4:ea:34:0a:e9:a9:86:09:39:4a:
                    4f:f9:78:8c:b7:02:81:e7:20:b9:ea:5b:23:3d:57:
                    ef:ae:21:b1:3e:d9:58:62:33:c3:8d:f6:7a:4e:17:
                    f9:69:26:df:2c:f4:f1:e7:89:a4:cd:2e:cf:29:0f:
                    e3:b9:78:94:b5:ba:3e:59:23:aa:c8:c5:0b:29:a9:
                    af:b7:f9:34:9c:6d:7f:97:a6:e7:47:e5:70:9f:72:
                    b5:86:f7:fe:81:40:94:19:77:99:29:09:5b:db:30:
                    81:3f:0c:89:39:53:7f:47:9a:66:6d:05:8f:17:89:
                    c8:76:51:76:ef:79:89:c3:7c:4d:96:15:85:94:68:
                    b4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9E:47:95:EE:41:89:B3:BB:C7:76:CB:FC:F0:BE:CF:EF:CC:67:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/78a41fcd-979d-309f-85fa-a1814d982c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:84:6b:47:77:30:cc:a9:f7:c3:03:17:82:d5:e9:76:4c:e3:
         10:92:49:f9:f9:30:bf:9a:aa:c0:94:12:8f:f4:73:96:93:c6:
         42:b1:1c:d9:33:1d:2f:16:3d:31:c1:bf:e7:56:c5:4d:73:a5:
         09:08:af:65:9b:13:23:7c:70:6c:15:f2:d5:61:ec:70:0b:c4:
         b5:93:f3:11:fc:f6:fa:37:2c:4b:ed:3d:54:cd:da:37:46:63:
         59:08:46:ab:5d:32:f5:15:ad:f1:b2:05:ef:42:59:6e:de:ef:
         5b:3f:fd:c3:18:d2:b7:10:54:64:cc:b2:f1:b6:ec:d9:00:39:
         a1:14:e2:fd:ea:a9:37:f2:fc:5a:61:d8:4c:5d:37:8b:bc:da:
         5e:ab:ab:76:ca:82:70:f3:82:bd:24:e9:82:48:93:e1:8d:a0:
         34:60:4a:aa:c2:80:ba:45:71:27:26:5d:a5:e9:c5:ba:2c:61:
         e6:ae:a1:41:4f:40:0c:df:d6:8d:24:f7:48:3e:87:36:46:cc:
         60:ce:16:fd:7c:91:13:7d:6e:6a:5b:89:1b:69:4a:a1:a1:0a:
         2d:af:66:cc:03:a3:e5:f9:fe:c2:20:ac:93:62:c2:bf:77:9e:
         7c:73:0f:70:92:35:ca:f6:2e:24:28:3e:dd:a0:14:06:85:73:
         94:50:f8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 08:10:33 2025 by rpki-client