Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37c08a78-33ec-3607-85e2-8d381ce1069d.roa
File:                     37c08a78-33ec-3607-85e2-8d381ce1069d.roa (raw, json)
Hash identifier:          /Ftw5fWLzuhKvEGeb5m0EUlWy+t8nMYQrRGjzydwv5k=
Subject key identifier:   A9:77:89:BF:2F:12:BB:6B:3B:54:BF:74:8E:B3:15:44:AC:0C:85:1F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5FD3CE821CF3FBA9AEECB00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37c08a78-33ec-3607-85e2-8d381ce1069d.roa
Signing time:             Thu 01 May 2025 17:25:23 +0000
ROA not before:           Thu 01 May 2025 17:25:23 +0000
ROA not after:            Wed 30 Jul 2025 17:25:23 +0000
asID:                     22773
IP address blocks:        68.111.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:fd:3c:e8:21:cf:3f:ba:9a:ee:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:25:23 2025 GMT
            Not After : Jul 30 17:25:23 2025 GMT
        Subject: CN=180ff562-21f5-4a22-968a-7267067079f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2f:6f:75:82:c7:a7:46:a9:65:b8:5b:b2:d4:
                    20:d7:7d:88:db:cd:3a:a9:5a:9e:3f:c0:c5:36:61:
                    8d:4d:68:7b:42:e7:9f:4a:2f:41:eb:be:3b:b3:db:
                    fe:18:23:c2:24:aa:80:ee:69:8b:0d:97:6d:8c:99:
                    b7:4e:91:58:e1:6e:c5:78:60:f7:f8:38:24:64:b4:
                    92:56:fb:d0:c9:61:9c:13:bf:89:de:6d:5a:2a:b6:
                    12:69:73:d6:ae:9f:af:ad:e0:cb:a5:24:bd:a8:82:
                    27:3a:57:87:8e:88:f5:2f:2b:f9:38:e1:5f:0c:a4:
                    35:60:31:09:90:ed:c4:f8:77:06:c4:18:b0:71:99:
                    a8:4d:fa:65:e1:3e:e2:45:52:6d:0e:21:67:a8:bf:
                    cf:c6:5b:59:8b:11:60:b2:4b:6c:c3:8c:94:46:49:
                    1e:03:14:5d:75:86:6f:c5:28:83:91:8e:f5:90:c5:
                    f5:5c:f8:d2:06:68:0f:72:42:1d:9a:9d:25:ba:8b:
                    b0:c6:b3:00:91:92:09:46:02:43:3b:8a:b5:d6:55:
                    78:c8:54:ae:4c:fc:f6:02:75:86:62:47:54:14:3c:
                    53:18:88:b5:eb:c4:d2:8f:5f:9e:0f:3e:d1:8b:56:
                    c8:07:37:83:9b:86:27:2e:2f:0b:a0:70:36:8e:e8:
                    a4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:77:89:BF:2F:12:BB:6B:3B:54:BF:74:8E:B3:15:44:AC:0C:85:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37c08a78-33ec-3607-85e2-8d381ce1069d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.111.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:7a:90:24:9e:93:66:e5:df:cb:22:89:3f:1a:b1:fc:f8:6b:
         51:8e:5b:6f:e0:7e:aa:b9:db:8f:83:b5:d2:7f:90:b4:1c:00:
         8e:ea:65:8c:b8:94:91:7e:29:d6:a5:41:95:d4:42:39:8a:06:
         ef:6f:12:af:7e:fc:0c:f6:77:35:6b:35:94:eb:1f:be:92:69:
         f0:b8:1b:e2:2f:ff:89:65:aa:48:d0:c7:7b:99:da:f3:fb:fe:
         73:49:fc:69:f9:a0:26:a2:b1:df:9b:3c:9a:42:87:9c:41:61:
         c5:0d:43:97:10:aa:bf:28:8c:39:6b:48:b3:b9:ff:72:90:9b:
         ae:98:f4:b4:cc:56:f3:4a:1a:e8:78:ef:ae:67:70:dd:4c:9f:
         8d:4a:70:6f:ff:1b:e5:e0:05:61:90:95:6c:7e:fe:7f:08:18:
         fd:37:44:f8:86:bc:46:de:37:19:58:8a:f0:37:ad:ed:91:48:
         6e:89:90:bb:5f:6d:c9:37:ee:67:f7:74:08:19:1e:ad:a6:c4:
         f3:d2:63:a8:37:c9:39:6a:2b:82:87:0b:eb:bd:55:2e:05:e1:
         58:98:8f:a1:fc:7d:c7:95:20:73:24:05:c5:ec:e0:13:0d:be:
         8f:bb:32:27:fe:37:71:46:d4:e6:0e:19:73:46:ce:f1:2e:c3:
         07:30:de:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 18:50:47 2025 by rpki-client