Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18d42375-a9b2-3528-a3fb-4a8d5793cc3b.roa
File:                     18d42375-a9b2-3528-a3fb-4a8d5793cc3b.roa (raw, json)
Hash identifier:          92+naBCPKBLUYfrVzgIlD534S/r5CL3OF0APZdKyHME=
Subject key identifier:   9E:B2:23:A0:DF:76:C2:81:EA:63:5F:A1:7A:61:C8:74:C4:B8:2D:AB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F280F54E0F2BE8C81CED40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18d42375-a9b2-3528-a3fb-4a8d5793cc3b.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        68.7.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:80:f5:4e:0f:2b:e8:c8:1c:ed:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=5296d145-23d2-404d-82e1-33735d96e2f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b4:6b:67:16:7c:84:af:56:04:e7:45:e9:6f:
                    2e:7c:f6:1a:9f:ca:c2:6f:6c:2d:51:a9:f0:6f:c8:
                    00:a4:46:77:5b:be:8a:a3:6b:51:e4:a2:06:4c:aa:
                    b6:62:7a:61:01:f2:47:ed:3b:cd:60:a6:2b:03:a2:
                    03:ee:b4:ff:dc:f2:05:5c:ec:6a:d5:de:2d:96:72:
                    e3:c6:d3:da:b2:41:0a:36:bc:cb:7e:e3:07:98:4f:
                    83:6d:5c:b8:ca:4c:08:b8:a1:2a:14:d9:de:77:5c:
                    6a:28:5f:4d:73:96:32:09:71:4c:b9:8c:ba:31:55:
                    91:0b:42:03:5e:a1:d2:d7:79:4c:3a:b1:ef:62:81:
                    00:b3:57:f0:51:66:7e:7b:8d:42:e0:d1:b4:04:ee:
                    2f:15:bc:43:69:35:24:25:99:14:16:ed:c9:d7:d4:
                    61:3d:fc:f9:71:84:b9:df:89:75:dd:a1:b2:47:cd:
                    a5:82:44:c4:6a:c2:44:f6:88:5c:ec:72:1a:79:b5:
                    e5:c1:9c:38:ca:1f:be:9d:e2:80:b1:0b:a0:b9:be:
                    7f:ff:b6:c0:0d:c3:dd:62:b1:61:fa:58:59:43:ca:
                    bd:9d:d4:29:53:95:c7:d2:28:65:de:e4:f3:29:25:
                    e9:7b:e5:da:b1:7e:29:0d:dd:40:b2:47:d2:9f:5a:
                    23:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:B2:23:A0:DF:76:C2:81:EA:63:5F:A1:7A:61:C8:74:C4:B8:2D:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18d42375-a9b2-3528-a3fb-4a8d5793cc3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.7.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:78:c5:8e:a9:d6:56:e6:b2:01:f3:8e:b6:fe:58:15:4d:3f:
         58:27:e3:b5:ea:9a:db:b9:10:06:91:1e:bb:e0:f8:29:50:40:
         e9:64:00:54:7c:f3:d8:34:70:32:5b:89:fc:bb:b2:15:c6:73:
         0a:bc:bc:03:f2:b1:a5:60:57:a6:39:20:da:5e:b5:d8:0a:7f:
         6f:e1:08:28:0c:97:f4:c3:8c:19:30:ab:92:05:5b:97:69:b2:
         ee:79:29:ec:b5:12:a6:2b:c6:04:7a:db:3d:79:da:10:19:3a:
         3d:5a:5d:0b:c3:d8:59:6f:ef:e2:10:0c:da:70:11:19:aa:29:
         b2:da:6b:3e:df:35:67:cb:6c:a4:e9:14:75:8e:8b:1c:5c:ea:
         1f:e5:b9:0c:d2:55:27:b9:5f:55:ea:cd:17:cf:e6:e2:ab:fd:
         72:ea:c1:b3:36:f9:96:00:a9:1e:ce:34:cd:8a:52:d8:2e:ec:
         b6:49:93:fc:55:e7:57:93:e7:40:39:0a:d3:4b:d7:34:79:eb:
         78:e5:66:84:7c:e3:31:9b:45:67:40:ce:8d:79:31:2f:99:05:
         f4:75:a9:2f:04:0d:01:57:96:1a:15:12:50:9d:21:c7:e9:d1:
         97:9b:5d:dd:a2:96:f5:7e:fb:66:22:d0:ed:19:6a:06:85:c3:
         36:c2:4f:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28oD1Tg8r6Mgc7UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk
NTI5NmQxNDUtMjNkMi00MDRkLTgyZTEtMzM3MzVkOTZlMmYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrRrZxZ8hK9WBOdF6W8ufPYan8rCb2wtUanw
b8gApEZ3W76Ko2tR5KIGTKq2YnphAfJH7TvNYKYrA6ID7rT/3PIFXOxq1d4tlnLj
xtPaskEKNrzLfuMHmE+DbVy4ykwIuKEqFNned1xqKF9Nc5YyCXFMuYy6MVWRC0ID
XqHS13lMOrHvYoEAs1fwUWZ+e41C4NG0BO4vFbxDaTUkJZkUFu3J19RhPfz5cYS5
34l13aGyR82lgkTEasJE9ohc7HIaebXlwZw4yh++neKAsQugub5//7bADcPdYrFh
+lhZQ8q9ndQpU5XH0ihl3uTzKSXpe+XasX4pDd1AskfSn1oj1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ6yI6DfdsKB6mNfoXphyHTEuC2rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMThkNDIzNzUtYTliMi0z
NTI4LWEzZmItNGE4ZDU3OTNjYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAdeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF14xY6p1lbmsgHzjrb+WBVNP1gn47Xqmtu5EAaRHrvg+ClQQOlkAFR8
89g0cDJbify7shXGcwq8vAPysaVgV6Y5INpetdgKf2/hCCgMl/TDjBkwq5IFW5dp
su55Key1EqYrxgR62z152hAZOj1aXQvD2Flv7+IQDNpwERmqKbLaaz7fNWfLbKTp
FHWOixxc6h/luQzSVSe5X1XqzRfP5uKr/XLqwbM2+ZYAqR7ONM2KUtgu7LZJk/xV
51eT50A5CtNL1zR563jlZoR84zGbRWdAzo15MS+ZBfR1qS8EDQFXlhoVElCdIcfp
0ZebXd2ilvV++2Yi0O0ZagaFwzbCTy4=
-----END CERTIFICATE-----
Generated at Wed Oct 15 21:27:17 2025 by rpki-client