Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c80b7cc4-a4c6-3282-98b9-cb914a03778a.roa
File:                     c80b7cc4-a4c6-3282-98b9-cb914a03778a.roa (raw, json)
Hash identifier:          bt+b+0YpCdvyJQhq4UWkFMfpzfm+kp35Vqy63Lm/SnA=
Subject key identifier:   0C:00:C5:A8:8A:A1:B7:6F:21:BD:1F:F1:77:35:DA:86:5E:52:C8:77
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F4328584B4081B03E52B4C153488D5680
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c80b7cc4-a4c6-3282-98b9-cb914a03778a.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     30058
IP address blocks:        198.16.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:b0:3e:52:b4:c1:53:48:8d:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=cd0bccf1-b7f7-4690-adf6-cb53e05ffc0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:51:a7:aa:1e:61:78:3d:40:16:ab:8c:58:
                    b4:f5:73:c7:da:59:95:9c:48:15:e0:45:9c:b1:9f:
                    9f:3e:a9:7e:a8:e9:85:b9:a8:97:fc:23:5f:48:7c:
                    e3:8f:bb:ae:ab:7a:75:27:e7:db:9b:19:99:83:e3:
                    e6:e9:bb:d2:eb:a7:50:c2:8e:9f:3c:f0:3c:53:5b:
                    83:28:ce:09:83:2f:31:6f:25:42:e3:74:b5:b4:3c:
                    b6:b2:97:93:13:98:59:da:5d:ec:20:6b:55:2d:3e:
                    70:e2:b6:12:ec:ba:96:73:e1:66:07:2d:51:e4:79:
                    84:a3:b9:0a:ff:17:61:37:75:48:43:44:99:ac:3b:
                    a5:60:f5:0a:22:11:25:41:03:08:98:c5:10:d6:b2:
                    9f:c8:1c:14:6b:06:2c:a3:58:e6:ea:c4:7c:85:38:
                    a0:c6:41:dc:d0:cc:48:6e:15:28:45:1d:33:84:ad:
                    d5:21:bb:55:71:7b:d7:68:96:87:2a:bb:42:ba:25:
                    3e:11:41:65:87:81:64:aa:06:0f:df:94:77:d4:03:
                    bc:35:e8:a2:85:af:b6:8d:9e:c6:05:d0:36:4b:9f:
                    3a:6d:79:26:d5:ce:11:7e:24:b5:75:b4:57:c0:05:
                    2c:89:4e:37:06:91:3b:65:81:29:c1:1c:23:63:1d:
                    c5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:00:C5:A8:8A:A1:B7:6F:21:BD:1F:F1:77:35:DA:86:5E:52:C8:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c80b7cc4-a4c6-3282-98b9-cb914a03778a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.16.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:c0:87:b2:fb:a0:91:b3:d1:07:14:e3:32:04:35:88:3a:4f:
         5f:f9:54:ae:a3:a3:7a:2b:6d:af:bd:59:95:18:59:71:7a:de:
         a0:01:c5:cb:ff:69:ba:92:08:f4:75:1a:70:dc:f0:98:96:ef:
         1d:95:9e:da:7c:52:82:11:bc:7b:74:bb:64:6d:1a:2e:31:8b:
         fe:ac:13:e7:75:88:6c:66:1e:d2:b4:a3:14:c6:b3:bd:98:41:
         01:95:60:0f:1c:a5:45:4e:a3:d3:d5:09:b6:dd:f5:e2:60:fe:
         6e:e8:99:4f:a8:86:c9:dd:12:6f:ef:ad:ff:77:3f:ff:e9:6e:
         54:a4:a9:28:a3:7e:e3:c4:f3:66:b8:15:98:b5:56:e3:4c:03:
         41:ec:51:a0:e1:ef:89:b5:e8:a4:9f:94:cf:c5:f9:10:28:3d:
         9a:45:f4:f5:da:3f:3e:d2:e5:b9:d1:f0:68:84:b2:71:a6:38:
         d3:cb:87:1e:3f:f8:90:24:4d:54:77:77:5c:6c:e4:34:1b:2f:
         bb:18:48:f3:58:8e:c2:9b:38:3a:35:68:9b:02:ba:84:13:f0:
         dd:8a:16:b1:1a:03:e1:26:c7:bb:3a:6c:a7:c3:5a:c9:0a:60:
         98:0c:b5:1d:81:50:b0:d0:e5:aa:d4:53:a9:81:a4:e8:2a:a2:
         94:37:6b:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:44:02 2025 by rpki-client