Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/22535747-b884-373e-ae7d-c116ccd3f089.roa
File:                     22535747-b884-373e-ae7d-c116ccd3f089.roa (raw, json)
Hash identifier:          ejawGxqAAjd9O+885xyAeTFXkkqED6tDD7nZqDbjmpw=
Subject key identifier:   04:2A:06:0B:D4:1D:7F:B6:6B:BD:2F:CD:3A:6F:95:15:4C:6B:B3:17
Certificate issuer:       /CN=c7554e9f-a3b0-474f-b728-4f959aa35449
Certificate serial:       010D0C9F4328584AC460C6F0862C35FC3BDC7E50
Authority key identifier: 96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/22535747-b884-373e-ae7d-c116ccd3f089.roa
Signing time:             Wed 06 Aug 2025 13:54:12 +0000
ROA not before:           Wed 06 Aug 2025 13:54:12 +0000
ROA not after:            Tue 04 Nov 2025 14:54:12 +0000
asID:                     20115
IP address blocks:        68.170.0.0/24 maxlen: 24
                          68.170.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c4:60:c6:f0:86:2c:35:fc:3b:dc:7e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7554e9f-a3b0-474f-b728-4f959aa35449
        Validity
            Not Before: Aug  6 13:54:12 2025 GMT
            Not After : Nov  4 14:54:12 2025 GMT
        Subject: CN=c26d0ca3-f92c-4091-90f8-9e4da14fc2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c7:7f:a4:d4:5c:da:72:0f:34:31:ef:5f:b8:
                    b3:23:63:85:90:04:1b:f7:a8:3f:f6:58:bc:89:aa:
                    70:18:17:a4:00:71:1e:f2:fc:ef:36:e3:23:8e:24:
                    f8:43:ce:44:6d:70:d8:2c:8b:95:c1:5c:e0:5b:70:
                    6e:96:9f:7f:23:23:30:a6:0a:e9:4c:bf:4c:c2:2e:
                    7c:a0:8c:48:b0:51:fa:29:a6:81:72:fe:da:72:fb:
                    c6:a5:dd:77:c9:eb:bc:35:a5:b1:f6:68:dc:56:38:
                    cc:1e:6f:71:9c:a0:e8:b3:17:15:e5:a3:15:38:5b:
                    77:55:a4:f9:4c:2c:bb:50:c8:a8:28:73:30:b3:4a:
                    42:ef:b1:93:65:bc:7c:0b:44:57:7b:b3:7c:bb:9b:
                    9e:9c:7d:e3:c7:f1:85:e8:9c:5e:31:46:ff:9c:e2:
                    b0:79:94:04:c2:9a:ab:19:84:77:7b:c6:d0:00:8f:
                    15:bb:1a:a9:67:a8:1e:47:d4:84:38:c0:93:d4:84:
                    7c:f0:46:5d:ff:6c:01:8b:1a:97:e6:aa:c7:ca:b5:
                    00:ba:56:00:2b:ff:29:63:4d:01:50:30:f0:31:46:
                    08:19:f3:9d:a7:10:d6:98:c0:23:90:d1:d0:e3:a4:
                    36:64:a1:9b:14:20:2d:09:fb:03:84:45:b5:3b:ef:
                    94:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2A:06:0B:D4:1D:7F:B6:6B:BD:2F:CD:3A:6F:95:15:4C:6B:B3:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/22535747-b884-373e-ae7d-c116ccd3f089.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449/c7554e9f-a3b0-474f-b728-4f959aa35449.crl

            X509v3 Authority Key Identifier:
                keyid:96:2E:CC:42:41:09:F4:20:78:3C:B0:03:CF:5B:10:AC:A3:8F:DE:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7554e9f-a3b0-474f-b728-4f959aa35449.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.170.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:66:1a:7f:a2:99:62:d0:0d:b7:90:10:ba:b9:a3:45:b8:79:
         ab:52:4e:cc:ef:06:3a:f5:29:ee:46:27:63:08:55:e2:03:1d:
         c7:35:30:dd:47:67:bb:df:4b:29:7d:7c:29:bf:e6:5d:f9:f5:
         f6:ed:d8:70:46:11:f8:0f:d6:e3:06:48:49:19:0e:3a:a9:23:
         8f:24:8b:8f:28:5f:bb:81:97:20:68:b2:21:53:e4:5f:f4:30:
         11:f9:d9:42:fb:94:61:12:af:2f:56:cb:99:ab:74:72:19:f1:
         a2:11:e2:e1:30:e0:03:59:e5:16:75:d7:fb:73:4b:58:2e:1b:
         7e:22:8a:64:0c:b1:18:bc:a5:85:48:73:e5:8e:8d:3d:27:0d:
         c7:2c:8a:0b:30:2e:d5:bb:18:9e:1e:2a:c3:a2:da:d6:cd:b1:
         39:d4:37:54:69:75:e7:9c:b3:8b:1a:d8:d5:b7:b5:d0:19:3c:
         6d:88:54:04:e7:30:11:da:42:64:92:58:75:24:74:9a:17:06:
         44:9f:68:ae:0d:32:df:b9:fb:92:af:08:3e:d5:3a:d6:3f:82:
         b0:20:97:7e:14:e9:ec:95:16:b8:d8:65:59:a6:cc:1d:88:7a:
         ec:50:4a:72:e2:dc:b8:84:67:e0:c4:65:38:27:8f:b8:1a:f4:
         b7:57:77:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:01:28 2025 by rpki-client