Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/44de805d-b8a8-38b5-8bac-cf6e3de61920.roa
File:                     44de805d-b8a8-38b5-8bac-cf6e3de61920.roa (raw, json)
Hash identifier:          yCAP16VptfeoCsa4gDKUPKupfiGLYqHT0hOduvIuzOo=
Subject key identifier:   43:9A:7E:87:7F:F0:DB:D5:B0:8F:F1:70:8B:82:A3:D2:59:D0:83:BA
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A963634D1C2A35B2F66A77C00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/44de805d-b8a8-38b5-8bac-cf6e3de61920.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        68.0.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:34:d1:c2:a3:5b:2f:66:a7:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=45913de9-b713-4e6c-a8d0-f3521c79dbdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f6:a0:70:f1:dc:3c:64:e9:07:ae:a1:2e:c7:
                    80:c9:db:62:ae:d6:fb:ac:f0:9f:e9:57:44:20:8d:
                    5d:8b:f4:f1:12:19:08:ec:f6:60:40:a4:3b:c5:c7:
                    ae:35:8b:f0:68:30:d9:b4:58:4c:6d:cf:ea:cd:6f:
                    25:da:7c:5e:3a:27:87:a7:55:b7:b2:64:0e:4f:89:
                    79:d5:42:72:0f:5f:fa:9c:17:b0:90:1b:94:ae:db:
                    a4:55:30:06:c6:9c:47:36:1a:78:db:9a:8c:3d:bb:
                    60:7d:83:5b:74:58:21:dd:e9:51:82:e0:55:97:91:
                    39:47:40:dd:c3:9a:ab:f8:1b:a9:ca:98:3e:d1:e8:
                    dc:71:cf:ef:1e:4a:e7:4d:59:34:66:28:6b:28:4e:
                    89:7d:46:1a:cd:10:29:c0:de:40:55:67:da:48:1f:
                    53:5f:78:36:60:e3:f4:03:df:b4:d5:9b:67:16:ce:
                    c4:f9:cb:9c:65:cc:ce:0f:2d:0c:eb:ca:f0:68:81:
                    47:84:f0:ac:17:4b:86:b6:71:bd:38:3f:62:a4:06:
                    b1:62:88:06:6b:8e:85:60:48:45:b2:55:ba:dc:47:
                    ea:86:dc:02:4c:a4:b9:06:7d:ce:dd:b9:7f:8c:8b:
                    b6:d9:4a:18:f1:00:61:38:72:d5:f7:3c:39:48:9d:
                    6f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9A:7E:87:7F:F0:DB:D5:B0:8F:F1:70:8B:82:A3:D2:59:D0:83:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/44de805d-b8a8-38b5-8bac-cf6e3de61920.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.0.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:0c:1f:1c:a4:29:e0:cd:8f:d7:ed:a2:68:44:84:1e:41:d8:
         13:fc:d9:99:35:7d:25:b9:0d:1d:b3:d2:75:cb:ca:26:e5:c6:
         a2:b5:81:ca:49:58:6f:a1:bf:a7:07:9f:b4:33:7d:42:06:fc:
         cd:f6:b9:76:78:a2:bd:a5:61:23:44:a0:9f:b6:dc:8f:42:fa:
         ed:78:26:8d:a4:4d:d7:3d:60:6a:f3:b4:5a:48:35:e4:ad:78:
         c0:93:99:5d:02:cc:cb:f7:2d:af:49:ec:0b:7e:10:62:d4:03:
         38:a7:b2:af:5f:19:71:ef:49:7f:09:f3:75:bb:e6:c8:6d:88:
         a5:68:82:ce:f9:19:87:96:53:42:72:78:5c:67:7a:f6:1b:ff:
         6d:44:c8:77:09:20:36:f7:34:65:89:54:33:f7:c8:6c:01:29:
         6d:0c:45:39:28:01:23:b7:94:fb:86:c1:72:b9:5d:a7:dc:57:
         90:b7:6c:f0:b2:cc:a1:66:a1:fc:54:5b:4a:d0:3c:66:d8:fa:
         b1:c4:fa:6b:96:6f:11:8c:60:2e:7c:88:2e:18:1a:93:bb:90:
         b9:90:a5:00:dc:43:f1:d9:d0:88:de:68:1e:bf:f5:04:65:d5:
         30:1d:1f:ee:46:19:0b:d7:46:9a:a7:93:b8:bd:b6:6a:7b:24:
         80:e2:5e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:12:52 2025 by rpki-client