Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c1cad078-8b5d-38b5-8141-35b1324af051.roa
File:                     c1cad078-8b5d-38b5-8141-35b1324af051.roa (raw, json)
Hash identifier:          SRRCmnYNADTSsMxgk0LASJnEI+diCNwJ7ywSAx94/oA=
Subject key identifier:   92:0A:76:27:12:0C:E4:54:4E:07:1B:B9:1F:E2:99:20:35:13:8A:B6
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584AF52122F4032614CBA9D29480
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c1cad078-8b5d-38b5-8141-35b1324af051.roa
Signing time:             Sun 24 Aug 2025 01:00:33 +0000
ROA not before:           Sun 24 Aug 2025 01:00:33 +0000
ROA not after:            Sat 22 Nov 2025 02:00:33 +0000
asID:                     400040
IP address blocks:        68.67.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f5:21:22:f4:03:26:14:cb:a9:d2:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Aug 24 01:00:33 2025 GMT
            Not After : Nov 22 02:00:33 2025 GMT
        Subject: CN=b7891a9a-fabf-42f6-98f7-a09fc0d4b0ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:eb:93:d4:43:2e:46:e4:64:75:23:fc:0d:6c:
                    ea:ef:93:b2:4a:5e:9e:99:45:d8:10:ed:e5:d8:9e:
                    67:bc:52:73:1b:0c:3f:65:14:47:99:28:f9:53:39:
                    44:b3:f0:66:19:48:9f:a1:df:e8:bd:42:2c:03:f9:
                    d8:5c:42:6f:89:64:13:05:78:14:bc:23:cc:0d:48:
                    65:3b:99:7a:6c:e2:d4:b4:50:4b:ad:f3:d5:a0:65:
                    b1:a6:d0:8a:de:57:c5:2d:aa:12:21:a8:8d:02:d4:
                    da:f7:cf:72:6c:95:ea:21:7f:79:a8:38:ff:eb:ff:
                    81:82:a2:fb:8d:8f:7a:ee:f5:40:3c:10:ca:6d:ab:
                    6d:bb:3a:e6:30:56:ff:30:7f:9b:6a:cd:fe:e1:eb:
                    14:e8:6c:45:37:be:dd:26:fb:fd:16:41:ba:cb:35:
                    39:ed:e6:c6:6e:01:6d:8c:c7:49:ae:a1:b2:d4:ba:
                    f4:d0:cd:48:3e:4c:bc:58:34:d4:d9:d9:e9:64:39:
                    b4:9b:7a:69:7c:ab:53:4b:8c:ea:b0:f1:db:0e:64:
                    35:e7:0c:87:95:0b:41:eb:0a:81:ae:6c:f2:77:88:
                    8d:f4:d0:0c:ff:29:d6:c6:c9:d6:a4:4a:d3:d5:3d:
                    de:56:ce:99:0e:4c:e7:cc:4f:0b:ba:0b:1d:aa:ae:
                    8b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0A:76:27:12:0C:E4:54:4E:07:1B:B9:1F:E2:99:20:35:13:8A:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c1cad078-8b5d-38b5-8141-35b1324af051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:ff:48:95:82:2e:8f:95:28:ab:29:2e:b1:6c:18:cc:2a:c8:
         06:72:62:e3:b6:63:61:66:54:69:10:68:48:5f:37:cb:43:19:
         14:4b:0c:0d:9b:14:79:db:d0:03:26:40:75:c6:97:53:d5:bd:
         35:b9:61:93:88:23:ff:f6:c5:83:d6:1e:2a:02:24:2a:22:f4:
         28:35:2e:a4:17:0c:23:4c:25:9e:30:00:2a:78:69:13:80:30:
         94:b5:4a:71:dd:78:ec:7e:44:f9:49:a6:1e:22:5f:ce:d3:df:
         c7:79:cb:f0:5d:ef:d0:30:c5:08:c1:78:d8:c3:e0:6d:46:39:
         77:d8:cd:79:d7:4f:b4:9a:98:9b:02:09:2c:ee:15:93:56:e8:
         98:c4:58:0e:5d:b5:22:c5:27:58:65:24:3a:f2:1f:e1:60:f5:
         3c:9e:62:40:63:eb:1e:e3:9f:c0:54:8e:21:76:f3:64:22:3d:
         e2:8c:26:71:ac:ff:bf:a8:28:74:6c:48:6d:aa:ac:9a:39:73:
         bb:ba:41:a7:fc:8a:74:cf:ba:3a:28:b8:37:b8:5b:c9:2d:aa:
         e4:d9:28:d0:72:34:e2:a6:ff:82:66:77:94:3d:1f:ec:9d:83:
         c6:e9:c7:ea:e9:c1:ef:b5:c3:fb:4c:d8:b1:e1:9e:89:b2:bf:
         1d:c8:95:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:34:42 2025 by rpki-client