Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/b6bab6f6-1332-3f01-9c8f-b956989936f8.roa
File:                     b6bab6f6-1332-3f01-9c8f-b956989936f8.roa (raw, json)
Hash identifier:          +3btWTMuKlO+/GQUj66UwG1j198imd8ibXOM1nJTdsM=
Subject key identifier:   0C:1E:E2:85:C9:F9:10:6F:A9:E4:D0:3B:DC:54:A1:93:E0:07:38:3B
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F4328584B6D2C8C642A83EEB00C8E5480
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/b6bab6f6-1332-3f01-9c8f-b956989936f8.roa
Signing time:             Mon 06 Oct 2025 01:00:33 +0000
ROA not before:           Mon 06 Oct 2025 01:00:33 +0000
ROA not after:            Sun 04 Jan 2026 02:00:33 +0000
asID:                     18934
IP address blocks:        142.202.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:6d:2c:8c:64:2a:83:ee:b0:0c:8e:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Oct  6 01:00:33 2025 GMT
            Not After : Jan  4 02:00:33 2026 GMT
        Subject: CN=ba1aee1f-4f42-48c8-a56a-dbac069858f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:cd:e2:a9:e9:5b:c3:5e:2b:df:fa:65:18:47:
                    c6:48:4a:5a:ca:ce:f9:c7:5f:25:de:0e:18:71:2b:
                    f5:ed:f0:32:db:26:73:c4:c5:9a:e4:9b:f9:e9:b7:
                    82:d7:df:d9:f1:ee:28:53:5d:c9:69:1c:52:43:14:
                    a9:e9:77:5c:51:8e:76:bf:eb:fe:9a:13:1a:8e:49:
                    e6:09:89:d2:ee:52:f9:02:53:a2:93:41:82:c9:8c:
                    fd:a5:9f:aa:00:b9:85:00:38:7b:cd:36:60:44:e5:
                    34:fd:57:05:30:25:19:38:28:cb:98:4c:2b:5e:5a:
                    74:d8:4a:23:42:eb:b7:c6:64:5a:d2:69:8e:85:42:
                    ab:76:08:3e:41:e9:c9:a8:0f:65:eb:19:0e:e0:48:
                    3e:c6:b2:78:e8:d6:49:71:10:fd:13:5c:db:a4:31:
                    a8:67:19:2d:70:02:b4:53:99:10:2c:a1:b2:8f:50:
                    98:4e:7b:ff:ef:54:c8:4f:b5:6a:55:19:3a:40:8f:
                    c8:e8:5c:1f:6b:55:6c:f3:5d:73:40:28:02:aa:59:
                    3c:61:8e:6c:bc:6a:c4:19:13:d0:dc:c6:20:45:a4:
                    18:fe:c2:a5:a9:97:17:a9:45:5b:b3:ba:c5:3c:7c:
                    51:0c:3f:b7:27:4f:1c:9d:e1:46:83:34:f4:f8:f8:
                    f7:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1E:E2:85:C9:F9:10:6F:A9:E4:D0:3B:DC:54:A1:93:E0:07:38:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/b6bab6f6-1332-3f01-9c8f-b956989936f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:36:0f:8c:5c:65:0d:69:48:f6:fd:a2:fe:7d:f3:3b:dd:9e:
         29:76:1a:77:a7:44:be:52:b9:06:c0:3f:37:77:9a:48:9d:a7:
         e1:1d:e6:32:48:f1:ea:1b:b5:cd:4e:8b:87:47:18:4c:b0:fd:
         e8:4e:f9:13:58:28:e3:61:99:20:52:88:ef:e7:89:28:07:68:
         76:15:b9:20:da:4e:d1:10:fb:51:93:ad:fd:fa:97:5f:e4:32:
         e5:b4:7b:e9:6b:85:2f:6a:94:39:0a:f3:a6:68:95:57:bd:75:
         72:40:4f:f9:dc:6c:9c:ef:9a:2b:e0:55:01:17:df:dd:1b:c5:
         d4:8f:3f:42:d8:4e:fd:8b:0e:f8:46:5a:41:38:e8:75:7f:7e:
         19:86:6b:41:15:07:e5:03:4d:d6:46:95:42:57:8e:56:82:a2:
         99:66:76:ef:5b:09:84:3c:7e:52:65:d8:a3:c8:9d:e2:00:9c:
         00:f8:63:13:f8:00:07:22:96:e3:c2:dc:31:3e:f7:51:d5:a5:
         62:6c:68:25:89:98:6a:0b:2d:a7:d3:72:37:f1:8a:49:cd:af:
         96:07:1b:37:df:17:fe:f6:e5:ce:fe:e2:90:44:3d:8c:47:a2:
         c6:31:5f:7f:ca:fb:46:cf:6f:de:fd:e1:be:1e:df:d7:79:17:
         ea:27:b0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:22:21 2025 by rpki-client