Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/034e07fd-ed89-3a4e-baf4-4e9a75b76819.roa
File:                     034e07fd-ed89-3a4e-baf4-4e9a75b76819.roa (raw, json)
Hash identifier:          jvyb2VAV7twX7YrDHNOvZ45+N08Szb0HUOkWaT+CVx8=
Subject key identifier:   04:90:49:4F:ED:10:08:54:4B:3E:6C:3F:97:BD:8E:1E:83:05:9A:DD
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F23FB470DF0A9E548976A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/034e07fd-ed89-3a4e-baf4-4e9a75b76819.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        174.65.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:3f:b4:70:df:0a:9e:54:89:76:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=6eb43b52-5be5-4d54-9576-fab16175aeec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4e:11:79:21:0d:fb:b6:4d:5a:a7:b4:9d:5e:
                    0f:a3:9b:f5:a8:28:1f:60:7f:be:93:80:0f:41:e5:
                    13:84:f1:be:38:ed:92:33:f8:e9:a4:f6:6c:36:22:
                    0a:41:d5:b9:ab:f9:21:fc:6a:83:fc:62:d9:ee:c9:
                    4b:7a:89:18:e7:4a:04:8e:f1:0a:a1:44:a1:02:93:
                    20:04:26:ab:2d:fa:4d:74:64:da:06:6d:86:68:11:
                    bd:1e:94:96:bc:eb:a5:1a:08:6f:61:6f:9d:92:49:
                    30:51:c5:4b:78:82:c5:d9:77:6c:1a:c2:d1:96:0b:
                    3e:ca:bf:f0:d9:7d:60:78:46:21:12:bd:04:2f:73:
                    58:2e:97:00:f6:31:ed:c7:54:d1:ac:32:3a:13:3c:
                    2c:d9:68:25:22:e2:f3:cb:87:29:e6:c8:c6:93:3d:
                    07:ae:8e:2d:4d:f3:d3:6a:1b:00:52:8a:6b:3a:1f:
                    49:2f:af:47:b0:40:c9:32:72:56:98:c3:e2:7f:04:
                    30:83:e1:e5:38:88:a6:da:bb:61:5c:aa:70:17:13:
                    ab:27:dc:41:39:45:e0:3c:56:89:18:19:25:b3:ad:
                    58:f4:7f:ce:64:23:e2:d4:c2:c4:2c:2b:ee:00:e8:
                    78:cb:39:ec:41:77:a2:96:73:ab:9f:ee:18:01:0f:
                    5d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:90:49:4F:ED:10:08:54:4B:3E:6C:3F:97:BD:8E:1E:83:05:9A:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/034e07fd-ed89-3a4e-baf4-4e9a75b76819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.65.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:86:bc:46:ea:22:9b:a6:5f:ab:69:d8:62:2a:da:52:96:32:
         64:e6:6a:0c:cb:fb:93:e4:fe:2d:30:ba:b5:53:fc:0e:52:cf:
         04:b5:80:3c:c7:3c:ad:f8:b4:fd:8f:ed:d7:b4:ad:f5:fe:77:
         4a:46:ac:ed:37:2a:dd:98:3b:84:a5:3d:64:50:6a:b1:4e:1a:
         f9:db:4f:26:03:64:28:c3:49:36:ee:62:76:3d:3a:ec:4f:89:
         78:b5:33:56:39:81:8f:f1:62:10:42:69:5c:e9:93:49:63:bf:
         ea:6d:ab:5f:22:8d:52:24:32:cd:75:5c:fe:df:9a:ca:b5:71:
         49:ac:d2:20:8b:b0:11:63:15:40:64:87:b9:8f:67:3c:7a:6c:
         cf:b4:8a:a1:43:37:67:c1:17:84:8f:78:d6:50:4a:29:db:71:
         9c:e2:6f:98:59:24:52:7b:ba:92:84:3b:1f:b8:87:44:d9:14:
         cc:c2:13:3e:c0:da:36:34:cf:1e:89:e2:db:4e:ed:6f:d8:33:
         d6:a2:8a:d0:3f:67:6e:c7:62:46:46:af:d7:89:e3:d0:3b:b7:
         c1:35:8b:4c:0a:da:ab:8a:12:a1:ed:e1:17:82:fc:39:fb:70:
         22:e9:3f:2c:2b:89:2a:ec:2f:60:e9:4e:7d:08:10:c3:6e:19:
         e6:cc:fe:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:35:21 2025 by rpki-client