Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bc8cb991-2064-4b59-b1f6-82aba3073313/68b75e77-2026-3748-8a3f-58aba2474f94.roa
File:                     68b75e77-2026-3748-8a3f-58aba2474f94.roa (raw, json)
Hash identifier:          stL6H8xc2nKUFVZzE5WqVmZxt8GcGArXJpvM1sL9utE=
Subject key identifier:   9B:CA:E2:EF:17:01:DA:C8:F4:FC:9C:6F:C5:D7:FC:A4:70:F2:CB:7C
Certificate issuer:       /CN=bc8cb991-2064-4b59-b1f6-82aba3073313
Certificate serial:       010D0C9F4328584B89177F3CFF74F646BA722C80
Authority key identifier: BD:73:60:98:92:1C:E6:B9:C5:87:58:CB:F4:F8:3C:AC:9E:8B:9E:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bc8cb991-2064-4b59-b1f6-82aba3073313.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bc8cb991-2064-4b59-b1f6-82aba3073313/68b75e77-2026-3748-8a3f-58aba2474f94.roa
Signing time:             Thu 16 Oct 2025 01:00:30 +0000
ROA not before:           Thu 16 Oct 2025 01:00:30 +0000
ROA not after:            Wed 14 Jan 2026 02:00:30 +0000
asID:                     32608
IP address blocks:        2607:c340::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bc8cb991-2064-4b59-b1f6-82aba3073313/bc8cb991-2064-4b59-b1f6-82aba3073313.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bc8cb991-2064-4b59-b1f6-82aba3073313/bc8cb991-2064-4b59-b1f6-82aba3073313.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bc8cb991-2064-4b59-b1f6-82aba3073313.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:89:17:7f:3c:ff:74:f6:46:ba:72:2c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc8cb991-2064-4b59-b1f6-82aba3073313
        Validity
            Not Before: Oct 16 01:00:30 2025 GMT
            Not After : Jan 14 02:00:30 2026 GMT
        Subject: CN=b04e17e0-5fae-4656-9cfd-4313257a5ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e4:7b:b5:b8:40:55:17:44:6d:9f:ec:cf:4b:
                    30:28:6f:0c:72:33:5d:ca:a3:c5:7a:42:e2:1e:3e:
                    a6:ae:ef:c8:4c:e4:55:09:7b:7c:40:e9:73:7d:b3:
                    9a:21:58:14:a9:04:b0:14:bf:cb:41:37:1b:6f:e9:
                    9b:e4:96:aa:b5:f0:95:74:9c:25:d7:f7:81:72:d3:
                    65:93:b4:bd:da:63:8e:cc:2e:97:3d:95:67:b8:ce:
                    08:e8:ce:81:49:bc:2e:46:df:d0:34:3d:4e:77:f8:
                    6f:21:f0:18:c4:c5:c5:85:e0:63:a7:c5:c3:1b:e9:
                    09:bb:42:fa:e1:79:63:e1:8a:81:df:85:96:c3:df:
                    33:27:b4:20:69:9a:0d:34:7b:9e:16:0e:0e:c3:69:
                    7f:b1:41:75:d3:63:3c:b1:0c:d5:44:f4:6c:db:e9:
                    24:bb:77:7a:89:42:71:74:09:0f:d5:b8:e9:7b:db:
                    23:81:78:cb:c8:fe:24:fc:18:60:26:9f:64:ab:81:
                    19:46:80:7e:67:a5:d5:14:16:0c:a9:7a:62:88:00:
                    1d:86:bd:dc:e6:78:f9:de:53:7e:25:a5:57:4b:00:
                    9a:e1:72:18:cf:cd:0c:ae:da:1c:48:0e:f3:46:db:
                    6a:cb:d6:5e:7f:52:f5:e3:48:a4:64:33:5d:63:ca:
                    37:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CA:E2:EF:17:01:DA:C8:F4:FC:9C:6F:C5:D7:FC:A4:70:F2:CB:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bc8cb991-2064-4b59-b1f6-82aba3073313/68b75e77-2026-3748-8a3f-58aba2474f94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bc8cb991-2064-4b59-b1f6-82aba3073313/bc8cb991-2064-4b59-b1f6-82aba3073313.crl

            X509v3 Authority Key Identifier:
                keyid:BD:73:60:98:92:1C:E6:B9:C5:87:58:CB:F4:F8:3C:AC:9E:8B:9E:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bc8cb991-2064-4b59-b1f6-82aba3073313.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:c340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:17:2a:ee:3f:71:97:eb:9f:aa:d4:04:cf:aa:ef:f6:ab:41:
         52:4b:9b:2f:f4:eb:31:3d:a3:63:b7:30:66:d1:ad:ba:72:3a:
         1b:3a:79:c8:32:3b:a1:b3:98:f3:53:c8:35:30:2c:4b:d0:8e:
         02:6e:45:20:ac:9d:27:53:82:60:23:29:70:9c:24:95:86:ff:
         90:7c:56:97:b4:6d:d3:66:f2:3c:47:f1:e1:ee:28:fd:e5:38:
         8b:a9:ef:f4:be:d7:b8:de:77:31:26:41:ea:a5:35:d6:f5:56:
         6f:c9:30:a3:ec:97:9b:58:68:6e:08:01:ad:ed:81:2a:ac:ed:
         ed:1b:f2:d5:88:65:fc:bc:33:c6:4e:18:50:f2:8d:61:f4:96:
         6a:2f:04:d2:df:d3:e1:31:5b:14:a5:ac:47:3d:09:23:e1:a5:
         1c:03:1d:cb:bd:46:8d:90:61:e7:cc:8a:a4:23:f4:c9:e7:c8:
         e3:63:1a:e6:a8:3f:85:92:ef:a3:cf:c6:14:f1:66:9c:e8:d1:
         0a:74:c8:af:33:af:7f:3e:41:16:e2:77:e5:99:54:e4:be:22:
         0a:6d:0e:e4:67:03:2c:95:de:5a:cf:d4:ed:0a:7c:74:11:26:
         d0:6a:d2:a9:37:73:51:a9:ac:78:e1:6d:2e:af:f3:7b:26:36:
         2d:56:f5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:03 2025 by rpki-client