Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/dab11a5e-6bef-369e-9164-020a3598a65b.roa
File:                     dab11a5e-6bef-369e-9164-020a3598a65b.roa (raw, json)
Hash identifier:          o9p/w+XFIIjEQMPGaH98mJ/EmkdX/IEUBhLJAqpNIj0=
Subject key identifier:   15:0A:5D:12:5F:FE:D2:D5:E9:08:B3:A5:4E:2B:C6:28:4C:C2:93:F8
Certificate issuer:       /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial:       010D0C9F4328584A3A1585F04CCE997A91CFDA80
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/dab11a5e-6bef-369e-9164-020a3598a65b.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     63023
IP address blocks:        68.233.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:85:f0:4c:ce:99:7a:91:cf:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=c33a329d-8f8a-43b6-9999-208ddf603835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:0b:bf:d8:14:a2:96:9e:07:66:1d:10:ea:
                    97:3a:3f:db:ac:90:fe:70:bd:ac:40:5b:ff:14:92:
                    b8:d7:d6:d7:b4:24:5d:29:57:bd:29:c3:4b:53:0f:
                    97:18:de:ce:81:c8:4b:e6:0a:ac:09:b2:2c:aa:99:
                    ee:a3:de:79:6b:15:13:03:b5:fd:cf:c2:91:e6:85:
                    25:fe:f5:8b:c9:5d:10:3c:84:66:9d:33:f8:32:27:
                    60:ce:20:0a:50:37:ec:a8:4e:cc:23:9a:54:1e:35:
                    e1:1e:04:b7:3e:d6:f3:5e:7a:0b:61:ea:b4:56:4d:
                    ee:76:2c:e1:1d:cf:04:80:77:3d:17:ed:53:2b:82:
                    4e:69:42:d5:94:42:f7:42:3e:5d:8e:28:03:a0:f8:
                    37:2d:25:ab:bf:ca:19:2e:90:e6:83:63:0d:4c:99:
                    f5:04:ff:c8:85:9a:3b:6e:35:dc:63:55:69:0f:ff:
                    bd:c3:16:8f:d1:4d:91:cf:86:67:9e:a7:99:b9:70:
                    14:30:9b:0a:c6:9e:12:d2:32:83:1c:ab:88:ed:9e:
                    0c:b5:9c:84:fe:2f:90:96:01:6c:a1:aa:34:42:1c:
                    a6:75:47:e6:aa:94:46:a9:c4:40:f3:48:77:4c:35:
                    f1:89:48:d5:05:27:f0:84:92:4d:4d:31:cd:2f:41:
                    e1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0A:5D:12:5F:FE:D2:D5:E9:08:B3:A5:4E:2B:C6:28:4C:C2:93:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/dab11a5e-6bef-369e-9164-020a3598a65b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl

            X509v3 Authority Key Identifier:
                keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.233.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:6e:b1:ff:6c:81:f1:dc:ba:28:38:d1:20:f0:9d:c0:44:17:
         cf:ce:2e:28:8a:76:32:95:90:ec:38:fa:12:8f:96:7f:3b:ff:
         6e:ff:26:0f:db:b5:a0:ce:51:b2:7f:a3:ec:ce:51:6d:98:f4:
         10:12:c0:f5:95:b6:45:05:e0:ba:85:d5:19:01:1c:1e:b5:df:
         fa:69:77:3d:f0:52:ab:9b:fa:5a:b6:3f:1f:65:fe:fb:eb:9f:
         38:7d:5a:41:fe:d7:8a:4f:8d:75:de:b6:94:39:41:71:58:79:
         42:79:2f:5e:fe:e7:48:93:c0:a1:ca:77:ea:eb:74:4b:e5:0f:
         07:36:d3:26:4f:40:e4:95:71:30:d3:ac:b5:5b:fb:f4:9a:f6:
         03:ea:05:5b:04:b8:54:a1:db:74:94:a9:0d:e2:4d:c3:38:38:
         e9:23:4a:46:17:f4:8f:04:18:ea:5c:53:d9:32:fc:b5:92:b9:
         6d:0a:38:fa:fd:03:19:86:1d:86:d0:4e:4c:82:d8:40:ef:48:
         61:a2:ed:73:92:bd:cb:8d:ec:fa:a3:9e:c8:0a:c9:03:da:9a:
         42:c0:92:a7:09:32:5b:f4:b3:19:18:34:e3:18:6a:5d:ac:8e:
         c6:a8:0c:7c:66:96:e4:e5:e0:cc:16:31:35:e2:0b:a4:a0:0e:
         70:b1:60:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 21:02:28 2025 by rpki-client