Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4848192a-11b1-3398-a5db-631a52eda15c.roa
File:                     4848192a-11b1-3398-a5db-631a52eda15c.roa (raw, json)
Hash identifier:          78cbaNeKeDhFAorJpN4BMD36hyrygtAd0yRFMNCYJHI=
Subject key identifier:   ED:B7:EC:35:9B:B0:68:28:31:29:10:08:DB:28:FA:2E:4E:1B:9A:4D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B2066EC325ECAB36F25DECC80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4848192a-11b1-3398-a5db-631a52eda15c.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        68.96.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:ec:32:5e:ca:b3:6f:25:de:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=c282062c-9cd6-4bea-8bb8-d3bc12fc00b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:4c:f8:e4:f4:10:31:4c:23:f6:0a:5c:26:
                    ab:7c:d6:f9:76:7b:b9:d8:03:8f:9b:2b:74:03:a5:
                    25:89:4c:be:33:98:6b:a6:8b:2c:15:f2:c9:b8:f5:
                    ff:b9:b9:9c:07:de:41:92:cd:b6:b1:a8:ec:99:29:
                    ef:ec:93:ff:d8:0d:3b:57:94:84:74:08:24:c8:65:
                    62:36:0a:5e:93:80:ee:01:da:c3:52:58:39:0f:58:
                    ff:4c:d7:c2:33:05:eb:09:ee:0f:84:0a:94:89:2e:
                    ed:14:b3:44:46:3e:e2:ac:3e:d7:fb:7e:14:f4:fe:
                    d5:df:9a:89:73:5c:61:10:05:08:3e:6d:ed:5c:9c:
                    8a:db:05:93:38:fa:69:84:cb:32:8f:9b:4a:04:b1:
                    ef:69:68:80:a4:10:65:1e:b2:a7:9b:90:4c:19:4a:
                    d3:c2:d7:bd:5e:2d:ff:48:d7:a1:6e:ea:44:fa:37:
                    d7:d3:57:5d:a0:cd:45:c5:d3:ac:ea:8d:bc:8c:98:
                    14:96:1e:e9:48:a0:71:bf:de:0c:61:e6:42:69:14:
                    7c:09:e2:64:29:f8:77:c2:71:4d:e8:03:df:3c:ba:
                    23:df:ed:18:2b:d1:aa:dd:7d:28:45:92:f9:03:96:
                    4a:f9:42:e0:c1:89:8c:03:14:8e:bd:e1:b4:16:88:
                    68:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:B7:EC:35:9B:B0:68:28:31:29:10:08:DB:28:FA:2E:4E:1B:9A:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4848192a-11b1-3398-a5db-631a52eda15c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.96.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:42:58:23:7d:48:d0:48:a9:b8:f9:ab:50:59:89:c9:a6:19:
         dc:c9:09:57:ae:0d:50:dd:fd:77:f8:ca:ff:16:59:3e:95:b1:
         e6:e7:aa:af:90:ac:9c:eb:81:98:a1:78:02:71:55:64:fe:a3:
         d4:93:98:3b:1e:9c:2d:6e:cc:11:82:c7:76:7b:02:7b:93:0f:
         02:f7:4f:8c:d9:5f:f1:ae:98:45:d2:7c:ee:62:aa:33:c5:45:
         e2:85:6a:64:cd:cd:46:18:80:29:ba:94:27:a6:5c:13:1f:3f:
         af:d1:ae:fd:a3:6e:e3:4c:37:fd:d2:78:8b:e5:5a:63:9a:df:
         4b:05:f5:0f:79:eb:96:2c:3e:f8:33:c0:e8:0c:e6:a1:8a:02:
         21:82:f3:a1:d5:1c:0c:9d:47:0e:d9:29:3a:13:eb:96:dc:f6:
         1e:88:f8:73:10:6f:3f:7a:cc:10:23:55:f8:d0:90:11:62:ec:
         19:e5:da:5d:e2:ad:98:b8:c5:8a:0e:37:76:a9:17:91:74:e5:
         5a:63:6f:87:75:35:bc:72:db:b6:fa:e9:f0:ba:d7:40:a4:ce:
         80:42:47:14:f5:6d:2c:eb:09:54:9c:66:80:5d:43:39:c7:df:
         6e:00:ef:09:77:24:e8:8f:e4:38:3b:d3:23:ff:12:f0:7b:71:
         e3:f8:b3:a2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZuwyXsqzbyXezIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk
YzI4MjA2MmMtOWNkNi00YmVhLThiYjgtZDNiYzEyZmMwMGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyFM+OT0EDFMI/YKXCarfNb5dnu52AOPmyt0
A6UliUy+M5hrpossFfLJuPX/ubmcB95Bks22sajsmSnv7JP/2A07V5SEdAgkyGVi
Ngpek4DuAdrDUlg5D1j/TNfCMwXrCe4PhAqUiS7tFLNERj7irD7X+34U9P7V35qJ
c1xhEAUIPm3tXJyK2wWTOPpphMsyj5tKBLHvaWiApBBlHrKnm5BMGUrTwte9Xi3/
SNehbupE+jfX01ddoM1FxdOs6o28jJgUlh7pSKBxv94MYeZCaRR8CeJkKfh3wnFN
6APfPLoj3+0YK9Gq3X0oRZL5A5ZK+ULgwYmMAxSOveG0FohoVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO237DWbsGgoMSkQCNso+i5OG5pNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDg0ODE5MmEtMTFiMS0z
Mzk4LWE1ZGItNjMxYTUyZWRhMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGD6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJRCWCN9SNBIqbj5q1BZicmmGdzJCVeuDVDd/Xf4yv8WWT6Vsebnqq+Q
rJzrgZiheAJxVWT+o9STmDsenC1uzBGCx3Z7AnuTDwL3T4zZX/GumEXSfO5iqjPF
ReKFamTNzUYYgCm6lCemXBMfP6/Rrv2jbuNMN/3SeIvlWmOa30sF9Q9565YsPvgz
wOgM5qGKAiGC86HVHAydRw7ZKToT65bc9h6I+HMQbz96zBAjVfjQkBFi7Bnl2l3i
rZi4xYoON3apF5F05Vpjb4d1Nbxy27b66fC610CkzoBCRxT1bSzrCVScZoBdQznH
324A7wl3JOiP5Dg70yP/EvB7ceP4s6I=
-----END CERTIFICATE-----
Generated at Wed Oct 15 23:35:55 2025 by rpki-client