Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/339ad03d-87b9-3fc1-b718-bffe28e149c2.roa
File:                     339ad03d-87b9-3fc1-b718-bffe28e149c2.roa (raw, json)
Hash identifier:          07kBiaiNj6E4e/AitI3G9jvi4zDpc0/NkdZfPhNmCGg=
Subject key identifier:   3A:FD:2E:0D:57:E4:92:A6:45:27:00:79:32:40:9B:93:C2:DC:04:AD
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C559526828D052F147A40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/339ad03d-87b9-3fc1-b718-bffe28e149c2.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        68.231.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:55:95:26:82:8d:05:2f:14:7a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=ac00f786-96ac-48e5-a8ff-47b9c6fced6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:57:18:75:c8:42:ac:fd:3c:04:ff:8d:42:20:
                    f3:0f:b7:84:08:b6:91:c1:53:31:0f:0a:a2:16:4e:
                    b8:3a:e5:88:a2:56:b3:fe:48:89:99:62:6f:5e:ce:
                    90:89:10:f4:e4:cc:87:58:0b:0b:13:16:ee:45:7a:
                    e4:93:e5:2f:ff:f2:77:2b:d5:b3:dd:87:ee:3b:72:
                    4e:9b:48:55:79:5a:7a:b2:cf:81:0f:56:7d:76:f0:
                    86:32:bf:41:d3:39:db:73:60:a7:49:97:af:6c:60:
                    cc:d3:d9:14:18:f0:fd:7f:91:35:7e:51:ae:ef:e1:
                    a7:3d:4c:15:15:2e:90:cd:9f:3e:04:05:37:aa:fb:
                    73:b8:8d:08:c8:81:99:f8:4a:a8:1d:67:de:2e:15:
                    a3:0a:47:7b:cd:ff:f0:b7:ed:58:ac:d4:27:20:03:
                    c3:29:22:f5:a6:25:85:b0:21:59:ec:62:db:a0:e2:
                    31:30:21:c4:37:91:96:fc:4f:59:85:d2:90:f7:51:
                    66:5e:95:40:d2:6c:0c:0b:f8:46:8b:b1:fb:1f:a7:
                    31:29:c1:87:f9:23:1f:f1:17:0f:d3:7f:b5:fe:b8:
                    8a:82:fc:16:27:00:b2:cd:2d:5d:00:ff:5d:1f:92:
                    80:49:08:dd:49:5c:96:8f:89:15:ac:41:6e:65:90:
                    31:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FD:2E:0D:57:E4:92:A6:45:27:00:79:32:40:9B:93:C2:DC:04:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/339ad03d-87b9-3fc1-b718-bffe28e149c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.231.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:f8:c9:1a:c7:b0:4b:22:2e:f8:37:52:34:64:16:9a:9d:21:
         58:7e:d8:7d:52:90:dc:2c:44:a1:c9:68:3a:0d:be:df:26:97:
         47:44:c2:95:42:bf:79:1c:ef:85:5c:67:d6:1d:aa:ea:f2:de:
         e9:50:51:40:f9:c3:63:9c:8e:e8:90:00:98:dc:12:a4:22:88:
         7b:81:6c:20:b0:45:5e:73:0d:3d:56:43:7b:0b:88:78:7f:27:
         4b:66:38:ea:e8:8b:7b:30:7d:43:21:ae:53:ec:c4:fc:7b:5a:
         6f:c8:75:eb:5a:3d:25:7e:82:51:da:11:3b:7e:b1:7d:99:4f:
         5c:d2:5c:08:bc:1f:6f:0e:1c:f5:99:eb:4d:98:19:95:89:20:
         4f:f2:ce:3c:ad:f1:8b:ed:eb:bb:d5:3d:31:6b:1c:ae:a1:ff:
         04:aa:8e:e5:fc:01:c5:6c:38:e9:bb:50:ab:32:e9:35:99:be:
         ac:ca:18:99:43:d9:79:bc:08:18:d1:f7:b3:95:db:59:2e:ce:
         21:ac:4c:34:61:e8:4d:aa:cc:9f:cf:3a:04:2b:78:41:15:b3:
         d7:e8:0a:9c:f3:30:ec:a1:69:11:f0:00:00:92:77:71:16:a2:
         b7:a0:18:f5:f8:3e:01:39:32:81:e0:c9:a3:cb:b5:3c:98:d7:
         f6:90:5f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:19:59 2025 by rpki-client