Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7bbc9f42-7900-3623-a6f5-85cdf27a17de.roa
File:                     7bbc9f42-7900-3623-a6f5-85cdf27a17de.roa (raw, json)
Hash identifier:          vvoJgJsAmidchfwBtTVofdoKSxEqds7IcNzY+Bd9ZHM=
Subject key identifier:   7B:D2:6E:3E:43:A3:02:93:74:6F:54:28:54:0E:E4:BC:84:9B:52:1C
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328584B3C51B18CB4C3119F6E92EA00
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7bbc9f42-7900-3623-a6f5-85cdf27a17de.roa
Signing time:             Thu 18 Sep 2025 13:00:41 +0000
ROA not before:           Thu 18 Sep 2025 13:00:41 +0000
ROA not after:            Wed 17 Dec 2025 14:00:41 +0000
asID:                     8069
IP address blocks:        52.122.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:3c:51:b1:8c:b4:c3:11:9f:6e:92:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Sep 18 13:00:41 2025 GMT
            Not After : Dec 17 14:00:41 2025 GMT
        Subject: CN=c90fa947-93ab-43af-aa01-12d5d253c8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:00:8c:c3:67:c5:9a:98:4a:85:45:9e:73:45:
                    39:76:c6:c2:ff:8d:3c:db:3f:d7:5b:ef:67:a4:a5:
                    29:28:3c:de:c6:05:59:3b:fd:6a:5c:a5:b8:e7:5d:
                    47:78:1e:ab:9b:96:4a:e8:69:a2:53:22:4d:6f:fd:
                    5b:f6:b2:7b:bb:15:07:6f:d3:63:e2:f5:d5:79:b5:
                    7b:1b:0b:05:ea:b1:92:2a:d5:b1:9e:8c:89:b0:73:
                    d4:b1:fa:a6:e1:ab:fa:83:13:c3:59:dc:24:29:47:
                    d6:a4:4e:86:8c:19:e0:dc:cd:ac:75:d4:97:dd:34:
                    3a:63:0b:10:05:b1:3d:07:f5:a7:21:80:75:a1:fb:
                    42:74:da:91:90:35:b6:d1:fb:18:ca:b3:8e:59:24:
                    45:5d:e1:74:ad:7e:4d:2b:a2:dd:2a:10:52:8e:8e:
                    a2:4c:63:9e:3e:3e:1d:0b:ea:5e:08:cb:17:94:64:
                    8b:b9:67:84:61:34:94:df:da:0d:77:b8:42:c8:29:
                    dc:14:3f:f3:8a:b2:77:c8:3c:45:cb:5e:10:e1:6e:
                    d0:96:43:13:71:d3:cf:02:ed:8d:e7:00:5a:32:39:
                    eb:32:90:9f:b5:76:57:d3:f1:e6:d6:32:e4:f0:09:
                    6d:82:ce:54:e5:98:88:f4:3f:22:c0:85:f7:7d:f6:
                    94:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D2:6E:3E:43:A3:02:93:74:6F:54:28:54:0E:E4:BC:84:9B:52:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/7bbc9f42-7900-3623-a6f5-85cdf27a17de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.122.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:a1:10:b7:b5:25:ca:4d:e4:37:21:25:22:fa:ee:6d:f7:25:
         e4:ac:6b:81:c4:36:43:d5:95:77:81:4b:8d:9d:af:e0:13:46:
         be:30:64:01:34:2e:7f:ec:41:73:4b:15:92:c2:bb:49:c7:fe:
         3b:a1:29:ac:26:9f:45:1d:fc:c4:66:00:50:e5:d3:84:02:12:
         92:2d:59:da:db:2f:aa:78:4f:71:5e:21:48:82:02:89:f7:08:
         f8:9b:b7:80:b4:29:f6:87:ae:69:8a:0d:98:03:ca:a0:ae:46:
         aa:82:52:00:50:dd:70:8a:bd:a8:e2:24:38:38:d9:e0:5e:41:
         4b:05:b3:96:63:f8:42:52:aa:bb:c5:dc:c3:d7:b1:a2:42:da:
         38:aa:dd:de:43:3e:53:ed:8d:56:70:c4:71:bf:4d:53:01:1d:
         ba:b1:81:c4:f0:e4:7c:0b:b6:9b:9c:37:70:5a:44:5d:cf:ce:
         da:b2:c2:15:e8:9d:70:9e:8c:e4:af:6b:7b:d9:06:4b:aa:6e:
         d8:48:e3:b4:0e:ec:d4:9b:e3:b3:9a:1f:30:49:32:13:da:9e:
         ab:21:f6:68:1b:14:aa:13:0e:0a:2f:14:8f:59:d0:fa:9e:c5:
         8c:38:a2:d3:6e:de:0d:f7:d4:f0:c9:54:fd:d8:99:7b:56:35:
         e0:ef:30:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:42:44 2025 by rpki-client