Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3bc24a32-f782-378e-86be-5280b2b9fcf1.roa
File:                     3bc24a32-f782-378e-86be-5280b2b9fcf1.roa (raw, json)
Hash identifier:          W18newWRvXqNulcGZs0nM5BudzqBBh8v+SEqGnmhraU=
Subject key identifier:   D5:59:B6:54:52:84:36:A7:6A:20:32:DF:B2:6B:AA:85:E6:21:1A:E8
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B91778059C179E8333E0BAEC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3bc24a32-f782-378e-86be-5280b2b9fcf1.roa
Signing time:             Sun 19 Oct 2025 01:00:30 +0000
ROA not before:           Sun 19 Oct 2025 01:00:30 +0000
ROA not after:            Sat 17 Jan 2026 02:00:30 +0000
asID:                     834
IP address blocks:        68.182.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:91:77:80:59:c1:79:e8:33:3e:0b:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Oct 19 01:00:30 2025 GMT
            Not After : Jan 17 02:00:30 2026 GMT
        Subject: CN=cf53c0be-21c2-4a49-9bd4-532959717bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:38:58:67:b9:74:a1:10:d9:9f:8b:ca:e2:0c:
                    17:59:a8:80:c7:63:86:98:eb:00:bb:70:cd:bb:d4:
                    e1:1d:3b:76:2b:4e:eb:3e:d6:3f:ec:31:ea:15:cc:
                    89:d5:5e:e1:87:3e:0f:60:8c:1e:cd:f2:bc:b8:a9:
                    fd:86:41:6d:f7:68:b5:14:14:bd:79:35:64:82:7b:
                    2c:5b:54:c8:88:8c:85:5a:e3:28:03:39:7b:01:5b:
                    7c:a7:76:b6:ce:e5:66:84:d0:2a:b7:2f:66:97:07:
                    af:64:6e:0b:00:ab:3c:1d:67:80:93:0d:5f:15:33:
                    db:dd:13:35:9f:47:04:04:bb:c8:c4:dd:cd:c8:fc:
                    0f:17:33:18:cc:46:b5:2b:ef:f2:66:e6:39:0a:e1:
                    6d:6b:31:2d:e2:44:c5:ab:2c:ee:19:41:07:cd:ef:
                    f4:a7:e8:90:a1:67:bc:8e:49:70:c6:dc:0e:4c:b7:
                    03:b5:02:23:dd:77:67:cf:59:6b:fd:f0:96:fb:79:
                    6e:fe:50:28:26:c8:78:10:a6:dc:92:76:fd:c7:6f:
                    78:89:e2:42:6c:53:e5:b7:1f:2e:5a:9f:69:c2:60:
                    68:b0:01:80:2f:a8:57:32:43:7b:85:ca:ff:c4:e6:
                    f7:bb:94:e5:b5:96:7f:f7:b0:c7:d9:ae:d5:1a:3a:
                    87:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:59:B6:54:52:84:36:A7:6A:20:32:DF:B2:6B:AA:85:E6:21:1A:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3bc24a32-f782-378e-86be-5280b2b9fcf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.182.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:ff:67:22:09:b7:de:0a:fc:9a:6b:57:e3:1d:38:b0:38:d1:
         ec:ae:1e:57:b7:6e:85:cc:9b:66:eb:20:20:58:51:89:97:f6:
         83:4d:f0:13:10:1f:d9:53:c0:e0:ef:b0:de:48:43:dc:0b:49:
         20:37:f5:ab:1b:b9:79:4d:2e:9a:9d:75:1c:e6:17:06:fd:74:
         97:2b:71:31:27:b9:7b:68:9f:00:5f:31:81:87:d8:71:16:12:
         ee:8a:45:6b:90:8c:ce:c8:64:4e:24:69:40:0b:69:98:46:ca:
         2c:8d:f9:44:17:f2:1a:96:68:1b:87:bb:d7:fd:25:e9:e7:ba:
         25:7d:a8:0d:17:0f:40:4a:21:6f:26:a1:dd:dd:48:94:51:33:
         ab:84:40:1d:b1:41:5d:37:14:7c:79:8d:56:a0:74:91:92:69:
         3d:a9:63:08:da:3a:68:a6:61:be:4a:eb:c2:4e:03:41:ec:50:
         7a:0c:58:7b:4f:a7:85:32:22:28:4a:a5:9d:d8:0a:04:bc:12:
         e8:eb:56:7b:76:62:5e:89:83:e9:94:4f:9b:d8:be:28:5d:e1:
         76:10:5d:18:ab:16:8d:1e:6c:2a:77:3b:c1:86:50:eb:ad:c2:
         e3:a3:0c:00:f4:77:af:04:3d:2e:5a:4b:af:20:28:be:f3:ff:
         cc:1d:73:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:46:13 2025 by rpki-client