Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52cf680b-a685-339d-885a-2c3ef924b9ff.roa
File:                     52cf680b-a685-339d-885a-2c3ef924b9ff.roa (raw, json)
Hash identifier:          XvIz+skMQW+dO0To7kf6ThvHGyxKW7QUjRKOAufMB40=
Subject key identifier:   C6:A3:FF:E6:5F:8D:65:D1:01:F2:B6:A5:5F:D2:CD:AB:12:09:C1:C6
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A96360DD1D952F93D29DB12C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52cf680b-a685-339d-885a-2c3ef924b9ff.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        68.1.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:0d:d1:d9:52:f9:3d:29:db:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=0dbac099-1cc8-41c4-a89f-083e8594ee90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8c:21:1e:cd:fc:d1:d7:05:01:dc:6b:81:48:
                    57:d1:16:a0:f9:ac:64:3f:a3:64:75:70:02:e8:8d:
                    86:76:89:fc:bb:eb:e4:8f:29:67:70:57:07:71:9f:
                    37:c8:5d:fd:ba:b6:d1:78:54:e8:5c:e9:46:a5:7f:
                    fe:d7:40:98:d3:4c:a4:76:19:a7:fb:df:ab:e9:33:
                    3a:aa:27:ea:b7:d6:b7:45:03:2f:eb:d2:25:a8:a9:
                    dd:31:9a:b4:61:55:e6:c2:eb:63:c3:76:1f:48:ce:
                    be:27:94:34:e5:2d:5c:2d:74:4c:a4:02:8b:32:94:
                    c1:d1:53:08:c8:4b:dc:b2:00:21:40:a8:de:5b:f6:
                    14:2b:e1:db:fc:60:55:a6:e5:9c:dd:15:d4:c2:b6:
                    d6:3a:d9:15:36:b8:f7:17:d7:2f:aa:3a:d7:f3:f5:
                    73:58:0d:a4:13:c1:a9:78:8a:8a:b9:97:be:3f:6f:
                    f4:75:68:4f:e7:9e:8e:d2:db:e9:93:7f:b4:2b:af:
                    6b:f9:58:80:90:d5:5b:5a:b4:e4:4a:f7:c7:ee:9e:
                    43:ff:cd:95:72:eb:5f:e0:a4:72:8b:d8:97:48:ae:
                    7d:c7:c3:ac:96:5c:d0:c9:fd:42:a5:97:e8:8c:e0:
                    44:01:ec:bd:25:ff:98:5e:50:6d:62:00:3c:df:2b:
                    45:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:A3:FF:E6:5F:8D:65:D1:01:F2:B6:A5:5F:D2:CD:AB:12:09:C1:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/52cf680b-a685-339d-885a-2c3ef924b9ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.1.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:47:cd:38:35:5c:7d:9a:11:bf:6f:99:fc:8a:6d:4c:23:0f:
         3f:64:e8:cd:41:27:a3:bd:df:61:9e:98:ed:95:a0:a0:b9:8e:
         6e:d5:91:97:f9:05:03:42:98:3a:8e:6e:3b:fc:d0:15:74:c7:
         39:9c:ea:c8:36:87:84:f5:49:eb:dd:34:2f:23:b0:b5:d1:19:
         5d:57:b8:fb:d5:d9:55:79:e8:0f:c1:43:3f:23:36:72:f3:98:
         f6:5a:8d:f0:3a:3c:57:48:96:06:a3:53:1b:80:2e:0d:08:26:
         29:d5:e0:5d:51:8f:46:ba:1e:f1:5e:46:02:00:fe:68:15:5b:
         11:7a:73:bc:9a:0d:24:c1:ac:82:24:82:fa:66:bb:dc:a0:6a:
         c8:2e:fe:5b:12:c5:33:39:98:72:fe:89:89:77:f7:88:91:7f:
         dc:9c:be:ba:d6:d8:00:4b:42:9a:7e:3b:3f:7b:cc:d6:fd:2d:
         35:c3:c9:4a:e0:50:45:4e:11:93:0f:2c:92:c0:ec:69:d7:57:
         cd:7b:ac:1c:20:5b:7a:77:35:f0:e3:d4:23:2a:cd:ca:0f:ec:
         4a:13:e4:09:a1:cd:d4:3a:f8:2d:9d:a6:c3:9b:c4:19:85:e4:
         fd:2e:25:de:bb:bf:e4:45:75:f2:c3:8b:b5:ae:10:ec:e0:5d:
         ec:6f:9e:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:04:59 2025 by rpki-client