Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/320fbcfc-2215-39fd-8d2e-0608faea04c8.roa
File:                     320fbcfc-2215-39fd-8d2e-0608faea04c8.roa (raw, json)
Hash identifier:          3BRyucOtKpKnQhavZHyJGCT4ZOtMYcZ6qQ1W+VVVsrk=
Subject key identifier:   83:0A:54:94:58:60:83:F0:58:6B:6B:DF:69:C8:E2:56:69:72:26:ED
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C4D48AB6B7FD21E798E00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/320fbcfc-2215-39fd-8d2e-0608faea04c8.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        68.228.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:4d:48:ab:6b:7f:d2:1e:79:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=7283303e-3f93-44f2-a800-9cd540244d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:69:8e:96:54:ce:d4:1f:4b:61:ff:93:3c:0a:
                    9e:8d:26:ac:f4:38:c2:22:46:46:1e:38:36:49:db:
                    85:14:21:89:7d:cd:dd:5b:c5:df:36:7d:e0:f9:02:
                    ec:a9:ab:eb:04:d4:1c:27:86:6b:15:e9:47:98:19:
                    57:8d:55:45:24:ef:92:20:70:43:01:a4:d9:30:88:
                    f6:19:c5:d1:45:1c:ac:da:65:7f:14:80:7a:7c:56:
                    81:f0:5b:e9:19:94:27:f2:0c:7d:4a:8b:de:ff:49:
                    38:57:e3:4a:13:ea:11:d5:d5:f2:65:4b:31:4c:31:
                    b7:f4:8f:8a:9d:8d:94:33:c3:78:f3:5e:71:92:b6:
                    67:ba:5f:d1:28:4f:99:54:ee:20:16:5d:ed:c1:e4:
                    2f:a0:83:f9:a7:8c:59:55:95:13:65:60:4b:c5:bd:
                    90:6c:23:7a:18:27:ed:e9:50:87:e1:13:fc:d5:77:
                    19:01:5f:a7:37:f7:c2:67:1f:74:12:36:3c:e1:61:
                    73:02:4e:35:93:f6:7b:c1:14:3c:f0:42:3e:c8:10:
                    c5:8b:a9:00:ec:7b:a6:fc:73:f8:cc:3f:19:c9:e6:
                    86:7f:a3:b7:4b:b6:a4:e3:62:fc:2f:31:ba:c7:a5:
                    10:f3:2a:b8:46:13:a7:55:12:4f:78:05:b6:09:ff:
                    0a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:0A:54:94:58:60:83:F0:58:6B:6B:DF:69:C8:E2:56:69:72:26:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/320fbcfc-2215-39fd-8d2e-0608faea04c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.228.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:76:1c:0c:5e:da:85:a0:06:30:20:92:d5:c5:1e:73:ba:0a:
         d8:c3:96:f2:4b:b2:f6:61:9e:16:b0:56:31:9b:21:44:50:07:
         ff:d8:9a:05:ff:e5:b4:c2:ee:6b:33:95:15:40:7a:51:9c:16:
         75:2f:96:48:e4:e4:16:de:0f:04:19:b6:43:49:86:97:3f:e8:
         7a:cb:ba:6e:bd:ff:04:7b:74:f2:92:cf:ee:8f:e8:82:ee:04:
         ea:9c:b5:35:c7:94:15:6f:af:88:60:bc:f9:e8:09:37:ec:fd:
         73:92:ea:cf:96:06:92:a2:5c:3e:99:95:2b:4a:a8:29:3b:71:
         56:56:9c:30:29:2a:c6:50:86:c0:a1:ff:cd:db:63:60:48:ba:
         f0:d1:43:f0:ea:3c:b0:38:87:be:1b:12:81:0a:43:3b:6a:c1:
         47:c8:0f:16:8f:73:88:60:2d:d4:f6:12:99:7a:7d:db:ee:a6:
         d1:f8:55:74:d2:c0:3e:db:65:6f:b8:d2:61:f0:f4:4e:47:a9:
         41:e6:6b:8f:8f:15:1a:92:77:ae:8d:5d:a3:a8:85:5d:04:a6:
         9b:7b:96:d9:a2:d9:91:a6:86:f8:d0:41:c0:6a:ef:d4:b5:5a:
         cd:d0:48:f6:c4:a5:a3:40:7d:99:98:62:2d:0c:b9:b9:4c:4c:
         3f:ec:f2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 02:03:37 2025 by rpki-client