Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/92aec4ad-6595-3fa0-89ed-7d37bc7ce6c8.roa
File:                     92aec4ad-6595-3fa0-89ed-7d37bc7ce6c8.roa (raw, json)
Hash identifier:          xAr/YNNB0bI9iDxhYsDX8kRD9gxVr5agpfXXUji27Q8=
Subject key identifier:   34:1D:F1:3C:C0:A5:E0:19:53:F7:DA:75:3F:E0:E2:A2:05:E4:66:B4
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A9636208D4A174F1185B32580
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/92aec4ad-6595-3fa0-89ed-7d37bc7ce6c8.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        68.229.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:20:8d:4a:17:4f:11:85:b3:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=97c16cc3-9765-463c-a287-1751b3194b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:2f:9c:73:8e:ff:3e:35:fd:ff:3d:48:c0:71:
                    eb:31:ae:cf:37:69:ae:27:1e:0b:d5:b1:07:08:34:
                    75:3a:4e:5c:8f:fc:eb:95:a8:22:74:15:30:d5:e7:
                    d1:ba:5e:d5:91:a5:83:55:0c:75:8c:a3:ac:e5:f4:
                    f8:65:9d:39:96:62:18:1a:20:ed:4d:73:2a:1e:b2:
                    33:e7:f5:de:3b:fa:7d:16:83:87:8c:1b:79:4a:86:
                    c2:31:89:d2:23:fe:03:97:ce:2f:4c:60:84:9d:19:
                    42:91:92:ed:b1:13:28:de:e6:de:b2:f7:72:58:b0:
                    25:34:4b:f9:4b:74:02:5b:fd:52:65:b4:4f:01:33:
                    cd:6a:c2:ce:17:99:60:00:db:72:cc:3e:ca:2e:58:
                    9a:62:fd:05:73:20:38:55:b3:4a:a6:0b:15:fa:a5:
                    b4:73:f1:08:95:a9:90:9e:04:2d:c4:5c:4f:13:63:
                    96:1c:86:11:ad:6f:94:7d:ed:71:8b:94:fc:d3:ee:
                    2c:f5:28:2c:02:96:09:59:52:9c:0b:50:61:6b:79:
                    11:d2:b8:60:3a:e9:c1:14:45:b2:a6:85:f6:e6:4a:
                    66:9b:aa:58:ca:e8:77:dc:96:5e:0d:90:da:fd:34:
                    9c:ff:84:0c:29:b1:24:e7:93:1f:6a:ee:03:ed:eb:
                    3a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:1D:F1:3C:C0:A5:E0:19:53:F7:DA:75:3F:E0:E2:A2:05:E4:66:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/92aec4ad-6595-3fa0-89ed-7d37bc7ce6c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.229.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:92:09:cb:94:8d:00:c2:1d:85:fc:35:ca:e4:3f:4a:e9:11:
         f3:59:04:73:73:ec:bd:b6:c1:96:0d:7a:9b:39:8b:4f:d6:91:
         d4:95:e1:82:32:fe:67:c0:05:5d:c8:36:1d:d5:77:c7:ef:7f:
         17:d4:71:f4:88:d5:19:e8:e0:f4:12:98:62:bf:78:eb:db:c3:
         9b:79:20:bc:4c:2e:7f:d7:ac:86:64:c3:c4:62:3a:e7:d7:84:
         39:f5:10:a1:98:b5:ea:ed:f2:11:21:88:43:22:00:23:6f:3e:
         fd:2f:1f:c6:46:0a:bb:5d:64:87:4e:56:cf:00:e5:88:31:b0:
         f4:88:56:15:a4:94:11:0f:57:7c:87:c2:99:64:3b:f5:ed:74:
         7f:18:2a:de:dd:80:9b:5b:f1:f2:43:a7:1e:30:42:e5:3c:5a:
         e3:c0:ac:f6:05:bd:05:49:af:84:12:74:0a:b4:4d:ac:a0:fe:
         39:76:d1:16:f2:52:0d:37:be:37:72:85:29:4f:3c:69:96:32:
         3c:28:57:d7:49:d6:a1:21:20:34:49:5f:1b:98:32:30:47:3a:
         47:13:15:4d:5c:68:a1:08:42:a9:31:21:d8:b3:35:1f:69:45:
         13:f5:9d:c2:13:88:65:8b:3e:9b:ff:72:b0:f7:48:e9:5f:af:
         c9:68:a3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 02:59:41 2025 by rpki-client