Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a10b291-b16d-3725-931a-b5c526e9bdb6.roa
File:                     1a10b291-b16d-3725-931a-b5c526e9bdb6.roa (raw, json)
Hash identifier:          pgiUqfTsQz29E4GoNej02Nxq5ojyJnmFm0mC/GsRynk=
Subject key identifier:   C4:1D:AC:71:B3:CE:12:F1:41:41:D3:FC:33:D0:05:ED:E4:DA:F4:2E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A07D53C1D3C299B31DF381640
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a10b291-b16d-3725-931a-b5c526e9bdb6.roa
Signing time:             Sat 31 May 2025 01:00:50 +0000
ROA not before:           Sat 31 May 2025 01:00:50 +0000
ROA not after:            Fri 29 Aug 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        68.227.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:d5:3c:1d:3c:29:9b:31:df:38:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May 31 01:00:50 2025 GMT
            Not After : Aug 29 01:00:50 2025 GMT
        Subject: CN=43a348fa-604d-4765-adfa-8e6155575620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:eb:1f:36:a5:58:fa:9c:9d:32:25:2f:1d:dc:
                    90:e0:02:35:88:c7:4a:31:06:e4:08:12:b8:a7:74:
                    32:aa:c8:71:d7:b2:26:f5:6a:ad:c6:f5:2b:f4:bc:
                    a8:69:da:9d:61:c9:bd:00:d1:49:be:fc:ef:4d:05:
                    96:bb:17:84:29:eb:1f:35:25:db:07:4e:0a:83:e0:
                    67:02:5a:15:db:6c:22:6e:fd:5a:bf:2a:6a:ec:96:
                    30:37:c3:1c:80:cb:56:3b:15:63:58:53:33:38:7d:
                    23:67:d5:99:97:71:bc:0c:0f:9e:d8:29:f2:76:f9:
                    50:13:cb:1a:25:92:96:85:1a:27:5e:f5:db:92:43:
                    d1:8d:c4:5d:b1:53:8d:29:f1:6c:91:d1:4b:b6:5e:
                    28:20:df:1e:a5:dc:d9:b4:69:43:39:26:7b:5c:0a:
                    e2:b2:1d:4d:72:25:4e:fb:fb:48:f3:d3:e1:22:0d:
                    f9:ab:95:a0:10:0d:2c:4b:bf:f5:48:75:57:b7:98:
                    da:8f:e7:b0:e6:79:24:f9:c1:33:3c:57:92:61:63:
                    b4:4c:1e:83:1b:d7:b6:09:9a:b1:49:bf:51:bd:ed:
                    f2:45:eb:f6:1c:f0:d2:a9:f9:27:51:5a:3e:9f:84:
                    35:99:ad:34:ab:e4:4f:86:92:29:3c:d6:72:be:f5:
                    f3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1D:AC:71:B3:CE:12:F1:41:41:D3:FC:33:D0:05:ED:E4:DA:F4:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1a10b291-b16d-3725-931a-b5c526e9bdb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.227.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:8b:b6:20:e6:7f:ea:a3:bc:d7:3d:17:b1:6f:72:8b:64:45:
         03:b7:5b:22:13:6a:e8:a1:e4:9e:6a:2b:95:49:d0:d7:be:ef:
         58:a6:3e:10:5a:79:69:38:37:e8:0d:8b:09:1a:56:6d:8c:d2:
         5a:30:cc:6e:1b:6b:43:c9:2f:ee:c0:0a:f9:00:d8:03:f1:d2:
         b5:46:38:87:1a:6f:72:7a:92:03:da:06:89:16:22:84:b0:4c:
         fc:1d:93:58:dd:b1:82:2a:c0:4d:9c:a2:55:7f:4d:80:c6:d1:
         aa:2c:2b:df:87:d9:85:75:b9:ff:a3:1b:e5:79:93:7b:55:d4:
         6a:c1:55:43:d9:2e:df:06:79:dc:cb:ff:c1:b2:e3:a6:fd:d5:
         7a:89:bd:f1:c6:2e:aa:23:fe:f3:30:a4:95:39:1b:75:1e:6b:
         ba:f6:98:fe:c9:85:a5:3d:b2:29:88:54:e0:1b:c3:5b:b9:7f:
         1d:11:d2:ee:87:5a:d6:1a:bf:ed:9f:1a:f5:9c:e3:4b:2e:4b:
         d4:1e:76:01:51:5d:9c:4e:b8:a7:42:64:b9:ec:f1:8a:99:9f:
         c0:66:37:e4:3d:ff:ea:41:49:5e:a9:f9:6a:b7:10:8c:f5:a6:
         b0:f4:95:0e:89:ee:c5:e2:b2:45:7c:d4:e2:93:54:66:30:fb:
         11:c5:f8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:56:28 2025 by rpki-client