Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/eb314902-c439-3a6d-b09b-293e9d9bacc7.roa
File:                     eb314902-c439-3a6d-b09b-293e9d9bacc7.roa (raw, json)
Hash identifier:          rauJMOtt++jKazLdKFwCTVY9E824GIpnwaAUaAP4mcw=
Subject key identifier:   F0:5F:56:29:AA:BE:0B:88:57:B1:9F:EB:E6:61:69:0C:50:5F:D7:57
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328584B79BCB9A4863007157A9A6380
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/eb314902-c439-3a6d-b09b-293e9d9bacc7.roa
Signing time:             Fri 10 Oct 2025 13:00:37 +0000
ROA not before:           Fri 10 Oct 2025 13:00:37 +0000
ROA not after:            Thu 08 Jan 2026 14:00:37 +0000
asID:                     834
IP address blocks:        68.67.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:79:bc:b9:a4:86:30:07:15:7a:9a:63:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Oct 10 13:00:37 2025 GMT
            Not After : Jan  8 14:00:37 2026 GMT
        Subject: CN=85084803-f260-43c2-a91b-4ac7618b4ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:c0:f4:dc:d4:73:26:51:02:0d:cf:49:d3:
                    40:be:2d:cf:58:4c:ba:ee:cf:06:f0:9b:86:85:ee:
                    6c:d1:d0:60:bc:5b:29:5d:36:74:9f:fe:94:fa:6f:
                    66:f1:2c:67:4d:81:8b:3e:f9:14:de:b9:07:ad:d5:
                    ee:e1:11:4c:43:ff:53:5a:92:4f:93:bc:2a:bc:1d:
                    69:c8:d5:75:94:2c:b9:df:e5:2b:c2:dd:b7:46:42:
                    30:d4:be:5e:cb:0a:5a:10:ce:a0:57:ef:46:d6:13:
                    2c:4c:54:cf:05:4d:6e:36:fb:5d:95:2b:c2:80:e7:
                    8f:81:5e:a8:62:a1:0e:23:85:7a:70:75:7d:32:be:
                    53:4b:c6:c8:6c:c2:59:8e:00:54:e8:d3:3b:b9:c8:
                    49:0e:5d:8f:07:4f:00:ff:38:f7:19:b6:7f:a8:51:
                    e1:4f:b1:75:7d:e2:00:8f:2d:66:bf:c9:b6:2f:65:
                    8f:7b:a7:01:f9:d7:fe:f1:03:d5:e0:f4:5e:e5:3e:
                    75:02:35:50:e9:81:34:69:be:0e:51:eb:64:89:8b:
                    bd:66:9e:02:0a:a5:fd:79:6b:cc:45:26:f4:8a:a7:
                    3e:a9:04:d1:1a:30:f1:16:03:3f:2f:68:eb:79:fc:
                    97:d3:83:84:67:cd:88:b7:c1:e5:a1:f5:48:78:2a:
                    36:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:5F:56:29:AA:BE:0B:88:57:B1:9F:EB:E6:61:69:0C:50:5F:D7:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/eb314902-c439-3a6d-b09b-293e9d9bacc7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:68:01:f0:18:b7:7a:10:29:e6:f6:56:c9:2d:78:db:5e:13:
         08:68:5b:f6:0a:35:ed:7f:67:71:db:86:f1:f3:12:11:4b:97:
         7b:8f:02:0e:d4:6b:32:a2:7c:f6:eb:c4:1c:73:3f:4a:35:c8:
         ed:c7:18:dd:1a:9a:b1:bf:4f:45:fd:53:65:5b:98:20:ac:81:
         41:5d:d4:ff:60:fc:7d:ac:a2:13:ee:a2:c3:af:74:f4:ec:f8:
         a9:08:e8:62:24:da:1b:a3:a5:d0:8c:57:5c:77:20:94:43:d5:
         6f:a9:7b:a5:cf:7a:0d:4f:88:75:6d:b0:6d:4f:cf:0c:a8:f0:
         05:f1:3d:42:e0:8b:ae:dd:3d:9c:68:66:3d:52:cc:88:ea:52:
         1b:f2:51:32:76:93:80:e3:48:ae:d6:86:05:1a:de:2c:9a:81:
         5b:db:79:f4:09:24:01:ab:c5:ea:43:92:a6:10:88:fe:be:46:
         b5:3d:da:40:b9:67:c1:00:83:31:25:27:24:f7:00:79:ff:2f:
         ac:d9:86:05:5d:ff:71:7c:14:f7:41:8f:08:b8:e9:98:09:79:
         4c:95:90:34:87:2c:90:5c:b3:f3:4c:3b:31:78:92:2a:52:6b:
         81:84:00:ce:2a:44:5c:f7:0f:30:64:b4:60:b8:7d:f0:26:f8:
         76:25:7b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:44:44 2025 by rpki-client