Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fbfb4cb1-012f-364e-9b5b-98477114fbf0.roa
File:                     fbfb4cb1-012f-364e-9b5b-98477114fbf0.roa (raw, json)
Hash identifier:          /a1EiJCWC7f/hokNSkoKf0zTwS5ujoq71FeT3ZOy8gc=
Subject key identifier:   39:CE:B5:D4:7F:FB:76:58:23:DA:F7:D3:3C:F4:55:21:EB:50:8D:97
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A963612337C1F7DFC00AB5C00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fbfb4cb1-012f-364e-9b5b-98477114fbf0.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        68.9.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:12:33:7c:1f:7d:fc:00:ab:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=bd921b2f-ac28-4037-9b58-eefe9fc86051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:f7:01:51:64:6b:e5:79:61:1d:48:7e:83:
                    b7:9a:44:9a:33:32:05:69:d2:c3:19:57:9d:81:e6:
                    07:9e:15:9f:c0:fb:43:41:a4:18:dd:82:6d:c4:43:
                    70:45:9e:e2:02:9d:69:af:d5:be:bb:b3:9c:29:5e:
                    85:1f:3f:88:a0:55:a2:cd:b1:0a:46:3f:07:0c:8c:
                    68:fb:c1:2c:f8:8a:a4:be:6e:59:ed:00:ef:37:68:
                    0b:1f:cf:3d:02:f3:36:c4:de:f3:bb:76:ec:fc:4a:
                    b3:af:7d:18:62:5d:ea:f0:83:0a:00:26:3b:0e:e3:
                    f0:1c:df:d6:de:d2:78:50:11:a3:36:05:91:3f:89:
                    3d:e9:7d:af:c8:df:5f:c0:a2:b1:35:d5:06:3c:f1:
                    86:47:c8:90:7e:af:fc:8e:10:a2:e8:16:31:bd:2c:
                    23:2b:49:23:44:28:00:17:8b:8d:14:8a:9e:66:ec:
                    0a:0e:c7:37:71:e5:5e:21:1e:40:2c:22:c4:ba:ad:
                    f8:c7:a0:af:3a:35:7f:d5:0f:53:32:62:de:43:30:
                    ca:88:de:f2:38:18:3c:56:ab:50:60:b9:21:c6:86:
                    99:3b:e1:76:fc:d6:73:4c:49:03:5d:e3:a9:2e:01:
                    d2:d5:ce:47:ab:f0:1e:ad:36:2d:17:7a:82:6c:97:
                    51:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CE:B5:D4:7F:FB:76:58:23:DA:F7:D3:3C:F4:55:21:EB:50:8D:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fbfb4cb1-012f-364e-9b5b-98477114fbf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.9.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:3b:69:57:b2:84:f1:a1:a6:d6:7a:87:6c:a8:78:93:4b:13:
         59:58:a6:7c:f5:80:6c:75:da:05:bc:18:d7:cf:92:4a:c1:97:
         ca:7e:d3:8c:9e:de:71:55:ea:2e:df:a6:22:f6:8b:44:57:5d:
         1f:a7:87:16:ef:20:6d:9b:66:e0:e0:4f:aa:49:2a:8a:20:89:
         4f:54:4f:7e:0c:8a:50:41:c0:e6:e5:a7:9b:d6:3b:1d:a4:bc:
         41:62:1e:18:0f:53:76:8b:ba:00:6a:85:6f:1d:16:4b:0e:fb:
         41:8a:f3:88:8d:c4:75:a7:e7:2e:1d:4c:c6:a8:ba:aa:94:d5:
         e1:66:07:25:70:e8:da:f9:5b:ec:dc:e5:c2:08:24:aa:64:74:
         ed:bf:70:25:07:3e:74:a0:49:c0:7a:2f:f1:02:c0:76:7e:be:
         5f:05:6f:57:89:60:af:7c:fe:4b:e3:59:36:1b:7b:00:d3:b2:
         18:7d:3e:66:a9:79:3d:ed:d0:27:b2:bb:8a:bc:58:2b:52:10:
         de:2a:b2:44:60:31:7a:22:d5:63:79:81:70:dd:cc:2c:51:d4:
         ae:fc:fb:45:36:01:30:f1:0e:96:3c:2f:6f:fd:ba:25:7f:ca:
         87:77:e5:33:ec:d7:04:45:cb:17:cd:3c:37:2e:03:6f:27:e9:
         b0:1d:95:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNhIzfB99/ACrXAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk
YmQ5MjFiMmYtYWMyOC00MDM3LTliNTgtZWVmZTlmYzg2MDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolj3AVFka+V5YR1IfoO3mkSaMzIFadLDGVed
geYHnhWfwPtDQaQY3YJtxENwRZ7iAp1pr9W+u7OcKV6FHz+IoFWizbEKRj8HDIxo
+8Es+Iqkvm5Z7QDvN2gLH889AvM2xN7zu3bs/Eqzr30YYl3q8IMKACY7DuPwHN/W
3tJ4UBGjNgWRP4k96X2vyN9fwKKxNdUGPPGGR8iQfq/8jhCi6BYxvSwjK0kjRCgA
F4uNFIqeZuwKDsc3ceVeIR5ALCLEuq34x6CvOjV/1Q9TMmLeQzDKiN7yOBg8VqtQ
YLkhxoaZO+F2/NZzTEkDXeOpLgHS1c5Hq/AerTYtF3qCbJdRaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDnOtdR/+3ZYI9r30zz0VSHrUI2XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmJmYjRjYjEtMDEyZi0z
NjRlLTliNWItOTg0NzcxMTRmYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAmKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC47aVeyhPGhptZ6h2yoeJNLE1lYpnz1gGx12gW8GNfPkkrBl8p+04ye
3nFV6i7fpiL2i0RXXR+nhxbvIG2bZuDgT6pJKoogiU9UT34MilBBwOblp5vWOx2k
vEFiHhgPU3aLugBqhW8dFksO+0GK84iNxHWn5y4dTMaouqqU1eFmByVw6Nr5W+zc
5cIIJKpkdO2/cCUHPnSgScB6L/ECwHZ+vl8Fb1eJYK98/kvjWTYbewDTshh9Pmap
eT3t0Ceyu4q8WCtSEN4qskRgMXoi1WN5gXDdzCxR1K78+0U2ATDxDpY8L2/9uiV/
yod35TPs1wRFyxfNPDcuA28n6bAdlUI=
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:09:05 2025 by rpki-client