Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa
File:                     7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa (raw, json)
Hash identifier:          TPLTRoatkrPL5HWnAw10LIhnArq7+5OvDR2DeH7v0RA=
Subject key identifier:   7B:BF:3A:2E:7F:AC:2E:0D:5D:67:4C:7E:D7:1D:1F:D5:58:9E:37:96
Certificate issuer:       /CN=3f8ce937-b65c-4889-8a3c-145d71949e14
Certificate serial:       010D0C9F4328584B6631E6D42D7D36C8E96A8980
Authority key identifier: 73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa
Signing time:             Fri 03 Oct 2025 13:00:40 +0000
ROA not before:           Fri 03 Oct 2025 13:00:40 +0000
ROA not after:            Thu 01 Jan 2026 14:00:40 +0000
asID:                     149522
IP address blocks:        68.69.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:66:31:e6:d4:2d:7d:36:c8:e9:6a:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ce937-b65c-4889-8a3c-145d71949e14
        Validity
            Not Before: Oct  3 13:00:40 2025 GMT
            Not After : Jan  1 14:00:40 2026 GMT
        Subject: CN=39137958-6c8e-44a7-be13-e9758228e457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5d:2c:93:96:55:69:63:d8:79:e7:2e:fd:8f:
                    e6:de:82:a9:70:0e:13:9d:d3:23:a3:7e:7b:69:d1:
                    e8:6a:23:73:9c:6c:c5:ae:1e:3c:d6:60:24:31:71:
                    92:e1:bd:88:ab:54:16:43:30:a0:f7:fd:70:0c:6d:
                    9f:5d:7b:61:0d:60:c5:81:f5:04:84:5e:03:a8:8b:
                    0b:ab:d0:f3:3f:b7:31:35:23:4e:ad:02:0f:6b:0c:
                    15:ef:a3:04:6f:45:22:00:58:bf:24:5f:6e:d5:3b:
                    12:28:e7:6b:ac:f7:11:81:18:ad:87:fa:e8:de:82:
                    49:6d:79:c0:d2:ad:64:b1:f9:5b:1b:c1:2a:7e:03:
                    e0:cd:f1:86:bc:b6:a2:b3:af:0d:7f:f7:7a:8a:c7:
                    72:0a:b7:8e:f2:c5:4c:97:5f:b9:3d:9b:bc:de:06:
                    cb:c2:b2:9e:bf:73:99:2b:d2:b1:32:82:6e:96:39:
                    b0:85:c5:09:71:15:4e:89:04:d3:2f:9f:88:0b:3a:
                    85:2a:03:7c:fb:f6:84:6f:55:9a:6c:7b:fa:2f:44:
                    7c:d2:cf:17:c8:ee:0c:34:7d:90:f5:4e:9f:0c:71:
                    4d:dd:58:8e:5c:50:19:1b:2a:9f:4c:85:80:95:ea:
                    f1:b9:9f:ef:1e:1c:d2:8f:3e:5e:f1:f2:e0:3a:3f:
                    dc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:BF:3A:2E:7F:AC:2E:0D:5D:67:4C:7E:D7:1D:1F:D5:58:9E:37:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl

            X509v3 Authority Key Identifier:
                keyid:73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:24:d2:c0:8b:d9:71:79:b8:d3:13:08:6f:92:f1:3a:66:fb:
