Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e027394-5b58-3aff-87a9-a4632ee64c1e.roa
File:                     0e027394-5b58-3aff-87a9-a4632ee64c1e.roa (raw, json)
Hash identifier:          bDaJb69UFILud8mzMVhCJ6bSY0vEGVweo8n5phGizpY=
Subject key identifier:   BD:E4:2E:6B:CD:8D:92:85:87:DA:A2:27:E1:C7:64:DF:2C:DC:9E:25
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C37BA0C35D4FC86ECA850
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e027394-5b58-3aff-87a9-a4632ee64c1e.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        68.104.196.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:37:ba:0c:35:d4:fc:86:ec:a8:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=53e628b6-28c4-49ec-a034-20fd0280c46c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3d:c6:f4:3d:d8:c1:f4:ac:7b:73:90:91:6d:
                    82:5b:d6:54:fd:2d:3e:f2:97:72:e2:bd:9a:ff:c9:
                    32:cd:fb:52:87:e1:98:e0:d1:83:a8:76:be:a6:e2:
                    b9:54:74:e3:46:d5:9d:fe:68:0a:23:4e:6b:9b:7c:
                    c2:63:d1:e9:ac:84:dc:0b:9a:a9:1b:b9:0b:16:7f:
                    e5:9c:9f:03:49:28:21:68:b9:f3:b8:d2:fa:99:8a:
                    34:06:aa:f0:f9:30:ef:1e:7c:54:77:fc:cd:33:f5:
                    26:cb:de:74:f4:65:b0:6e:07:be:3a:83:78:5f:4e:
                    68:2f:3d:91:79:31:3e:08:2f:b3:46:23:90:70:9a:
                    77:73:14:ef:f0:6f:86:05:1c:ec:ab:9c:06:63:d7:
                    63:5a:a8:91:54:d0:88:06:28:47:e6:7a:06:89:fd:
                    7e:e6:1b:b1:36:bc:ce:15:71:6d:8c:21:4c:53:3b:
                    1b:47:40:5d:18:b3:f9:9d:ed:3e:af:4f:c4:53:68:
                    87:1f:ba:a5:2f:96:fb:ab:83:06:88:b6:43:ae:3b:
                    71:0e:03:70:82:f9:3b:5b:fa:d3:38:2d:ab:d0:c5:
                    25:d8:6c:06:9b:9a:7f:d2:7a:b8:ee:ff:a5:14:7c:
                    34:4a:93:7c:87:c3:3d:76:63:a1:27:24:5b:8a:b2:
                    8e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E4:2E:6B:CD:8D:92:85:87:DA:A2:27:E1:C7:64:DF:2C:DC:9E:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e027394-5b58-3aff-87a9-a4632ee64c1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.104.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:4f:73:27:43:8d:43:40:92:ed:ac:10:48:a5:28:0d:45:12:
         3e:d5:a8:07:21:c6:04:42:31:1a:4a:11:92:a8:a0:83:0b:85:
         e9:74:e6:5c:ed:17:b2:6f:1d:03:6f:0b:d6:1d:7a:47:cf:8b:
         ab:59:78:ef:69:6d:17:5b:17:31:ee:81:eb:a2:68:f6:72:c3:
         1d:52:a7:46:33:08:c1:2c:8c:02:a3:96:29:13:cd:62:c9:a1:
         a3:8f:b9:ca:75:1b:44:37:33:82:65:88:49:59:13:d2:94:85:
         a1:88:97:35:2f:8f:1d:6c:58:c9:47:99:7a:67:7b:e5:62:a7:
         b1:7f:8c:10:0a:03:82:96:a9:40:8f:b2:5f:6b:5d:b8:20:15:
         c6:12:c1:58:15:b9:a1:4f:0a:40:03:11:fa:f4:12:5e:fd:1c:
         bd:73:9a:23:1d:27:cc:c3:32:3c:70:05:9b:ac:1d:de:e0:1f:
         ff:03:07:3f:b7:c1:a6:80:cf:a4:59:ae:37:f8:76:40:59:ad:
         fb:1a:9d:c8:74:3a:08:97:cf:a7:74:07:42:bf:92:da:f6:bf:
         6f:9d:8e:0c:09:4e:4a:14:ce:0e:10:9d:7f:4d:50:45:4e:32:
         16:33:de:a0:00:18:9a:d8:1b:ab:d0:5d:5e:bd:f2:ea:38:99:
         d7:90:bf:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:22:45 2025 by rpki-client