Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b30dc30-6fed-3ebd-97ab-6a469d9123e5.roa
File:                     7b30dc30-6fed-3ebd-97ab-6a469d9123e5.roa (raw, json)
Hash identifier:          iUKfDKVa3QqRKyXMnZ2RFJnx5E2+vy4eNTvFaeVgSdI=
Subject key identifier:   4A:8B:93:13:91:C5:52:61:78:88:A2:51:1E:BF:69:30:3B:33:76:0D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A963655B974C1C8A4BC2DBC00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b30dc30-6fed-3ebd-97ab-6a469d9123e5.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        68.6.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:55:b9:74:c1:c8:a4:bc:2d:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=04414cd9-0852-470b-bad1-c3a376c0f314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:00:9a:8f:d6:d7:13:6b:ec:ff:2d:d2:ef:75:
                    0d:66:bd:ba:4c:40:37:6d:2a:29:e3:98:23:c7:2e:
                    50:06:10:4e:49:7e:a1:6e:fd:d2:f0:26:3c:69:ad:
                    03:7a:d6:94:c2:c5:b7:54:12:59:f1:85:b4:3a:64:
                    91:f1:18:24:77:04:3b:2f:55:70:73:48:01:1d:20:
                    54:0f:c5:74:0e:ba:db:64:7a:a5:60:5e:d3:4e:24:
                    d0:54:26:13:7c:88:76:05:fc:97:ea:5e:8e:ff:5b:
                    3d:6b:11:25:60:81:3e:23:c6:6e:7c:04:29:15:a5:
                    f6:12:34:f6:c8:7e:ec:b8:11:27:5e:c2:d8:57:bd:
                    c5:0e:56:5a:f0:36:00:02:51:59:e4:d4:89:ce:46:
                    92:2b:8d:a6:57:52:5e:df:3c:68:fa:36:32:fd:38:
                    bb:f4:8a:3d:f5:7e:d1:d2:2a:9b:61:b7:c6:39:cc:
                    5e:f7:f0:24:5e:83:4d:f3:5f:eb:5f:52:3b:84:0c:
                    2c:75:25:7e:83:a0:94:4e:c8:8e:da:b6:40:4c:c5:
                    1e:13:f7:7e:b3:da:cc:f2:03:84:2a:21:16:ec:d5:
                    9d:53:ea:d9:2b:6a:51:5d:a9:00:99:a6:9a:26:1a:
                    5a:ef:c6:b4:76:6e:d8:6b:99:1b:6e:15:18:b7:31:
                    e8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8B:93:13:91:C5:52:61:78:88:A2:51:1E:BF:69:30:3B:33:76:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7b30dc30-6fed-3ebd-97ab-6a469d9123e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.6.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:0e:9f:c8:fd:7d:19:0a:fd:ac:90:65:64:b5:7e:20:a2:d0:
         70:e7:00:67:71:2e:c5:6f:8e:fb:d5:e1:cf:c0:51:48:3d:ef:
         b7:7b:86:54:2b:bb:37:d9:c7:81:fe:4c:65:df:91:20:69:6a:
         77:cd:ac:00:e1:a5:1b:7e:a8:5a:98:e0:b4:ce:6a:0b:e1:81:
         97:0e:90:e5:80:8b:c2:a1:7f:c0:fb:06:9e:dd:a7:6b:8d:82:
         7a:d8:df:21:96:76:55:e8:d3:00:dd:c4:9b:dc:7f:0b:50:a2:
         b5:13:fb:ce:5f:f3:52:8e:0b:13:6c:ca:38:df:00:d0:ef:f6:
         83:2c:3e:93:30:d0:25:54:50:5d:ad:de:3c:9d:9a:4c:14:ce:
         a8:36:c1:a4:e8:ff:65:9f:87:dc:b1:bf:c9:a9:eb:43:13:ee:
         3e:78:11:87:1a:ba:86:41:38:21:34:64:81:21:2f:95:9c:ce:
         06:27:6e:83:d5:09:92:79:69:9c:98:f0:2b:7f:62:c9:a7:2d:
         d8:b5:d7:77:2c:84:4b:4c:1d:f3:bf:04:e8:8c:06:98:b7:cf:
         13:c6:b0:b4:e9:45:69:69:10:58:20:22:2c:20:cd:75:69:d0:
         d5:f8:49:90:70:38:6e:17:a8:f3:97:ce:1b:23:06:fc:ad:50:
         6d:d2:68:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNlW5dMHIpLwtvAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk
MDQ0MTRjZDktMDg1Mi00NzBiLWJhZDEtYzNhMzc2YzBmMzE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgCaj9bXE2vs/y3S73UNZr26TEA3bSop45gj
xy5QBhBOSX6hbv3S8CY8aa0DetaUwsW3VBJZ8YW0OmSR8RgkdwQ7L1Vwc0gBHSBU
D8V0DrrbZHqlYF7TTiTQVCYTfIh2BfyX6l6O/1s9axElYIE+I8ZufAQpFaX2EjT2
yH7suBEnXsLYV73FDlZa8DYAAlFZ5NSJzkaSK42mV1Je3zxo+jYy/Ti79Io99X7R
0iqbYbfGOcxe9/AkXoNN81/rX1I7hAwsdSV+g6CUTsiO2rZATMUeE/d+s9rM8gOE
KiEW7NWdU+rZK2pRXakAmaaaJhpa78a0dm7Ya5kbbhUYtzHoxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEqLkxORxVJheIiiUR6/aTA7M3YNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2IzMGRjMzAtNmZlZC0z
ZWJkLTk3YWItNmE0NjlkOTEyM2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAbKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKwOn8j9fRkK/ayQZWS1fiCi0HDnAGdxLsVvjvvV4c/AUUg977d7hlQr
uzfZx4H+TGXfkSBpanfNrADhpRt+qFqY4LTOagvhgZcOkOWAi8Khf8D7Bp7dp2uN
gnrY3yGWdlXo0wDdxJvcfwtQorUT+85f81KOCxNsyjjfANDv9oMsPpMw0CVUUF2t
3jydmkwUzqg2waTo/2Wfh9yxv8mp60MT7j54EYcauoZBOCE0ZIEhL5WczgYnboPV
CZJ5aZyY8Ct/YsmnLdi113cshEtMHfO/BOiMBpi3zxPGsLTpRWlpEFggIiwgzXVp
0NX4SZBwOG4XqPOXzhsjBvytUG3SaLg=
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:50:03 2025 by rpki-client