Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/e286328b-984d-3754-b06d-990155e3c821.roa
File:                     e286328b-984d-3754-b06d-990155e3c821.roa (raw, json)
Hash identifier:          EfMpi7g3psY6+Yr69/AELGemZNbk4LPUbdr2dujknDM=
Subject key identifier:   14:DE:6E:74:13:83:46:FC:92:62:6C:13:FD:11:DC:49:0A:3D:5F:87
Certificate issuer:       /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial:       010D0C9F4328584B7632FC829DAB7287CEC5E580
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/e286328b-984d-3754-b06d-990155e3c821.roa
Signing time:             Thu 09 Oct 2025 06:35:49 +0000
ROA not before:           Thu 09 Oct 2025 06:35:49 +0000
ROA not after:            Wed 07 Jan 2026 07:35:49 +0000
asID:                     212336
IP address blocks:        208.68.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:32:fc:82:9d:ab:72:87:ce:c5:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
        Validity
            Not Before: Oct  9 06:35:49 2025 GMT
            Not After : Jan  7 07:35:49 2026 GMT
        Subject: CN=a364b0f1-9f61-4c27-b226-8b0f0fc70ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:bb:38:5d:d7:8c:c2:d4:9e:f6:ff:87:f0:a7:
                    96:58:b5:7e:f0:57:5e:8d:d5:b2:3e:3f:9f:be:7b:
                    f6:5e:f1:71:8c:ca:e1:a8:7f:84:2e:ab:c4:b9:f0:
                    e0:6d:d5:fc:d1:5a:fc:cf:2c:e0:a5:e5:58:67:19:
                    27:8d:76:f0:07:25:92:de:ec:01:d2:97:a8:9b:44:
                    10:a3:af:b7:a0:a4:8b:d8:86:0d:80:27:b0:34:d6:
                    0e:75:96:c0:d2:a1:a9:ca:3e:51:8b:1b:91:06:fa:
                    12:e5:3e:e6:06:ab:f5:bc:0c:ea:b7:3c:39:ef:0c:
                    1d:f6:ad:1a:56:3b:ba:5a:76:51:48:c0:55:b4:09:
                    c5:14:e4:52:b2:6e:a5:6c:7e:6f:d4:50:c0:0d:9a:
                    04:68:71:34:a4:13:49:f8:b4:67:f6:74:32:db:f6:
                    d5:bf:6a:23:65:15:6c:58:c4:db:f2:9e:f3:8a:68:
                    88:74:e4:09:27:f6:44:fc:ab:a3:db:46:03:cb:b2:
                    20:63:e8:dc:c0:cb:12:c4:37:2b:65:dd:f0:4e:c9:
                    1e:e1:44:5f:cd:76:18:93:0d:ba:a9:1b:6b:8c:aa:
                    11:78:a8:e5:f3:28:a6:17:87:17:d1:bb:76:c4:2c:
                    36:d1:e8:0c:a2:bf:7c:ca:25:11:53:84:02:d5:ab:
                    e2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DE:6E:74:13:83:46:FC:92:62:6C:13:FD:11:DC:49:0A:3D:5F:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/e286328b-984d-3754-b06d-990155e3c821.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl

            X509v3 Authority Key Identifier:
                keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:b7:98:48:05:bf:d3:70:22:01:3c:f7:01:77:75:12:37:35:
         4a:27:8c:b2:14:8f:61:8c:e0:87:04:cd:60:a7:1d:cc:ea:4f:
         9e:cb:56:e5:87:1f:7a:fc:f1:0e:37:c3:d8:da:d5:ff:d9:bc:
         f3:9c:68:78:48:b7:44:38:4d:60:63:2e:6d:43:57:e8:f9:47:
         89:7c:8d:06:19:4d:04:e0:bf:32:0f:d2:b9:9a:40:08:99:11:
         f2:ed:3b:03:a6:a1:8d:bb:a3:2f:88:12:3e:26:25:25:20:e4:
         3e:97:4c:0b:d1:79:20:b7:21:f9:1c:3b:15:e4:a5:0a:5a:d2:
         1f:c2:df:0c:21:12:a8:9e:85:55:ed:47:60:85:b7:32:e2:78:
         82:d7:a4:d0:f0:8b:89:c4:19:74:37:56:66:96:89:84:0a:b3:
         e9:95:c3:2b:83:a4:3a:b2:6b:5c:04:11:88:2e:45:2b:f3:1e:
         0f:a9:77:29:b7:e6:f4:3c:40:16:03:90:ab:e0:f3:f7:16:ac:
         07:47:65:76:66:ec:4c:9c:f4:cb:ba:cc:1a:e5:7b:78:f5:af:
         8a:20:8f:c4:8a:70:ec:6d:27:c3:b9:8a:c4:2d:c3:58:6d:2e:
         ed:f3:bf:04:64:02:81:f0:f1:47:b1:c6:d7:e0:9f:91:a7:2e:
         bb:ab:a0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:49:23 2025 by rpki-client