Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa
File:                     52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa (raw, json)
Hash identifier:          IFZnnYOEX43cf0Kf/u/JvQkqFKUjuMFXgyfeEoiOx2c=
Subject key identifier:   9F:23:A2:DF:5B:91:E9:ED:08:EE:14:D7:B8:47:3A:42:19:C1:EB:9D
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584B758C903A074025FAB1433500
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa
Signing time:             Thu 09 Oct 2025 01:00:28 +0000
ROA not before:           Thu 09 Oct 2025 01:00:28 +0000
ROA not after:            Wed 07 Jan 2026 02:00:28 +0000
asID:                     834
IP address blocks:        68.67.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:75:8c:90:3a:07:40:25:fa:b1:43:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Oct  9 01:00:28 2025 GMT
            Not After : Jan  7 02:00:28 2026 GMT
        Subject: CN=f3630362-0ab8-4bbc-b79c-e3f802edc135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:0b:11:39:fc:23:50:1b:7f:35:52:b0:fb:58:
                    66:dd:88:22:4c:4a:e6:9b:65:8c:1c:a5:8b:8e:f2:
                    e1:23:fb:49:63:34:e7:e1:78:ba:38:6a:c4:7d:8f:
                    aa:1a:0b:26:8e:ee:5f:f4:22:a0:c4:f1:be:33:82:
                    bf:46:c0:2a:0d:04:44:66:1d:35:77:37:ae:e9:e4:
                    8b:b9:20:d1:61:da:ca:91:3a:41:14:a8:7b:7a:c6:
                    a9:2f:95:29:6f:d7:3c:b6:b8:b4:d2:62:2f:80:fc:
                    32:85:99:4e:e4:dd:e3:d9:04:5f:a7:d2:ac:84:e2:
                    46:56:4a:88:d6:9e:d8:92:f2:2a:f3:47:f2:5c:25:
                    5e:97:69:77:27:ef:16:e1:8d:34:a1:9b:f4:c6:6e:
                    10:40:87:6b:70:fe:95:ea:e3:23:3d:57:a0:d4:74:
                    5c:9c:27:8d:cb:b6:e3:ef:67:68:b9:aa:17:50:54:
                    ed:3c:a5:fc:29:e1:d4:6e:66:39:e4:e4:fe:2c:b9:
                    2c:97:8d:1f:65:2d:65:29:a7:d1:2c:d4:d8:c5:4e:
                    55:13:fd:b6:30:60:da:70:5a:a8:07:05:66:8f:ce:
                    56:6b:de:72:9d:48:92:2f:67:fa:eb:34:0d:77:ff:
                    98:4e:48:fc:70:bc:10:f1:95:74:0d:90:9b:c7:e4:
                    11:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:23:A2:DF:5B:91:E9:ED:08:EE:14:D7:B8:47:3A:42:19:C1:EB:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/52cfe72e-3d27-3258-beff-e80db3a2e4c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:f1:79:23:73:ef:f6:68:a0:04:e2:b1:34:b2:39:07:2f:a4:
         f0:a1:61:43:89:d6:46:2f:88:a9:55:6c:e6:ab:ad:04:10:ab:
         ed:13:86:fc:3f:90:dd:35:e9:8b:b2:66:15:d7:29:da:ca:2f:
         04:1d:87:ce:50:32:5f:26:6c:ff:47:65:0b:40:84:1c:00:f2:
         ee:cc:75:25:bc:da:9d:1b:52:b9:5c:81:b5:8f:b6:bc:f9:31:
         5d:c7:b3:e4:0b:aa:27:36:8d:6d:63:26:91:1d:29:b9:5a:dd:
         0c:07:b3:32:60:aa:33:37:b7:aa:52:76:63:25:4c:e0:ad:b7:
         0f:80:ad:c9:d6:34:5e:7d:a2:0e:ca:70:64:a7:51:28:e0:31:
         c5:af:8b:19:46:da:01:e1:d6:04:45:61:be:f8:a9:c5:0e:aa:
         b4:cd:28:d1:bc:5b:0b:c7:21:c0:63:87:b4:f5:2e:01:b1:aa:
         2a:05:66:c0:7c:f9:06:ae:8e:55:b7:8f:68:d6:d1:bb:cb:a6:
         49:69:5d:fd:26:12:ab:d0:39:76:e9:36:88:35:04:ac:f5:ce:
         3c:75:a3:7f:78:66:3a:1e:7a:ad:34:36:c6:96:4c:f7:1e:e0:
         bb:08:85:13:e2:d2:84:04:6c:92:ab:c5:b6:14:a6:31:d2:3b:
         e3:7f:85:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:44:47 2025 by rpki-client