Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bf133f5-415b-331f-b14d-a17d48799e2e.roa
File:                     1bf133f5-415b-331f-b14d-a17d48799e2e.roa (raw, json)
Hash identifier:          aOKEdFpsazmZp0tqgy7s0amrrfntTL/JieTnIEkp4R8=
Subject key identifier:   49:F1:5A:38:AA:5F:61:52:8C:1D:5A:25:26:3F:A6:F0:0C:10:C1:3C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A963615A1AED6B5E964BFBE80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bf133f5-415b-331f-b14d-a17d48799e2e.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        68.9.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:15:a1:ae:d6:b5:e9:64:bf:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=fdb7023f-b898-452b-8529-1eb9a30e4cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:47:ee:b0:d3:36:ba:44:cb:a5:ee:6b:97:22:
                    90:02:80:0e:32:31:a7:25:a7:2d:ff:e9:b2:0d:4e:
                    a3:89:ba:4f:e4:ef:8a:0b:dd:ed:e4:6c:84:be:a8:
                    ee:83:7b:e8:9a:13:93:42:97:f5:eb:10:a4:79:e9:
                    a9:10:a6:de:d6:34:81:a0:f8:23:e7:3b:65:e8:4e:
                    f5:ee:45:7a:cf:21:90:8e:ce:2c:22:19:47:7e:b1:
                    2e:98:68:83:6b:10:d4:e7:db:2f:32:ad:89:41:77:
                    0a:01:a8:1a:10:df:57:7b:39:04:8c:59:4d:b3:d8:
                    6c:52:a3:37:40:a4:56:c0:1b:45:50:0e:87:76:05:
                    54:d7:d8:06:83:86:c3:ec:7f:9e:2d:92:c6:d4:d8:
                    c7:2f:8a:f7:eb:01:59:51:97:8b:b2:88:c6:24:d9:
                    83:34:21:93:f1:43:1c:61:63:66:22:dc:34:03:3a:
                    61:2d:8b:23:19:68:f1:6e:ec:b6:88:8d:f4:5b:a0:
                    20:2b:95:3b:d6:ef:60:80:2f:b4:43:b0:b3:aa:86:
                    af:d3:e8:4f:66:9e:47:30:71:59:85:d0:66:0f:22:
                    79:3a:15:93:0f:80:67:6e:bd:13:15:2a:c1:cf:97:
                    6f:92:8d:f9:2a:23:fe:72:17:ab:1a:49:65:27:34:
                    20:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F1:5A:38:AA:5F:61:52:8C:1D:5A:25:26:3F:A6:F0:0C:10:C1:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bf133f5-415b-331f-b14d-a17d48799e2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.9.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:37:dd:64:28:99:13:01:ed:a4:31:d2:7a:a3:f6:52:83:40:
         12:00:f5:6b:b8:a3:cf:42:d6:cd:f0:3d:04:ed:2e:94:e4:1f:
         6d:e4:00:f6:ba:97:c8:e9:f5:0f:8a:0e:05:06:0b:47:12:9f:
         8a:8e:b9:fa:53:50:c1:94:dc:c2:23:32:b6:96:99:c2:99:d8:
         71:2b:35:0b:ca:39:fe:cd:59:2e:63:1c:9a:93:d7:a6:75:10:
         96:de:11:6b:35:bd:ce:53:19:4c:3a:ed:4b:16:0d:6b:e0:33:
         74:f6:0e:f2:65:8f:fd:f6:6f:3d:42:82:95:9d:c4:f9:f3:f2:
         eb:ed:fc:7c:3f:c4:1a:48:8f:6a:01:2b:1b:17:b8:30:08:0d:
         c8:78:17:4e:b4:c0:71:46:cb:2a:68:f6:10:f4:c9:de:a4:22:
         b4:68:5a:45:00:35:00:c5:e0:e9:51:37:62:a1:81:05:94:df:
         6f:5b:da:84:07:6b:0d:aa:20:3e:b8:ca:1c:60:51:7f:9c:2c:
         c2:8a:87:b3:71:0c:bd:d8:ce:94:0a:10:49:7e:fd:81:74:9a:
         a4:96:b3:dd:5b:e7:92:5a:3c:b5:96:a1:82:11:7c:be:d6:50:
         e2:ab:8c:be:31:e6:b3:90:d9:0e:20:af:94:54:aa:bc:0c:83:
         e8:1d:b1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:18 2025 by rpki-client