Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/79ed54b9-bccf-311c-bc9d-b8366783fc4c.roa
File:                     79ed54b9-bccf-311c-bc9d-b8366783fc4c.roa (raw, json)
Hash identifier:          Vqw81rlHwykCLpc+2q+gwRWDcBaZintBuywTElblSEg=
Subject key identifier:   1E:9D:C4:DC:D7:3B:82:26:50:70:16:9D:23:21:1E:05:0C:A3:97:DC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A96365D952ECFAEEEA9E5FA40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/79ed54b9-bccf-311c-bc9d-b8366783fc4c.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        68.8.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:5d:95:2e:cf:ae:ee:a9:e5:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=b2d3e4c4-d52c-4010-a35b-7a10839834f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1f:78:1a:b2:5f:b9:e2:41:69:f2:b8:50:8a:
                    2d:e5:b8:d1:de:1e:bc:3f:9b:f4:6c:77:c3:2a:36:
                    d8:4a:0e:a3:9f:a8:f9:c0:5e:d4:50:b6:39:3f:36:
                    3a:1a:30:84:bd:a8:64:87:40:9b:2c:29:cf:15:23:
                    3c:5d:39:5d:7d:9d:21:16:54:d7:a3:6f:98:84:1a:
                    0a:22:fb:74:7a:30:d7:21:57:c6:82:3c:15:a0:8a:
                    92:37:2d:28:56:21:d7:e9:21:28:a9:eb:57:e2:eb:
                    ca:3c:73:ac:46:ab:df:83:bb:20:5e:d1:10:93:91:
                    37:bc:bd:89:8a:0d:b1:2a:dd:29:da:98:bf:01:03:
                    4e:af:91:8d:64:1f:94:bb:8d:c2:84:aa:c7:e5:ce:
                    b0:ff:68:b8:69:11:3b:6b:36:fe:6f:2e:84:be:9e:
                    f0:49:ce:63:79:e4:b2:c0:75:0a:56:8f:89:c7:5e:
                    17:2a:86:e4:8f:76:d7:23:31:c7:b1:83:0d:d1:3a:
                    6e:fc:5c:52:3a:1f:b5:e6:0c:7b:83:59:fb:19:63:
                    f2:ef:bb:99:03:60:e8:6c:cc:b0:4f:dd:74:1e:0c:
                    00:3b:6b:9e:4c:e9:b7:5b:12:e3:19:51:a5:d9:c2:
                    f1:1a:6e:eb:c1:0e:7d:3f:26:07:54:eb:df:5e:9e:
                    57:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:9D:C4:DC:D7:3B:82:26:50:70:16:9D:23:21:1E:05:0C:A3:97:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/79ed54b9-bccf-311c-bc9d-b8366783fc4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.8.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:b6:83:a6:be:92:a8:e0:a8:5c:44:dd:94:cf:17:32:4e:b9:
         8c:cf:27:d5:34:76:f9:47:a3:7c:9f:93:4a:4d:91:33:3d:de:
         bb:50:a6:19:54:2a:ef:e4:c1:28:19:12:81:df:c0:ba:b4:28:
         e4:87:f2:57:cc:8f:67:27:94:aa:a2:74:22:d9:a0:6d:8d:e2:
         9e:f6:dd:57:58:b4:74:7b:79:1e:fd:97:a1:c2:a5:bf:d0:55:
         ce:76:fc:19:7c:73:2e:a9:53:1a:da:ac:4a:70:60:81:d0:38:
         d9:f3:b7:8b:f6:2a:6c:24:38:2a:cb:b3:3f:0f:cc:f2:ac:1c:
         de:b9:5d:c8:8a:54:32:84:a1:67:05:e1:bd:c2:b1:01:61:7f:
         74:87:a1:cc:a6:6e:50:0a:ff:ee:2e:ad:82:8f:e7:08:1e:f7:
         e8:ef:e8:18:2f:ba:ff:48:8a:80:3c:e0:d2:80:a8:98:7f:b4:
         e4:b3:23:d9:3d:aa:b1:d9:eb:14:b1:57:92:c6:87:42:f7:05:
         bc:00:b6:ce:24:e6:80:68:d7:8e:07:0b:60:6b:1a:c9:67:86:
         80:ca:73:9b:1a:5d:ab:b6:2e:ba:a6:28:9a:9e:d5:57:67:99:
         7e:52:1c:73:d9:8c:8d:0c:a1:f2:1f:d6:7e:06:c8:d1:85:ba:
         d2:95:e4:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNl2VLs+u7qnl+kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk
YjJkM2U0YzQtZDUyYy00MDEwLWEzNWItN2ExMDgzOTgzNGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh94GrJfueJBafK4UIot5bjR3h68P5v0bHfD
KjbYSg6jn6j5wF7UULY5PzY6GjCEvahkh0CbLCnPFSM8XTldfZ0hFlTXo2+YhBoK
Ivt0ejDXIVfGgjwVoIqSNy0oViHX6SEoqetX4uvKPHOsRqvfg7sgXtEQk5E3vL2J
ig2xKt0p2pi/AQNOr5GNZB+Uu43ChKrH5c6w/2i4aRE7azb+by6Evp7wSc5jeeSy
wHUKVo+Jx14XKobkj3bXIzHHsYMN0Tpu/FxSOh+15gx7g1n7GWPy77uZA2DobMyw
T910HgwAO2ueTOm3WxLjGVGl2cLxGm7rwQ59PyYHVOvfXp5XdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB6dxNzXO4ImUHAWnSMhHgUMo5fcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNzllZDU0YjktYmNjZi0z
MTFjLWJjOWQtYjgzNjY3ODNmYzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAhuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJG2g6a+kqjgqFxE3ZTPFzJOuYzPJ9U0dvlHo3yfk0pNkTM93rtQphlU
Ku/kwSgZEoHfwLq0KOSH8lfMj2cnlKqidCLZoG2N4p723VdYtHR7eR79l6HCpb/Q
Vc52/Bl8cy6pUxrarEpwYIHQONnzt4v2KmwkOCrLsz8PzPKsHN65XciKVDKEoWcF
4b3CsQFhf3SHocymblAK/+4urYKP5wge9+jv6Bgvuv9IioA84NKAqJh/tOSzI9k9
qrHZ6xSxV5LGh0L3BbwAts4k5oBo144HC2BrGslnhoDKc5saXau2LrqmKJqe1Vdn
mX5SHHPZjI0MofIf1n4GyNGFutKV5P4=
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:05:32 2025 by rpki-client