Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8816edf8-e8fa-31f8-a1ea-108aab5aff28.roa
File:                     8816edf8-e8fa-31f8-a1ea-108aab5aff28.roa (raw, json)
Hash identifier:          SlOQ9JWPUvwOf3DtDRg52pw+QJmb34KVpo4lG9yvnjY=
Subject key identifier:   04:1A:E3:89:0A:4F:59:B1:01:71:CB:34:9B:A7:9A:B9:78:76:70:20
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A9636180527894097EF269380
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8816edf8-e8fa-31f8-a1ea-108aab5aff28.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        68.14.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:18:05:27:89:40:97:ef:26:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=710f061f-f191-4ac0-b9fe-4ef0c8d91043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:44:dd:49:12:a9:6f:87:b4:f7:a5:77:22:90:
                    08:2b:87:87:59:39:00:9d:13:95:11:af:85:b5:3e:
                    2f:62:a7:db:f0:82:ec:91:e6:b5:df:dd:13:22:d0:
                    5b:c2:bc:e9:59:9c:fc:26:92:38:7e:ce:e9:84:c8:
                    1d:c2:fe:83:f9:37:3d:5d:b8:24:b0:00:94:fa:25:
                    25:62:6f:0b:06:2d:05:92:8d:a7:c1:bc:3d:c6:84:
                    5e:fb:a8:53:44:4a:23:24:0a:4f:64:d6:f3:b3:99:
                    f7:61:28:a5:ab:0b:01:42:6d:1a:64:ae:95:93:d2:
                    b4:95:99:ce:3b:7d:8b:b9:36:89:1c:88:ea:58:e1:
                    3a:6a:6f:6b:78:d9:29:a2:87:3a:a7:30:7d:30:51:
                    f9:d8:36:00:94:16:e8:f8:75:1d:fe:66:08:54:7c:
                    f4:10:b2:2f:71:d6:e2:45:97:0f:40:8b:7c:e6:6f:
                    91:88:34:9b:f9:62:ff:c1:8c:e1:8e:f6:f7:db:d6:
                    c6:c0:89:39:95:8e:3b:02:5a:48:2c:37:96:f9:65:
                    84:06:e6:cf:20:de:ed:4e:fb:a8:f3:59:ea:6d:87:
                    20:ec:38:a4:ff:58:cb:b1:62:91:cd:b7:7d:c8:f5:
                    75:82:fd:d7:1c:27:ae:2e:c3:07:69:47:55:5d:31:
                    e4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1A:E3:89:0A:4F:59:B1:01:71:CB:34:9B:A7:9A:B9:78:76:70:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8816edf8-e8fa-31f8-a1ea-108aab5aff28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.14.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:54:3d:bf:17:1e:47:7c:b9:18:a6:df:d7:1f:c6:10:57:0f:
         20:27:6e:7b:8d:b9:b0:51:e4:ed:f7:7c:d7:fe:59:fa:49:a0:
         47:bf:c3:6a:58:8c:f4:14:86:63:d8:8e:88:bb:30:3f:eb:8c:
         62:bb:b0:22:23:c4:9b:14:31:eb:10:29:90:20:96:fb:4c:77:
         97:90:7a:5e:89:f4:ea:ff:2a:c9:87:4e:ea:dc:2a:ee:a3:7c:
         d7:0d:01:88:70:6d:ec:f4:d8:c7:0d:cb:92:37:11:9c:df:1d:
         05:83:c8:dd:5d:fa:a3:4d:56:4f:4a:51:60:d1:19:0a:13:55:
         f5:18:c1:22:2a:bb:1d:c2:ba:40:71:c4:44:19:65:4c:5f:64:
         1d:5d:a2:fe:a0:0d:f0:3c:60:21:aa:76:fd:6b:59:f4:84:20:
         7b:98:1c:d2:94:b2:45:58:5f:ed:2f:6d:15:d5:f0:2c:bf:64:
         05:ca:cb:9f:21:af:c2:7a:50:aa:8f:e5:2f:68:3c:0a:58:98:
         93:e8:67:99:81:40:5a:e4:34:dc:79:f8:10:37:45:36:48:bc:
         05:92:d7:b0:e7:44:4b:4c:6a:37:bb:55:2c:8d:02:59:ce:46:
         5d:0f:87:d5:be:85:b0:3b:ce:d3:eb:5d:81:d1:98:1d:2f:cd:
         1e:88:fc:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:31:52 2025 by rpki-client