Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/68a189f6-d878-3750-bf65-8c6843f738fe.roa
File:                     68a189f6-d878-3750-bf65-8c6843f738fe.roa (raw, json)
Hash identifier:          TH20GXNWivIepLD///qt4+60D//8FL6ZgqtUgedDqDc=
Subject key identifier:   2C:30:66:FD:2C:6C:79:68:88:52:BD:ED:22:79:0C:6F:84:0E:91:ED
Certificate issuer:       /CN=dd758471-203f-4eb9-b2e3-2061f2a9397b
Certificate serial:       010D0C9F4328584B8EAD0B9242832E78CD5D7600
Authority key identifier: 4E:54:E4:17:CE:24:A0:CF:49:4A:32:72:1B:9C:86:4B:8B:20:7E:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/68a189f6-d878-3750-bf65-8c6843f738fe.roa
Signing time:             Sat 18 Oct 2025 01:00:30 +0000
ROA not before:           Sat 18 Oct 2025 01:00:30 +0000
ROA not after:            Fri 16 Jan 2026 02:00:30 +0000
asID:                     399937
IP address blocks:        158.222.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/dd758471-203f-4eb9-b2e3-2061f2a9397b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/dd758471-203f-4eb9-b2e3-2061f2a9397b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:8e:ad:0b:92:42:83:2e:78:cd:5d:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd758471-203f-4eb9-b2e3-2061f2a9397b
        Validity
            Not Before: Oct 18 01:00:30 2025 GMT
            Not After : Jan 16 02:00:30 2026 GMT
        Subject: CN=ec885fef-5fc5-4275-a899-fbeeaf5068fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d3:c1:9a:96:72:64:3f:e7:a7:a3:56:25:30:
                    5e:56:bb:e7:bf:b6:fc:36:1a:be:4c:11:ec:b1:94:
                    9a:e7:b9:20:fb:62:72:c2:35:8a:b7:24:9a:46:e5:
                    0f:62:69:b1:1f:95:04:a4:17:c9:35:37:be:3e:a3:
                    6b:31:20:b4:58:c9:33:0d:06:9c:b7:4f:99:99:9c:
                    49:69:1b:ac:42:75:7c:6e:b4:67:f8:ae:6c:ea:fa:
                    f9:3d:c0:a1:35:c3:87:10:fa:85:27:b6:14:1a:33:
                    ca:e5:29:6d:9e:6f:ad:ef:57:97:1f:2c:1d:63:a5:
                    df:d7:d1:f7:e8:68:1d:47:95:0d:26:b6:ed:ca:21:
                    9c:fc:c7:49:c9:84:89:9e:9c:a8:55:7a:2e:3e:c3:
                    eb:84:13:80:4c:59:df:50:87:7d:37:c5:75:31:0c:
                    1e:34:8f:4c:6a:ba:34:83:b8:d4:4e:f1:17:62:fc:
                    ed:06:ec:04:7d:97:16:b3:9f:92:08:3d:a0:e7:03:
                    40:be:55:94:9c:8e:89:96:77:2f:23:55:fc:7e:91:
                    39:51:8f:ea:1c:8e:ef:cd:7a:aa:9c:03:6a:3b:40:
                    38:2e:ad:8e:bd:d4:14:85:2d:7c:be:a3:94:2d:59:
                    c2:30:7f:16:3f:43:a0:06:5d:56:1a:d8:b6:9e:f7:
                    2b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:30:66:FD:2C:6C:79:68:88:52:BD:ED:22:79:0C:6F:84:0E:91:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/68a189f6-d878-3750-bf65-8c6843f738fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b/dd758471-203f-4eb9-b2e3-2061f2a9397b.crl

            X509v3 Authority Key Identifier:
                keyid:4E:54:E4:17:CE:24:A0:CF:49:4A:32:72:1B:9C:86:4B:8B:20:7E:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dd758471-203f-4eb9-b2e3-2061f2a9397b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.222.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:9d:e2:17:9d:5c:2e:d5:d8:03:dd:71:f1:bc:fe:0c:d6:5f:
         62:93:07:98:af:2d:07:57:10:74:cd:b1:89:83:5d:e4:0f:f8:
         98:cb:65:f1:1f:f8:09:a4:64:45:f5:d7:64:84:1b:bd:2c:70:
         9f:54:ae:4b:bc:45:dd:5d:32:e9:ad:47:58:97:d1:ed:5b:8a:
         ee:e1:3c:47:c6:9c:80:b6:e7:76:8d:bf:5c:1d:07:46:7a:da:
         fb:70:23:2b:1a:03:90:f2:8f:27:4e:65:4a:ba:0a:e7:1f:12:
         e3:f5:22:bd:51:de:f5:17:56:a1:c1:e5:0e:5c:c1:bc:48:5b:
         a3:72:7e:fb:e2:68:db:5c:87:4a:30:bc:0a:28:85:6b:45:48:
         5f:e0:75:13:fe:91:9f:a3:18:fd:3d:02:0f:4d:9b:ce:39:c4:
         86:e8:7b:b4:00:30:13:d9:9d:bf:72:8d:a0:f0:02:16:99:38:
         31:e0:e0:32:c2:d9:2d:ec:69:8f:19:e2:00:a5:86:51:fa:f8:
         a1:c3:7e:de:2f:56:e0:23:b2:2f:0e:a9:46:6b:a2:8a:53:4b:
         5a:06:ef:db:12:e7:ae:4b:3f:ce:4a:0e:5a:bb:84:87:6f:0a:
         fd:f3:0b:87:6e:cb:ce:cf:2a:a2:4c:4e:97:81:7e:d3:67:57:
         19:8c:14:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:05:06 2025 by rpki-client