Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/982f9c0f-95e3-3d69-8ab5-e2b425ce5985.roa
File:                     982f9c0f-95e3-3d69-8ab5-e2b425ce5985.roa (raw, json)
Hash identifier:          JH5DXvVQAjRIYJvcVt6oZCrP376mknZ6uLENz/Ksk7s=
Subject key identifier:   DF:F0:10:C4:24:47:DB:77:B7:F5:6C:BB:B6:EB:FB:8C:CD:50:6C:C2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A9636176D61E5E8D81410C400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/982f9c0f-95e3-3d69-8ab5-e2b425ce5985.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        68.14.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:17:6d:61:e5:e8:d8:14:10:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=3af0dd8a-5bf0-4836-90b2-b5efcbdf5746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d4:d5:1e:bf:8e:63:85:58:16:f9:80:c2:bb:
                    71:f7:17:d8:28:8b:8d:72:b7:33:b8:d3:0c:34:8f:
                    c5:0b:a6:8f:10:90:68:76:01:20:ad:34:b0:74:f3:
                    d9:97:92:35:06:5b:f3:8a:4e:c5:34:28:dd:14:c9:
                    1c:56:34:95:c8:88:18:5c:50:99:5e:20:8e:0f:37:
                    37:19:ae:f0:dd:ba:03:ee:25:43:a6:b3:d1:db:c1:
                    cb:ad:49:49:07:9b:6d:ae:b5:d0:47:cd:df:80:f1:
                    48:fd:46:0b:52:4b:5a:2b:58:78:74:21:b0:90:6a:
                    5a:6e:03:66:23:3e:a7:87:23:4e:b1:48:a3:bb:0e:
                    19:cb:f3:c9:3c:23:8e:93:f7:dd:e1:c8:ce:61:ec:
                    d1:56:f4:bf:66:28:de:6c:69:c9:6d:e8:f2:62:20:
                    9e:0c:e6:11:b0:42:e3:bc:f3:b5:f4:a2:5b:f6:8c:
                    ef:f9:bc:63:ca:b5:7f:c9:ac:48:c9:a7:48:91:7f:
                    23:13:86:84:80:dd:7c:f2:f3:f1:ff:06:71:bd:a7:
                    9b:4f:d7:71:86:8d:6e:1a:1b:12:00:4e:68:ad:ab:
                    74:78:0e:b5:e9:5e:83:c0:e5:70:d8:3e:e0:3b:fd:
                    b0:64:39:49:21:ad:a6:05:5d:fb:da:ff:1e:ae:6e:
                    f1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F0:10:C4:24:47:DB:77:B7:F5:6C:BB:B6:EB:FB:8C:CD:50:6C:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/982f9c0f-95e3-3d69-8ab5-e2b425ce5985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.14.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:31:98:12:f3:36:6f:77:8b:53:7b:a6:a4:76:e4:a7:b1:86:
         96:97:01:44:9c:ff:24:0c:41:0f:24:1c:1c:cb:8c:aa:6e:ef:
         80:7f:de:84:58:06:89:b8:6b:f7:9f:4c:1d:04:98:8f:60:39:
         ce:02:15:6f:79:2a:13:24:27:c9:ca:7b:44:cf:f7:ef:31:0f:
         67:95:9b:2e:27:3d:00:cb:b4:43:97:04:d7:6b:2d:c5:66:98:
         2b:c5:ab:bf:27:7b:49:d4:9a:38:6b:60:9c:dd:27:bb:75:d4:
         69:05:f1:13:d3:37:45:a7:e7:2c:71:1a:4c:e1:96:2c:4d:02:
         5d:47:ef:3c:ea:2f:79:e3:4d:bf:72:ed:22:34:bd:52:a0:74:
         41:ca:f9:e1:b4:1a:67:0e:49:26:6e:62:13:d3:8c:4d:eb:cb:
         1e:ca:ab:06:9d:b9:b4:36:ad:50:42:c3:27:9f:2a:8e:c8:ab:
         28:05:10:fc:ab:62:c3:b2:f5:4e:90:40:80:66:c5:16:d9:ca:
         58:7b:56:dd:70:2c:48:54:ff:19:35:df:b3:ca:f4:8d:46:cd:
         b3:c7:4b:e7:72:7a:87:2a:af:a0:0a:c0:bd:e6:9b:18:e0:ae:
         2b:56:0b:75:4b:54:cf:7f:6e:22:41:9a:81:ee:e6:18:bd:9a:
         a6:0f:05:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNhdtYeXo2BQQxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk
M2FmMGRkOGEtNWJmMC00ODM2LTkwYjItYjVlZmNiZGY1NzQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8tTVHr+OY4VYFvmAwrtx9xfYKIuNcrczuNMM
NI/FC6aPEJBodgEgrTSwdPPZl5I1Blvzik7FNCjdFMkcVjSVyIgYXFCZXiCODzc3
Ga7w3boD7iVDprPR28HLrUlJB5ttrrXQR83fgPFI/UYLUktaK1h4dCGwkGpabgNm
Iz6nhyNOsUijuw4Zy/PJPCOOk/fd4cjOYezRVvS/ZijebGnJbejyYiCeDOYRsELj
vPO19KJb9ozv+bxjyrV/yaxIyadIkX8jE4aEgN188vPx/wZxvaebT9dxho1uGhsS
AE5orat0eA616V6DwOVw2D7gO/2wZDlJIa2mBV372v8erm7xjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN/wEMQkR9t3t/Vsu7br+4zNUGzCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTgyZjljMGYtOTVlMy0z
ZDY5LThhYjUtZTJiNDI1Y2U1OTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA4YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAwxmBLzNm93i1N7pqR25KexhpaXAUSc/yQMQQ8kHBzLjKpu74B/3oRY
Bom4a/efTB0EmI9gOc4CFW95KhMkJ8nKe0TP9+8xD2eVmy4nPQDLtEOXBNdrLcVm
mCvFq78ne0nUmjhrYJzdJ7t11GkF8RPTN0Wn5yxxGkzhlixNAl1H7zzqL3njTb9y
7SI0vVKgdEHK+eG0GmcOSSZuYhPTjE3ryx7KqwadubQ2rVBCwyefKo7IqygFEPyr
YsOy9U6QQIBmxRbZylh7Vt1wLEhU/xk137PK9I1GzbPHS+dyeocqr6AKwL3mmxjg
ritWC3VLVM9/biJBmoHu5hi9mqYPBSo=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:09:00 2025 by rpki-client