Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02034387-669e-381f-9625-407e8fd57069.roa
File:                     02034387-669e-381f-9625-407e8fd57069.roa (raw, json)
Hash identifier:          IxG+dhcn3qUvXCcO2B4CIoRGBbsakBtsIN4nPkOBvyI=
Subject key identifier:   27:A0:6F:99:3B:FD:78:68:E0:C9:04:4F:79:E2:C0:30:68:8B:AA:B3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DD60A1DE2FC8C4F989AC3C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02034387-669e-381f-9625-407e8fd57069.roa
Signing time:             Thu 19 Jun 2025 09:16:20 +0000
ROA not before:           Thu 19 Jun 2025 09:16:20 +0000
ROA not after:            Wed 17 Sep 2025 09:16:20 +0000
asID:                     22773
IP address blocks:        68.109.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:d6:0a:1d:e2:fc:8c:4f:98:9a:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 09:16:20 2025 GMT
            Not After : Sep 17 09:16:20 2025 GMT
        Subject: CN=af40af61-2550-4244-85a8-3d2922335639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:bc:12:fb:30:22:fe:3f:ce:eb:66:a1:25:
                    3c:0c:f2:59:79:a4:d0:af:aa:f1:22:12:4b:d4:6d:
                    14:8d:e6:45:f7:71:fd:59:09:93:a5:c3:64:5b:bb:
                    27:e8:22:99:96:0c:09:c3:01:1b:be:70:ef:ea:24:
                    27:dd:13:57:b3:55:f2:8c:38:bf:28:96:68:38:6d:
                    d7:61:68:df:89:ff:12:b9:21:41:23:04:b3:5f:af:
                    3b:29:8f:ba:e7:f7:38:9f:dd:9a:b1:48:06:5c:0e:
                    e1:db:64:f2:74:63:88:f0:c0:39:13:49:ca:0c:19:
                    e6:51:85:82:e5:80:d0:b7:fe:43:97:98:47:0d:8d:
                    c0:f9:b4:c2:4b:3d:b3:2e:f4:de:16:22:f9:8e:1b:
                    e7:27:6c:d2:a5:55:ee:cd:e7:84:5a:02:b3:70:06:
                    42:12:82:f0:e2:7d:1c:c1:5d:32:ba:ad:1e:5a:f5:
                    9f:18:a4:60:3e:90:04:f3:3c:46:79:8d:4b:2c:46:
                    0c:c9:40:4c:a0:12:a6:7b:4b:93:84:cc:e0:87:89:
                    ea:eb:53:24:d0:22:d9:f2:a8:31:b8:ba:96:70:8f:
                    0e:ce:85:ca:ec:0b:f0:1f:63:44:97:67:bc:50:65:
                    20:d8:ad:3b:22:40:80:be:c7:b1:9e:1c:93:5e:9e:
                    1c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A0:6F:99:3B:FD:78:68:E0:C9:04:4F:79:E2:C0:30:68:8B:AA:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/02034387-669e-381f-9625-407e8fd57069.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.109.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:55:78:5e:ad:aa:dd:67:8a:7a:28:12:b4:d2:8d:26:65:5d:
         c9:f7:71:58:f1:76:af:9c:d0:ca:14:07:42:a2:19:77:40:c3:
         c4:7d:5c:6e:1e:56:de:ee:d4:05:0a:68:57:dd:fb:48:0a:ea:
         a7:27:18:29:93:70:3e:ef:31:c7:7c:31:66:19:9c:0d:6c:7c:
         ea:5c:65:34:ae:ab:95:b3:e7:9f:f7:c3:7b:f0:40:e6:78:1b:
         cd:d2:97:83:19:89:de:a0:1e:e3:2c:7f:8f:03:bd:09:5e:b9:
         94:1e:d2:69:cc:e0:03:22:1c:64:f7:53:2d:3f:bc:66:14:e6:
         33:10:f0:cb:6f:69:ec:4b:fc:97:a5:c9:b9:0a:65:b8:92:8f:
         03:dc:c1:4c:00:cf:b1:ae:97:1c:7d:1e:59:cd:94:5f:bc:a7:
         29:a6:ad:f6:0e:10:96:9e:ca:c3:3d:4d:53:0b:b4:0c:ab:75:
         78:a1:3d:62:9e:e2:73:9f:e9:60:8a:06:f6:b9:f4:e2:4b:4a:
         9e:9c:f5:24:5d:d0:44:38:71:9a:78:71:c8:b9:16:05:eb:71:
         21:fe:79:ea:2c:a1:4e:8e:ec:0b:98:5c:c1:52:f7:c6:31:65:
         e5:ee:9f:b8:54:2c:a8:04:7e:41:46:7b:cf:26:14:f4:14:e2:
         c7:2a:1a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:17:15 2025 by rpki-client