Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d0e5e99-6237-307a-887e-da0b67480316.roa
File:                     4d0e5e99-6237-307a-887e-da0b67480316.roa (raw, json)
Hash identifier:          I2LlMzFXZYhQvlCM99fO1LUbfQ3/nsWZSCBaJTXp28s=
Subject key identifier:   13:5F:4A:49:F4:95:CD:DE:E8:B7:EE:B1:18:32:E6:AC:B8:6F:4F:BC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F21AD11009FB7FFB8A9100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d0e5e99-6237-307a-887e-da0b67480316.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        68.231.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:1a:d1:10:09:fb:7f:fb:8a:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=f663c16b-8262-4d52-970c-82ed2a7edb25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:bd:01:c3:51:32:9d:6c:e7:87:94:39:3c:fe:
                    15:e8:48:5a:ed:3f:70:01:bc:db:15:59:aa:dd:6e:
                    f5:a2:88:c6:45:51:62:78:14:63:51:53:e4:37:74:
                    f3:31:43:07:15:16:63:2c:16:f5:ba:eb:52:f1:87:
                    ca:9c:e0:f7:b3:b9:28:ac:c0:eb:f9:ed:a2:12:69:
                    89:04:0a:74:e4:74:a8:a4:07:61:d6:13:b2:ef:f7:
                    f3:6e:6f:75:df:23:a1:20:41:92:65:7b:4a:7f:21:
                    b9:e0:07:4f:36:78:68:01:66:52:e3:7d:02:ab:a6:
                    80:ee:bd:3f:d6:50:cc:e8:80:e3:3b:0c:71:39:27:
                    ff:fe:b9:7e:90:e6:cf:3a:71:71:d1:53:19:da:bd:
                    f7:02:34:4c:3e:39:f2:41:73:62:ae:0f:c3:13:7e:
                    e4:94:d1:c5:58:8d:21:62:18:91:c7:79:df:c5:94:
                    12:49:37:55:6a:10:e5:f7:63:13:c3:f4:8d:b2:8d:
                    38:47:3f:4a:0d:82:15:90:46:03:91:f2:4e:9d:a8:
                    54:9a:6c:58:d3:1e:2e:10:a0:91:c0:5f:ad:75:ac:
                    fd:85:ab:b3:ff:8a:92:3d:d1:80:98:9b:01:2c:cb:
                    39:9e:95:59:06:7f:de:a4:a3:8a:46:da:30:eb:82:
                    ab:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5F:4A:49:F4:95:CD:DE:E8:B7:EE:B1:18:32:E6:AC:B8:6F:4F:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d0e5e99-6237-307a-887e-da0b67480316.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.231.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:da:5a:fe:38:5c:d5:a6:aa:2f:19:9c:14:ef:b3:1b:bf:6b:
         c5:41:a3:cf:23:63:3c:0a:f5:53:0f:23:28:aa:2f:2a:c9:c5:
         24:f6:ba:03:39:7b:7f:16:29:c7:dc:9e:cc:2b:b9:b1:88:71:
         70:65:82:13:51:60:63:29:64:aa:4a:2b:9c:15:c5:14:43:e3:
         15:e6:e7:6a:03:11:54:ca:52:a7:e1:02:0e:82:d1:a2:77:0e:
         95:da:51:0a:2c:b2:1b:cd:ea:89:28:3f:a1:c5:3f:5a:6d:b5:
         2a:87:44:2e:3d:65:48:85:66:ca:98:23:5c:9b:8a:b2:62:52:
         18:bb:e0:9a:41:d3:f2:fc:88:1a:3f:6c:ed:cb:8e:3d:34:a1:
         c9:62:64:79:41:1d:4c:cd:0d:7f:16:89:79:f9:2a:27:89:c3:
         f4:6d:0c:2f:09:20:95:4c:9a:a7:1d:98:08:04:e2:70:da:32:
         ac:a0:a7:ff:7d:bf:dd:1f:35:47:e0:15:81:72:96:06:59:24:
         a0:1a:bb:1f:12:d7:2d:d5:cf:b0:70:19:12:48:94:25:95:e2:
         9c:16:77:cc:ed:b9:e0:52:2d:bb:81:60:50:38:eb:28:85:ce:
         85:e9:fd:b3:5f:69:88:7a:a7:2c:fa:53:50:c2:00:7a:3a:52:
         7c:71:3a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:26:42 2025 by rpki-client