Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28fdb9ff-d083-37b0-8bf8-279cbbe7cfce.roa
File:                     28fdb9ff-d083-37b0-8bf8-279cbbe7cfce.roa (raw, json)
Hash identifier:          Lrxl0ZxaScy8sGoKGNkBT8r0/LMee7QTHtGrumWVYzM=
Subject key identifier:   FF:B8:B7:A0:CE:29:00:C1:0F:62:0B:30:C4:35:78:20:C3:47:5D:33
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B2066FDD71F8CAD476A5F5F00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28fdb9ff-d083-37b0-8bf8-279cbbe7cfce.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        68.224.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:fd:d7:1f:8c:ad:47:6a:5f:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=481584f8-363f-4f55-9def-5101a314159b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d0:82:d6:ee:ee:61:55:01:6f:94:78:70:97:
                    e5:bc:41:12:5a:7d:ea:0f:b5:05:20:96:c1:e0:41:
                    31:b1:54:1c:e5:4f:1a:3a:bb:69:0f:03:49:7a:9d:
                    c7:61:b4:52:08:64:aa:ef:d8:25:22:51:4b:e7:1a:
                    63:93:c2:56:4d:38:c5:01:9e:3b:62:78:cf:61:71:
                    62:00:d0:58:44:2c:10:64:8c:4d:fe:f7:35:a2:36:
                    50:1c:40:f9:74:1b:4c:56:4d:f5:6d:01:27:76:41:
                    62:43:15:8d:a1:d0:52:93:c8:b5:85:3c:6e:91:6b:
                    1c:5d:fd:fa:ef:59:0c:9f:9d:fe:bd:c5:4c:17:a3:
                    d6:d0:d6:90:ad:5e:d5:07:be:2f:7e:8e:72:bb:60:
                    5b:33:77:fa:f2:f3:c5:fb:e5:ff:a2:94:d2:21:ff:
                    6d:3c:95:95:0b:f4:fd:ce:ad:a4:da:85:9f:a6:37:
                    db:9c:d3:a2:e0:b0:f5:5b:1f:fe:9d:94:6a:41:19:
                    6e:a7:b5:16:77:19:ca:16:3c:cd:ae:73:fd:62:bb:
                    a2:29:84:3c:48:dd:03:00:95:9d:15:aa:de:2d:ca:
                    9f:44:91:da:d2:79:1c:03:0b:c9:29:9d:c5:91:54:
                    21:c4:08:db:20:8a:a2:f1:37:d3:c5:f2:9a:1d:a4:
                    82:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B8:B7:A0:CE:29:00:C1:0F:62:0B:30:C4:35:78:20:C3:47:5D:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28fdb9ff-d083-37b0-8bf8-279cbbe7cfce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.224.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:a4:f6:79:89:62:63:3a:b0:2f:80:59:bd:22:ad:6f:3c:c6:
         17:c3:f1:c1:20:18:ec:af:b5:b8:c7:05:e6:26:ac:12:74:bb:
         b9:8e:d1:d2:9f:71:cf:bf:4a:8e:c8:06:21:f3:68:22:50:a4:
         79:9e:fb:3d:f8:fe:51:89:06:95:7d:be:dc:93:f5:60:74:6c:
         a4:88:95:05:17:60:7a:73:14:51:3a:55:a1:d5:b5:55:33:5d:
         b2:a1:46:0b:52:36:ae:d2:1f:bd:0a:30:9c:33:2b:22:f0:92:
         d1:fd:bd:c1:18:32:65:7c:ad:50:6d:c5:98:14:94:ca:28:fd:
         7e:c3:49:26:42:82:51:5c:7e:9f:57:a8:23:50:9e:92:3c:d4:
         8e:ae:be:78:cb:41:29:a6:c6:7a:5e:a9:15:62:29:4f:c2:11:
         38:03:b0:ad:51:de:bf:46:67:29:94:99:13:26:7d:dd:a3:c2:
         6f:32:4f:fc:e4:f7:71:7d:15:74:15:c3:5e:c7:2c:1a:d6:69:
         35:b6:aa:c5:f4:d7:82:13:db:1e:00:56:80:9e:84:56:42:ac:
         76:94:47:c9:73:d9:89:6f:08:aa:23:d4:2c:63:df:7c:f7:8e:
         f9:fd:bc:bd:7d:19:bc:30:b8:04:42:ee:2d:9a:2f:dc:c1:70:
         71:22:e5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 02:03:46 2025 by rpki-client