Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/eb314902-c439-3a6d-b09b-293e9d9bacc7.roa
File:                     eb314902-c439-3a6d-b09b-293e9d9bacc7.roa (raw, json)
Hash identifier:          dfvko3S2YxEzPIjcfVxyYoehbWo/xt1MIoGD/xvf80M=
Subject key identifier:   A0:65:C5:0E:F8:EB:1E:F0:EC:14:B9:D4:0A:7F:D9:1D:F1:55:80:3B
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F43285849B9AA0363C097A5013CFC5F80
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/eb314902-c439-3a6d-b09b-293e9d9bacc7.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     834
IP address blocks:        68.67.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:03:63:c0:97:a5:01:3c:fc:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=b2b3433f-8bc8-4712-969b-5951bf495e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0b:7c:90:46:6c:0a:ea:7b:21:1c:43:db:81:
                    24:21:b2:cb:55:a6:3c:63:60:02:aa:c0:af:e6:01:
                    fa:8d:2f:a1:46:f2:1d:f2:d4:27:10:c5:0d:e4:5e:
                    41:21:39:90:6d:95:cc:ab:44:29:03:20:f0:ff:38:
                    3d:51:b0:57:3b:95:c6:64:3e:68:96:83:b2:74:1d:
                    88:d4:29:ff:89:d5:14:fc:49:58:9a:e5:2d:9e:63:
                    74:b0:8d:37:8d:21:61:55:28:d0:63:8d:7d:77:54:
                    fa:cd:e5:63:02:38:b7:c8:78:a9:ea:f8:bd:4f:b4:
                    a7:6d:25:41:63:11:fb:f6:d2:e8:70:e5:ec:3c:70:
                    47:46:6c:f0:cd:18:a3:f6:af:5a:4e:a8:27:56:93:
                    d4:10:e6:e6:9b:63:cc:36:85:f7:9c:10:35:9f:6d:
                    5d:7b:9a:1a:40:26:f6:b2:f5:59:80:41:52:ea:35:
                    31:47:c2:d6:83:d7:8b:c8:87:de:6b:8d:4b:62:08:
                    47:85:49:98:f9:ad:db:4d:6a:a7:79:89:01:87:69:
                    5a:79:9c:53:79:9a:85:5f:99:a2:31:63:58:04:f5:
                    28:91:a8:70:8e:a4:52:60:cd:a7:3c:c8:32:e4:a4:
                    ac:79:90:d8:87:09:d5:ff:59:e1:a8:e3:c2:73:2b:
                    30:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:65:C5:0E:F8:EB:1E:F0:EC:14:B9:D4:0A:7F:D9:1D:F1:55:80:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/eb314902-c439-3a6d-b09b-293e9d9bacc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:92:56:20:30:d0:d3:b8:ad:93:6a:28:76:51:e1:29:ce:06:
         d0:8b:da:73:83:05:65:e1:95:b9:82:c6:c0:ab:46:5b:13:c0:
         98:ca:5f:a8:70:58:26:84:e6:c6:a3:fe:a9:e6:82:18:e0:24:
         85:74:f2:19:e8:80:ff:b5:cd:8b:e8:c0:ad:51:f4:1f:a8:13:
         31:97:35:c0:91:41:05:8c:3a:de:e5:c8:32:6b:0e:d5:0a:1c:
         df:7b:a3:d8:c8:9a:d6:27:d2:8e:f3:03:9d:46:7d:db:9e:e9:
         64:b7:a0:38:e5:0a:2b:a3:57:79:51:e3:51:e9:af:cb:2b:f6:
         b9:a7:eb:4f:6d:47:20:a7:37:87:c0:57:c6:d0:63:8d:bc:f3:
         2d:cd:a5:ea:82:f5:ce:07:c4:82:39:b8:44:9b:6c:c5:a1:84:
         2e:8c:5b:73:c2:07:89:5d:c9:fa:18:67:88:af:0a:e0:e1:a5:
         c5:d5:67:8e:e5:64:4c:36:40:ee:64:9e:1b:bc:89:3d:01:d1:
         52:83:3c:eb:e5:45:b5:df:0c:40:1f:62:52:db:9f:7f:5d:24:
         5c:18:94:41:86:20:a7:a3:2f:65:8a:6c:54:29:05:f8:4f:bc:
         ce:a0:80:6d:28:11:28:71:cd:f1:c1:1c:5b:ae:10:1b:7f:24:
         01:91:c6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 05:41:53 2025 by rpki-client