Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49e8b415-c00e-3e77-8b17-81b5f6d2f29d.roa
File:                     49e8b415-c00e-3e77-8b17-81b5f6d2f29d.roa (raw, json)
Hash identifier:          cDK6mAgY0Oeq+G4Qr3pfe4iLtvf4QgdLZmdRSkxaU4g=
Subject key identifier:   C3:5C:6E:A7:0A:4D:A9:72:3C:CC:5D:FA:AA:3A:55:AF:A9:66:BD:06
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C4A6BBB4E51D4E7C40380
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49e8b415-c00e-3e77-8b17-81b5f6d2f29d.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        68.227.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:4a:6b:bb:4e:51:d4:e7:c4:03:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=db46328c-43cc-4456-9b07-7e47b1fc3c6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:33:9a:29:3a:55:6f:48:c8:40:4f:e3:7e:e6:
                    9d:4a:fc:7e:bf:8a:77:e7:f9:33:33:4e:dc:2f:16:
                    c1:c0:72:3f:f5:bd:5a:c2:92:c0:bf:b4:0f:46:fd:
                    d9:bf:b2:c8:48:4e:10:37:71:ff:e8:e7:e8:75:50:
                    d6:ae:6a:6f:bc:b1:90:48:43:6b:a6:14:04:71:16:
                    f6:85:45:ec:eb:6d:ef:29:82:ad:fe:f4:e0:8f:77:
                    8d:cf:68:5e:37:08:27:0b:08:70:3b:7a:e4:0e:7c:
                    72:ac:7d:b1:43:e6:1e:79:eb:43:e0:7c:33:24:da:
                    6b:e3:72:55:43:95:69:2a:08:3c:4f:ba:e5:c9:43:
                    e5:2f:3f:9f:39:ea:69:83:25:a6:0c:e6:a1:58:bc:
                    05:ab:eb:98:03:84:b9:f5:81:55:96:4c:24:16:e8:
                    51:de:98:cf:bb:78:ab:64:f7:e5:50:29:74:43:73:
                    af:c0:e8:ea:f5:b4:df:04:f9:a5:9d:b8:46:87:f1:
                    d9:12:e3:69:12:28:ff:88:ca:69:57:4e:9b:c2:b0:
                    7a:f9:94:a0:56:63:25:f4:dd:9f:2d:d6:18:55:88:
                    9d:85:d8:06:d6:2c:16:0a:c6:bd:65:0a:bd:3b:05:
                    01:d1:2c:54:44:82:4d:83:d5:6c:ec:a3:6b:0f:b6:
                    26:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5C:6E:A7:0A:4D:A9:72:3C:CC:5D:FA:AA:3A:55:AF:A9:66:BD:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/49e8b415-c00e-3e77-8b17-81b5f6d2f29d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.227.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ea:4e:87:c7:8a:f6:26:e7:13:7e:c3:cb:02:96:86:bb:09:
         79:7f:cc:15:ef:59:3f:7c:ed:f0:2a:6d:20:b7:b1:b1:0f:10:
         23:00:46:98:d2:9a:f5:f4:13:4c:60:84:ad:c5:4b:45:ac:66:
         30:a4:7d:63:10:f4:e7:53:34:f0:9c:71:fe:c5:d0:ed:49:26:
         ad:f4:61:7d:d1:af:4f:ae:75:70:2b:0b:21:02:a3:8e:f8:df:
         46:c4:75:52:e7:49:f0:a0:08:54:2a:8e:2a:12:00:85:ae:73:
         7e:66:be:78:a7:67:c3:0e:09:df:82:18:b2:36:4d:80:0e:a1:
         82:b8:e3:6b:6d:b0:45:61:d2:8c:fd:53:77:74:10:ca:82:76:
         5a:ab:a7:ae:7a:9f:d4:04:42:27:76:06:c6:21:df:85:90:d8:
         36:8e:d0:53:69:74:91:90:73:6f:de:96:f5:89:b1:42:55:52:
         91:5b:0b:17:9d:fc:fc:de:4a:64:76:0f:0f:fc:8c:56:fc:b2:
         68:99:f0:b7:58:72:c5:54:5d:a9:4b:8f:42:bd:9a:41:35:84:
         4b:68:61:d1:a9:02:56:54:49:12:a9:0d:c0:b2:bf:5f:8d:9c:
         45:60:34:33:b4:8e:bc:0a:22:72:99:f6:a6:36:6a:9d:9d:1b:
         b1:c4:f3:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnEpru05R1OfEA4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
ZGI0NjMyOGMtNDNjYy00NDU2LTliMDctN2U0N2IxZmMzYzZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTOaKTpVb0jIQE/jfuadSvx+v4p35/kzM07c
LxbBwHI/9b1awpLAv7QPRv3Zv7LISE4QN3H/6OfodVDWrmpvvLGQSENrphQEcRb2
hUXs623vKYKt/vTgj3eNz2heNwgnCwhwO3rkDnxyrH2xQ+YeeetD4HwzJNpr43JV
Q5VpKgg8T7rlyUPlLz+fOeppgyWmDOahWLwFq+uYA4S59YFVlkwkFuhR3pjPu3ir
ZPflUCl0Q3OvwOjq9bTfBPmlnbhGh/HZEuNpEij/iMppV06bwrB6+ZSgVmMl9N2f
LdYYVYidhdgG1iwWCsa9ZQq9OwUB0SxURIJNg9Vs7KNrD7YmEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMNcbqcKTalyPMxd+qo6Va+pZr0GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDllOGI0MTUtYzAwZS0z
ZTc3LThiMTctODFiNWY2ZDJmMjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROPpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjqTofHivYm5xN+w8sCloa7CXl/zBXvWT987fAqbSC3sbEPECMARpjS
mvX0E0xghK3FS0WsZjCkfWMQ9OdTNPCccf7F0O1JJq30YX3Rr0+udXArCyECo474
30bEdVLnSfCgCFQqjioSAIWuc35mvninZ8MOCd+CGLI2TYAOoYK442ttsEVh0oz9
U3d0EMqCdlqrp656n9QEQid2BsYh34WQ2DaO0FNpdJGQc2/elvWJsUJVUpFbCxed
/PzeSmR2Dw/8jFb8smiZ8LdYcsVUXalLj0K9mkE1hEtoYdGpAlZUSRKpDcCyv1+N
nEVgNDO0jrwKInKZ9qY2ap2dG7HE86k=
-----END CERTIFICATE-----
Generated at Wed Oct 15 23:33:24 2025 by rpki-client