Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/68b50fb3-4621-32d3-becb-1b9b6e5389be.roa
File:                     68b50fb3-4621-32d3-becb-1b9b6e5389be.roa (raw, json)
Hash identifier:          qm9lj4bHVYlmOkIJAem1HXeSBo9f49GgUErdwuXun1A=
Subject key identifier:   57:4E:E5:27:21:51:E1:AF:37:7B:DD:1D:E2:07:3A:BC:B9:C4:B1:52
Certificate issuer:       /CN=34247a70-c93d-4065-9548-762da5a386ba
Certificate serial:       010D0C9F4328584B196C11B156ADCF3AE72B4900
Authority key identifier: A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/68b50fb3-4621-32d3-becb-1b9b6e5389be.roa
Signing time:             Sat 06 Sep 2025 01:00:33 +0000
ROA not before:           Sat 06 Sep 2025 01:00:33 +0000
ROA not after:            Fri 05 Dec 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        72.162.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:19:6c:11:b1:56:ad:cf:3a:e7:2b:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34247a70-c93d-4065-9548-762da5a386ba
        Validity
            Not Before: Sep  6 01:00:33 2025 GMT
            Not After : Dec  5 02:00:33 2025 GMT
        Subject: CN=ca2392b4-e16c-4430-9684-1c117d75f4f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ca:b4:f8:35:a3:40:8a:10:ea:50:56:83:fc:
                    a8:81:69:cd:2d:a6:2e:de:ec:ef:1d:5b:69:a1:0c:
                    e4:a8:f5:e8:99:da:e6:ed:e5:72:d8:07:9f:d9:fc:
                    95:ed:db:ab:89:f2:6d:47:23:9a:90:1c:65:36:46:
                    2a:3a:3f:11:7c:0f:61:bc:a2:e1:f8:3e:d1:15:ac:
                    9a:1d:c5:89:b4:5b:6d:14:b5:a0:58:3f:9f:06:97:
                    53:d4:aa:0b:76:42:f4:a6:89:86:f3:c4:09:9c:f6:
                    77:74:1a:58:dc:1c:51:6e:ef:a8:49:01:85:5b:8d:
                    88:0d:e5:0f:0b:cc:05:74:2a:8a:ae:d3:9e:e8:2b:
                    5e:f7:c7:4a:dc:c4:e0:3a:2c:7f:31:1e:27:46:c3:
                    76:dc:83:90:2b:90:16:4f:c5:5c:a7:e8:63:de:59:
                    09:c0:21:6f:af:d1:0d:be:89:f0:e9:3e:92:f4:c6:
                    42:f9:ca:a4:00:86:7f:ac:c5:cd:ae:5d:cc:04:a4:
                    ee:2e:ac:a3:a4:64:47:97:e4:98:bb:a4:4d:e5:16:
                    65:e4:2e:47:e0:4f:81:51:6f:47:ac:cd:78:61:0b:
                    b8:e8:02:13:e3:ca:cd:a1:99:b5:0e:cd:ab:09:1c:
                    84:d2:f7:31:f2:4b:f7:c6:7f:76:b0:d0:2a:c5:03:
                    eb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:4E:E5:27:21:51:E1:AF:37:7B:DD:1D:E2:07:3A:BC:B9:C4:B1:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/68b50fb3-4621-32d3-becb-1b9b6e5389be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba/34247a70-c93d-4065-9548-762da5a386ba.crl

            X509v3 Authority Key Identifier:
                keyid:A6:C1:1B:D6:B7:25:5A:D0:A4:C1:9B:9F:F7:85:22:D1:93:61:49:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34247a70-c93d-4065-9548-762da5a386ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.162.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:79:90:e0:e7:28:b8:ee:3d:ec:d3:6a:af:2b:01:f8:94:9d:
         f1:ac:e3:58:1c:8f:6f:ee:48:40:d4:85:19:52:a8:f8:be:6c:
         3b:ab:6c:5b:9b:85:8f:75:25:ec:24:70:e8:d2:a9:32:88:3f:
         34:8a:cb:57:9a:05:ec:46:39:42:b5:6b:4a:25:bb:94:54:99:
         6e:08:41:e1:37:4b:c7:7f:59:d3:4f:91:e8:38:da:7a:90:46:
         2c:6c:af:d7:b3:e4:32:a9:ba:07:85:a7:dc:06:57:44:6d:92:
         b7:8c:53:d2:db:aa:8e:97:b8:87:c7:e2:50:eb:7d:da:85:a5:
         16:45:e8:29:d0:49:db:23:aa:6f:0c:dd:04:24:48:ee:b8:02:
         80:d2:01:85:7a:71:46:1b:60:73:c4:a7:c1:0e:4e:33:9f:19:
         a2:99:4d:3d:a0:5a:d1:78:e9:37:39:5c:ff:83:52:50:57:6c:
         bf:3d:a6:bc:79:c2:05:98:f3:b7:26:b6:b8:ad:26:9f:68:25:
         9b:72:05:ef:fa:6f:40:70:03:ad:27:00:95:dc:1e:6b:44:0b:
         6e:6f:d1:8b:84:14:03:8b:fd:6c:35:bb:e9:e4:0a:cf:a3:d7:
         b8:b2:17:f9:8d:7f:50:7e:2d:ed:05:bc:5e:24:04:c6:68:44:
         9c:23:03:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:33:50 2025 by rpki-client