Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b1d6209-af2d-37a6-b920-f4bdab8ca729.roa
File:                     4b1d6209-af2d-37a6-b920-f4bdab8ca729.roa (raw, json)
Hash identifier:          lDOIuhd5vfXJG3V88LpoadJfufjmDtQah+EjKz3IC40=
Subject key identifier:   FC:BB:3D:6E:C4:D0:61:A4:B3:B9:C1:AF:A0:29:6F:14:C9:F0:6A:19
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584B92DCF8991B73F07A9112FF80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b1d6209-af2d-37a6-b920-f4bdab8ca729.roa
Signing time:             Sun 19 Oct 2025 13:00:39 +0000
ROA not before:           Sun 19 Oct 2025 13:00:39 +0000
ROA not after:            Sat 17 Jan 2026 14:00:39 +0000
asID:                     852
IP address blocks:        68.182.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:92:dc:f8:99:1b:73:f0:7a:91:12:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Oct 19 13:00:39 2025 GMT
            Not After : Jan 17 14:00:39 2026 GMT
        Subject: CN=15578f8f-44a7-4f50-825e-85cd0b0a2b2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:ff:eb:ed:77:97:61:64:a4:89:3b:d4:62:d3:
                    a5:ef:70:90:c9:22:c6:99:68:e4:65:ca:8f:1b:b9:
                    57:e1:be:d8:fb:03:36:17:07:9e:df:69:e3:09:16:
                    9b:a3:82:f6:b1:b8:c9:69:ee:12:8b:65:84:16:b8:
                    1f:6d:52:01:8c:da:44:23:fa:c9:ef:7b:17:6a:43:
                    13:fc:d5:ce:7c:ba:ff:ad:b8:50:49:1c:09:5a:29:
                    90:99:05:ba:91:6a:7a:8a:f3:5a:09:af:fa:6c:21:
                    ce:6b:ad:b0:5c:92:87:3f:df:18:0b:60:a2:3f:51:
                    a7:7c:55:ab:b9:5c:64:9d:aa:9d:4c:df:0c:c6:94:
                    01:19:e3:9d:fe:0c:5e:a6:be:08:69:43:6b:ba:d2:
                    b3:ff:fe:24:4c:ae:e3:12:0e:cc:aa:65:dc:ab:f8:
                    38:38:28:df:47:33:82:4c:75:4c:14:05:f4:89:21:
                    b8:6b:80:b4:e3:16:e8:72:e3:12:cd:5d:6a:4b:3e:
                    fd:ee:02:e4:90:3a:5a:37:47:69:35:a4:8f:6e:b1:
                    0f:e9:23:03:37:1b:a2:5a:b7:34:d9:b4:44:56:15:
                    1d:25:2c:0d:9c:c4:ca:3a:ad:fb:d6:c7:20:1b:dc:
                    b8:42:8a:40:ad:03:79:04:6d:f2:63:91:19:04:0e:
                    f6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BB:3D:6E:C4:D0:61:A4:B3:B9:C1:AF:A0:29:6F:14:C9:F0:6A:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/4b1d6209-af2d-37a6-b920-f4bdab8ca729.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.182.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ec:dd:4b:50:75:80:26:9c:a0:44:11:10:93:b2:9b:1d:2c:0a:
         28:32:38:19:0e:f4:ff:91:c3:79:ce:e1:a9:2c:51:2c:bc:21:
         22:1c:88:5e:c7:3b:14:b7:8e:33:ff:dc:bb:02:7a:9e:73:69:
         5e:8f:60:ed:c6:f7:fb:15:c6:68:a7:c2:69:ad:1c:d1:7d:c7:
         85:b1:9c:40:80:9a:0f:9f:f3:16:82:fa:d2:9f:f1:28:dc:09:
         7e:ab:7d:fb:84:c1:6a:6c:ad:a8:6c:77:48:b9:a5:3d:50:dd:
         ba:d5:8f:32:ec:1b:f9:af:ac:11:f0:30:b6:66:8f:2b:6c:2c:
         bb:b1:5b:75:31:4a:cd:39:54:ef:5a:92:9c:85:2a:7e:21:38:
         84:a8:fa:d6:6d:ad:15:2c:fa:55:7a:68:88:7b:e2:a9:bd:21:
         bc:58:1b:e3:96:94:75:47:55:17:8e:bc:ed:f9:19:e8:c7:fa:
         83:c8:e7:0a:a9:2f:05:63:ce:c7:07:73:27:a0:16:ea:04:1f:
         df:44:47:34:99:b1:90:74:f0:b5:36:6e:e2:37:9c:1c:72:e3:
         ad:46:37:3a:34:e6:5a:e6:82:c0:f4:ec:4a:aa:ea:0b:69:7b:
         80:bb:2e:71:fd:be:47:bc:0f:19:1e:bf:46:0f:bc:68:bf:ef:
         7a:84:af:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:04:11 2025 by rpki-client