Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1793357f-efb2-368f-9a10-178719c96312.roa
File:                     1793357f-efb2-368f-9a10-178719c96312.roa (raw, json)
Hash identifier:          6qHQDuC17PRL/7sAUPe3RRrXNcvswhAvvHojRb2UHYQ=
Subject key identifier:   64:DC:FB:AA:20:0B:E4:08:C9:94:79:86:2B:21:AF:7D:C1:69:0C:FE
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B92DCF8A842324B4974E1CFC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1793357f-efb2-368f-9a10-178719c96312.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     852
IP address blocks:        68.182.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:f8:a8:42:32:4b:49:74:e1:cf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=c20467d0-3c57-4c2d-9e8f-5e4f9d6011b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:85:62:74:17:db:f5:7f:3e:e4:a9:ec:c4:61:
                    22:1d:b3:ca:92:2c:ec:5b:43:dc:e0:a3:79:99:5a:
                    d0:e8:9d:64:ce:ae:64:cc:29:3a:72:6c:ad:0f:36:
                    81:c2:a0:4b:5f:73:d7:2c:2b:67:cb:f5:8b:30:84:
                    a8:bf:77:2c:5b:e0:56:99:df:b1:16:02:5e:4a:8d:
                    4d:d8:dd:15:04:94:84:2c:12:b9:60:0f:18:98:96:
                    ae:76:af:82:f8:e7:6b:e9:a5:df:81:67:e4:6b:ce:
                    1c:f3:d3:0b:a3:5f:0f:60:99:05:dc:41:67:91:06:
                    31:6a:08:fc:2e:e4:51:d5:66:b7:fe:a2:b8:38:16:
                    94:ed:90:68:a7:2b:1e:2b:a6:89:81:d3:31:59:bb:
                    47:67:29:3a:c8:b5:af:b1:50:77:68:72:54:8f:06:
                    e8:7a:33:a9:00:48:b3:fb:ac:05:14:ac:7f:11:78:
                    a5:5a:d1:05:0e:1e:f7:6d:a7:1b:5a:53:a1:d4:c1:
                    dc:45:f0:44:26:da:e1:92:eb:54:d2:9b:e5:f3:55:
                    98:74:6e:00:3c:a8:db:57:02:3e:41:f0:ea:43:69:
                    82:83:00:9e:c1:57:39:3d:86:92:05:71:a2:49:c2:
                    07:10:d1:6d:14:00:dd:7b:f5:fc:fd:57:60:3b:f2:
                    b9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DC:FB:AA:20:0B:E4:08:C9:94:79:86:2B:21:AF:7D:C1:69:0C:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1793357f-efb2-368f-9a10-178719c96312.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.182.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:f4:de:9b:4f:f6:61:5e:63:2c:ac:6f:78:86:f6:62:3f:da:
         c6:49:05:46:d1:66:54:8d:97:29:44:fb:81:03:d0:0e:8f:2c:
         95:1d:d9:e1:c4:67:d7:9b:a3:d5:84:e7:bc:d1:1c:72:87:a9:
         fe:75:08:5d:06:01:d3:1f:67:88:90:c8:10:9e:a5:cf:3a:07:
         fe:12:56:f8:83:c0:d4:7d:82:3f:c7:6a:66:97:7c:26:b2:9e:
         c8:d8:e1:e9:e0:28:2d:73:97:41:01:1c:b5:ab:ac:e0:1d:33:
         04:3d:2b:f0:59:92:35:88:39:a6:fc:a4:c5:3f:5d:db:54:ff:
         56:81:ea:48:a0:a9:cc:c1:bc:33:5a:b9:15:62:f2:1f:75:80:
         44:8d:bb:8a:c4:77:76:d3:e6:44:27:10:71:da:18:66:2c:91:
         62:34:be:bf:94:46:e4:5b:57:9e:62:2c:d0:c3:9b:ab:1d:58:
         32:72:6f:4b:67:ad:8f:c9:64:ff:ef:1f:8c:43:23:c8:c9:f8:
         c0:cd:78:65:0a:1d:ff:9a:13:40:47:a7:6e:1e:66:b0:9e:22:
         89:c1:63:93:0a:3c:87:13:72:ba:19:37:34:36:90:4b:9e:ed:
         c8:ad:07:2e:c6:16:e8:40:28:64:e0:f7:ec:74:ed:40:e4:66:
         cc:5d:29:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:17:13 2025 by rpki-client