Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b6e0f1f-125c-3613-9613-ee3cbe327f75.roa
File:                     0b6e0f1f-125c-3613-9613-ee3cbe327f75.roa (raw, json)
Hash identifier:          rFSDXROKdq1+IclUwWoLlzo75P+OxCagWSrgROUCgFA=
Subject key identifier:   47:D4:E3:7A:CE:04:EB:0C:68:53:D9:B2:51:53:A3:D6:1D:F4:9D:E8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F276396AAEEA81991F6300
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b6e0f1f-125c-3613-9613-ee3cbe327f75.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        68.8.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:76:39:6a:ae:ea:81:99:1f:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=b951509c-a851-4285-af69-b8e7a5341442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6d:f6:41:12:08:cb:4e:55:45:76:ab:d1:a2:
                    4a:78:dd:6b:9b:31:da:f9:46:42:a4:99:58:f8:48:
                    52:ef:33:95:17:d5:2d:6b:95:af:98:fb:79:bb:6f:
                    95:d5:40:82:6d:5f:dd:18:dc:3c:88:93:36:1f:9f:
                    8b:ba:39:9d:35:13:d8:0a:80:f3:c1:d7:e9:18:3c:
                    ac:55:95:9f:82:19:ff:2b:91:3e:ed:0e:d0:03:d4:
                    3b:9c:03:02:bb:65:1c:40:96:c4:ff:13:b0:52:0e:
                    34:2d:f0:ca:c6:2d:dc:4a:dc:33:e2:ce:8e:9b:83:
                    5a:ca:01:20:07:fb:55:c1:0a:a4:95:51:75:d0:76:
                    ac:a2:17:ed:dd:6c:4d:3a:7d:70:de:31:e9:18:02:
                    32:3d:93:6a:79:4e:3b:db:c8:fb:66:15:84:fe:3e:
                    fa:8e:c6:44:18:f9:9c:41:c1:fb:98:79:6c:46:03:
                    f3:c1:16:7b:34:32:22:41:c4:3e:8d:f0:19:9e:50:
                    34:e5:62:80:78:47:7d:91:ba:6c:56:c4:e3:51:83:
                    0b:a2:ea:a7:d5:2b:c1:f9:8d:25:c5:ea:a9:bb:55:
                    20:ee:da:2b:22:5a:bb:74:bc:3a:91:c6:5d:13:e4:
                    8c:ef:c3:62:ca:3d:25:9c:6c:9f:23:94:90:bc:8f:
                    ad:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D4:E3:7A:CE:04:EB:0C:68:53:D9:B2:51:53:A3:D6:1D:F4:9D:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0b6e0f1f-125c-3613-9613-ee3cbe327f75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.8.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:3c:6e:6f:d1:2c:c1:af:61:fb:8f:1c:d1:21:b5:9a:f4:a0:
         4a:dc:5c:ba:fb:99:dd:02:d2:bf:bb:2c:d2:8d:73:1b:4c:c3:
         ae:c0:ee:ae:3b:7b:c6:3e:e8:fa:36:5f:bd:8a:d8:3a:bc:1a:
         57:f1:0d:72:cd:9f:ab:a0:df:70:e1:69:db:b8:a1:07:ea:d3:
         8b:c1:78:80:8a:bd:84:f8:18:21:73:a7:71:0f:a6:a1:60:02:
         62:32:cf:fa:4d:ed:ab:90:af:96:e9:85:ca:f4:98:ef:ee:80:
         a7:bd:72:87:90:fb:5f:6d:5e:1a:64:74:c8:78:41:7f:b4:8f:
         c1:7e:4f:e6:20:d0:63:1a:6e:60:36:7c:75:fc:b6:42:78:90:
         51:a8:a8:02:6b:f4:17:f6:69:74:a3:ad:e6:c6:b7:74:c0:31:
         e7:8c:76:1c:53:51:31:e2:69:0f:58:10:6d:c4:9a:3d:0d:75:
         c5:43:80:c5:32:56:4e:ae:41:67:6f:02:0e:7a:48:0c:d9:6c:
         76:64:6a:ad:c0:77:f8:4d:82:85:ce:ff:7d:1a:70:37:74:65:
         86:53:34:65:d8:51:b9:22:05:c1:59:5e:62:2a:24:0d:3b:70:
         48:1a:42:43:1a:5b:03:52:55:b9:3f:cc:05:30:d8:ab:5f:d0:
         77:01:0f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:31:25 2025 by rpki-client