Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1431a1d7-012b-3584-837e-5bdbc50b6e1d.roa
File:                     1431a1d7-012b-3584-837e-5bdbc50b6e1d.roa (raw, json)
Hash identifier:          UtEJaYfPZyMpo0xaOvwrZc0zXqAm6v7mTVf0E+uv9o8=
Subject key identifier:   EB:31:F2:24:2E:3E:B5:0F:AC:D5:4F:2D:00:72:84:E2:69:81:16:1C
Certificate issuer:       /CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
Certificate serial:       010D0C9F4328584B5B0764192A8D8E45D9A65700
Authority key identifier: 0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1431a1d7-012b-3584-837e-5bdbc50b6e1d.roa
Signing time:             Mon 29 Sep 2025 13:00:41 +0000
ROA not before:           Mon 29 Sep 2025 13:00:41 +0000
ROA not after:            Sun 28 Dec 2025 14:00:41 +0000
asID:                     16417
IP address blocks:        68.232.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:5b:07:64:19:2a:8d:8e:45:d9:a6:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f589d08-3d68-400f-a862-4c24e0bff4c9
        Validity
            Not Before: Sep 29 13:00:41 2025 GMT
            Not After : Dec 28 14:00:41 2025 GMT
        Subject: CN=63c107e4-0247-4fe3-a999-e2a43f58aaf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c7:06:03:1f:a6:9e:e9:e1:ce:a6:9f:a1:20:
                    fe:91:f2:de:f2:8c:cc:1f:96:da:4d:1e:e3:0f:b9:
                    ba:2c:9b:02:c2:0e:72:3a:59:25:d3:7c:94:65:af:
                    16:ce:d7:5b:6b:df:05:0e:c6:51:07:49:ff:42:1d:
                    da:a9:f7:0c:90:0a:1b:8c:0e:dc:83:a2:35:21:8a:
                    62:4d:a7:cf:9c:5d:23:6d:54:a1:6f:88:1f:4b:4c:
                    47:ef:b7:86:40:4c:ed:30:72:d2:2a:99:62:01:d5:
                    5f:b0:09:ca:6b:b7:bf:19:85:85:b8:c4:26:fd:65:
                    96:4c:e1:61:2f:a3:15:4f:dc:55:7c:dc:fc:5c:16:
                    b1:a5:0a:6a:c1:92:3a:56:f9:0c:1b:5c:a3:0a:df:
                    47:cd:0d:90:5b:be:b7:70:e7:b5:c7:5c:c2:b9:ee:
                    7d:f1:dc:2c:a0:e4:7e:9d:2c:e9:a9:b2:e1:13:73:
                    fc:cb:f6:d7:b3:38:e3:47:01:d3:82:3b:01:ba:ef:
                    bf:c3:9e:67:09:18:81:f1:62:14:bf:c6:77:aa:ca:
                    e8:c6:e8:79:51:b3:05:e3:a0:25:f0:83:7f:2f:cd:
                    57:00:e5:44:7b:9b:80:d1:d6:a1:de:52:71:a5:03:
                    3c:f2:a5:d6:be:53:f2:62:b7:0f:5f:cf:1d:64:6f:
                    29:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:31:F2:24:2E:3E:B5:0F:AC:D5:4F:2D:00:72:84:E2:69:81:16:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/1431a1d7-012b-3584-837e-5bdbc50b6e1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9/8f589d08-3d68-400f-a862-4c24e0bff4c9.crl

            X509v3 Authority Key Identifier:
                keyid:0B:37:20:4D:F7:4E:0B:EC:BC:17:81:D0:5E:FD:26:AF:15:A4:CB:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8f589d08-3d68-400f-a862-4c24e0bff4c9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.232.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:b7:a4:52:b9:21:12:21:f4:91:b5:fc:fe:8d:6d:fa:fd:2b:
         6c:db:84:c9:1c:52:89:01:50:c1:df:f2:63:a5:ab:91:21:49:
         1b:18:ec:e5:80:11:96:b2:64:05:bc:d3:70:66:aa:83:48:f7:
         ba:d1:51:1e:83:a6:6f:73:4a:f2:16:e1:c0:7b:9f:ba:00:1e:
         a0:6f:e5:40:6b:c5:b8:b1:8f:ff:a1:4e:b6:78:81:91:6d:ff:
         19:55:02:70:0a:88:5f:f7:6a:53:24:87:86:16:a1:c0:86:ed:
         c3:8e:ae:d1:6b:60:2a:2c:60:10:42:48:d4:ee:52:f3:65:eb:
         d8:5f:33:e5:a1:cc:42:29:30:b4:ec:97:14:f4:71:1d:8e:b6:
         04:0a:51:da:66:96:fc:2e:b8:af:98:a3:27:c9:39:2b:ca:2c:
         f1:db:f5:26:1b:a4:6b:d7:41:40:10:5b:79:2f:09:98:ac:ce:
         9c:3c:91:d1:ee:73:e2:be:1a:9f:79:c0:fe:81:89:4a:f2:ff:
         f0:76:5b:a1:9b:88:a1:54:c7:79:3d:dc:ad:48:76:b5:61:7f:
         b7:55:a3:a4:77:6b:81:e8:8c:71:03:2a:f3:93:f7:12:45:3f:
         b0:e9:5f:d3:2b:f5:69:d9:31:49:d9:39:d6:41:fc:96:c2:a6:
         06:89:89:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:55:41 2025 by rpki-client