Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9db82cf1-8200-30b7-b62c-ce9687206039.roa
File:                     9db82cf1-8200-30b7-b62c-ce9687206039.roa (raw, json)
Hash identifier:          TbnLdJgOyFki8SkZc7vIS9aEemyErHdntc2rinO8oc8=
Subject key identifier:   F3:AF:35:D5:41:BC:C8:04:5A:B3:D3:02:9B:AE:E3:16:CC:A8:02:01
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A9636553388A0626309E9A1C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9db82cf1-8200-30b7-b62c-ce9687206039.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        68.6.180.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:55:33:88:a0:62:63:09:e9:a1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=314636e2-5724-4388-b2de-40c3fbf91486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0e:ff:70:bc:1b:d1:f5:bd:28:be:7e:80:6a:
                    33:c2:70:c1:f7:8f:ac:45:79:22:95:f8:6b:b8:6b:
                    1b:c1:59:5d:15:cd:3b:65:18:36:c2:53:18:c7:3f:
                    c4:fa:2a:19:1f:2d:d8:ce:26:05:b6:d5:ff:3a:c2:
                    94:37:4b:6d:92:d4:bf:27:e5:53:3e:ee:3e:8d:cb:
                    d8:1a:07:12:1d:a9:5e:e8:bc:64:51:44:83:29:f1:
                    a3:6d:6e:83:3c:83:64:76:56:b9:93:23:ec:2f:4d:
                    b7:9c:67:28:cb:53:03:3f:7a:8f:03:88:a5:2b:67:
                    98:f7:cd:74:5c:d5:a3:0d:7e:b9:8d:34:e2:72:07:
                    76:7d:0b:d0:f4:d2:ab:f8:68:ac:c1:d9:93:53:e6:
                    66:7e:3e:1a:36:4f:67:bb:23:41:0d:ca:1f:88:b6:
                    f9:8b:f7:64:8b:34:83:91:80:1d:03:83:38:47:ef:
                    03:05:4d:33:6e:74:14:93:75:40:78:16:a4:4c:e0:
                    19:d9:03:b3:8a:dd:83:c3:32:9f:2a:c8:d8:29:aa:
                    31:07:e5:fd:be:ce:87:64:ff:ee:58:4b:50:76:8a:
                    3b:ab:35:3b:8b:1e:66:ca:84:94:4b:0b:63:0e:61:
                    ac:ad:50:7b:c3:54:72:eb:75:b7:2f:bf:c9:01:f1:
                    91:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AF:35:D5:41:BC:C8:04:5A:B3:D3:02:9B:AE:E3:16:CC:A8:02:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9db82cf1-8200-30b7-b62c-ce9687206039.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.6.180.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:15:19:9f:2e:7c:93:6a:04:49:0c:eb:08:46:0b:75:cc:76:
         5f:35:2a:d0:ad:1d:c5:96:7f:da:65:45:a0:26:f6:aa:f2:4c:
         f3:39:bc:33:3e:1a:75:e4:9d:d2:53:a8:79:1e:1b:a8:49:4d:
         f5:44:68:eb:12:71:ab:b4:fe:23:c6:9e:65:3b:85:c3:63:51:
         2d:94:b2:02:3b:52:2e:b2:32:12:5d:09:ef:f0:9e:ad:38:cf:
         b4:06:69:9d:e2:be:94:2b:1d:a0:a9:c7:d2:87:5f:18:3c:80:
         85:c1:96:f1:81:db:3e:e0:1b:c8:fd:79:73:fd:21:58:06:57:
         96:91:67:9c:ea:c5:a0:1c:55:b1:53:b7:cd:e9:66:cb:b2:ab:
         05:b3:58:91:8a:d5:94:df:6e:35:f8:72:c1:0b:24:c7:3b:ec:
         94:10:05:80:56:0d:56:26:94:0b:4d:89:2f:c0:d5:26:63:b0:
         ec:34:7b:30:5e:cc:f8:37:b3:00:64:81:0c:83:b9:0e:e6:dc:
         f4:28:89:5f:01:fe:57:15:ba:c2:06:d3:d6:cf:5b:e2:d1:74:
         a2:2c:49:0f:0f:ad:fc:d3:51:ba:d7:03:fd:01:15:65:8c:10:
         2c:5a:c3:0e:1a:dc:a5:11:8c:50:59:7c:90:62:f1:27:27:90:
         c1:83:1d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:51:41 2025 by rpki-client