         a7:40:e8:b9:02:3a:73:ce:26:5c:0d:1e:ee:1f:de:bf:e0:39:
         5b:20:74:ed:3e:74:13:76:e6:d9:c0:7b:60:2c:d8:40:09:68:
         33:87:b7:0d:a5:a9:96:d4:31:9b:a5:12:5b:fa:87:ff:e8:5f:
         f7:2a:65:4d:a1:c1:8d:13:d5:3b:45:07:e8:fe:d0:69:5b:80:
         f1:ef:db:b4:a2:6c:31:54:2d:b3:b0:d3:6e:13:75:89:af:93:
         fb:df:f0:77:4d:83:3e:10:2f:23:5e:84:c7:da:51:c7:46:15:
         d5:0c:47:08:23:97:0b:a7:f3:5c:41:4f:34:b0:18:72:ec:0b:
         bb:16:50:a6:39:4d:95:8b:02:dd:bc:46:93:ac:5a:b8:13:2d:
         97:8e:24:c2:76:a6:af:46:e6:bd:10:ae:c1:08:09:2b:26:4e:
         1d:a7:21:20:a2:ba:a9:88:d6:f7:54:39:9c:2d:a8:82:fb:7e:
         cd:67:b6:0e:50:ad:00:e9:ab:10:e3:ab:4d:e1:03:17:24:01:
         c2:1c:69:ba:e9:12:81:e3:94:ad:ee:d7:1b:52:fc:0b:cb:d4:
         2b:33:c1:dc:72:46:33:6b:68:cc:b1:71:ad:4f:2f:7b:0f:79:
         f2:c4:ca:54
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMebULX02yOlqiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4Y2U5MzctYjY1Yy00ODg5LThhM2MtMTQ1ZDcxOTQ5
ZTE0MB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk
MzkxMzc5NTgtNmM4ZS00NGE3LWJlMTMtZTk3NTgyMjhlNDU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj10sk5ZVaWPYeecu/Y/m3oKpcA4TndMjo357
adHoaiNznGzFrh481mAkMXGS4b2Iq1QWQzCg9/1wDG2fXXthDWDFgfUEhF4DqIsL
q9DzP7cxNSNOrQIPawwV76MEb0UiAFi/JF9u1TsSKOdrrPcRgRith/ro3oJJbXnA
0q1ksflbG8EqfgPgzfGGvLais68Nf/d6isdyCreO8sVMl1+5PZu83gbLwrKev3OZ
K9KxMoJuljmwhcUJcRVOiQTTL5+ICzqFKgN8+/aEb1WabHv6L0R80s8XyO4MNH2Q
9U6fDHFN3ViOXFAZGyqfTIWAlerxuZ/vHhzSjz5e8fLgOj/cuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHu/Oi5/rC4NXWdMftcdH9VYnjeWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zZjhj
ZTkzNy1iNjVjLTQ4ODktOGEzYy0xNDVkNzE5NDllMTQvN2I2YzAzZTYtNGZhYy0z
NDhhLThkM2UtNTRjN2RlZjFjMGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2Y4Y2U5MzctYjY1Yy00ODg5LThh
M2MtMTQ1ZDcxOTQ5ZTE0LzNmOGNlOTM3LWI2NWMtNDg4OS04YTNjLTE0NWQ3MTk0
OWUxNC5jcmwwHwYDVR0jBBgwFoAUc3qUl97jg8GLnVAV0wQoUem2uAswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zZjhjZTkzNy1iNjVjLTQ4ODktOGEzYy0xNDVk
NzE5NDllMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCREV4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACsk0sCL2XF5uNMTCG+S8Tpm+6dA6LkCOnPOJlwNHu4f3r/gOVsgdO0+
dBN25tnAe2As2EAJaDOHtw2lqZbUMZulElv6h//oX/cqZU2hwY0T1TtFB+j+0Glb
gPHv27SibDFULbOw024TdYmvk/vf8HdNgz4QLyNehMfaUcdGFdUMRwgjlwun81xB
TzSwGHLsC7sWUKY5TZWLAt28RpOsWrgTLZeOJMJ2pq9G5r0QrsEICSsmTh2nISCi
uqmI1vdUOZwtqIL7fs1ntg5QrQDpqxDjq03hAxckAcIcabrpEoHjlK3u1xtS/AvL
1CszwdxyRjNraMyxca1PL3sPefLEylQ=
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:11:35 2025 by rpki-client