Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/61596b34-73ed-3c28-9c1b-cee0dcdfad9d.roa
File:                     61596b34-73ed-3c28-9c1b-cee0dcdfad9d.roa (raw, json)
Hash identifier:          /Y+8VYXhbtwwPsmNqAnuXuHmQGqKhC/hHyQq0T7A+yc=
Subject key identifier:   E4:C7:70:1E:A5:5B:41:A8:DC:09:57:11:EA:49:AA:E0:FD:82:30:9A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B2066E4C5C03A8C18CD36AE40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/61596b34-73ed-3c28-9c1b-cee0dcdfad9d.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        24.253.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:e4:c5:c0:3a:8c:18:cd:36:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=47e9babf-fe23-47b9-8778-55b8bf9719f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2f:ff:57:7a:3c:f8:5e:5f:63:58:97:26:0f:
                    7b:ae:90:3f:6d:c5:cb:90:83:fe:d2:a2:94:cb:d6:
                    57:42:b9:6b:df:6f:73:d8:d6:d4:ae:5f:f8:a5:21:
                    02:cf:1e:5b:b7:e4:a5:1b:b7:c4:f6:4c:6a:03:90:
                    8f:57:d3:74:ea:4f:32:56:05:b5:d4:e5:1e:c4:d3:
                    d6:a1:e0:ae:3e:fe:a3:21:b9:f3:e2:b5:fb:37:9e:
                    06:d4:52:f8:39:cd:cc:c4:b6:f5:1c:57:02:69:5d:
                    1a:dc:6c:b2:69:a2:90:e3:94:eb:2a:7f:cd:2f:08:
                    ab:34:98:77:68:b2:d9:ba:01:b8:3a:74:92:0a:fd:
                    42:79:07:21:2f:a8:14:8e:b8:d8:ff:b7:75:37:1d:
                    82:94:71:be:c6:af:fa:8d:9d:f2:7a:4c:a2:3a:fa:
                    1e:19:fc:a0:1a:a6:93:4d:1a:d8:dc:32:76:75:a6:
                    d1:4d:e1:df:e8:86:c2:f9:9d:0e:5a:97:92:ff:87:
                    4b:71:ec:fc:e1:be:cf:31:c4:22:91:8d:4f:f3:7a:
                    20:ec:09:32:8e:89:38:e6:12:ed:30:7c:7d:26:8d:
                    4c:d8:dd:83:b1:d9:f4:6e:5d:e4:22:55:01:be:5c:
                    fe:f3:1b:70:d8:6d:63:b6:6e:a3:48:ed:76:e7:87:
                    73:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C7:70:1E:A5:5B:41:A8:DC:09:57:11:EA:49:AA:E0:FD:82:30:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/61596b34-73ed-3c28-9c1b-cee0dcdfad9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.253.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:7c:44:52:38:2e:b2:56:73:02:67:0a:c8:bc:54:32:64:99:
         3d:46:eb:1b:c3:2a:85:4e:86:a3:be:f6:ae:1c:17:c9:7a:3a:
         ff:f7:e3:59:ea:ee:02:03:9b:68:4e:30:31:b2:cd:e2:c0:f4:
         5b:fe:cb:b6:36:ae:82:42:8c:a6:65:24:57:35:3d:af:7c:c4:
         b5:65:bd:3b:8e:92:01:e2:35:d8:d2:79:19:15:c7:22:9d:77:
         74:f6:03:83:52:b8:b2:ef:1e:fb:d9:62:34:0f:e3:00:86:63:
         e8:c6:19:e8:62:86:9a:cd:7e:50:7c:c6:2e:56:30:85:ef:56:
         d6:86:a8:01:98:dc:42:5b:07:63:a2:c1:2f:cf:81:1d:05:45:
         4f:b6:89:db:9a:1e:59:5d:51:87:15:9e:b2:eb:45:39:44:20:
         0e:2b:51:3f:8e:85:b4:30:1e:7f:20:af:f5:a2:b8:94:ad:c9:
         5d:be:1b:b4:43:9f:8a:89:06:28:16:d2:48:b1:a6:e3:b4:56:
         d2:9b:b6:33:07:86:9b:71:ed:72:19:c2:2e:e0:7a:ab:e4:98:
         54:c9:25:f1:3b:43:31:65:73:45:21:7c:8a:b5:cb:cb:b5:c1:
         df:6d:f4:94:a8:27:45:d8:0e:07:d0:30:bc:bd:48:a9:4c:1f:
         d3:24:02:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZuTFwDqMGM02rkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk
NDdlOWJhYmYtZmUyMy00N2I5LTg3NzgtNTViOGJmOTcxOWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS//V3o8+F5fY1iXJg97rpA/bcXLkIP+0qKU
y9ZXQrlr329z2NbUrl/4pSECzx5bt+SlG7fE9kxqA5CPV9N06k8yVgW11OUexNPW
oeCuPv6jIbnz4rX7N54G1FL4Oc3MxLb1HFcCaV0a3GyyaaKQ45TrKn/NLwirNJh3
aLLZugG4OnSSCv1CeQchL6gUjrjY/7d1Nx2ClHG+xq/6jZ3yekyiOvoeGfygGqaT
TRrY3DJ2dabRTeHf6IbC+Z0OWpeS/4dLcez84b7PMcQikY1P83og7Akyjok45hLt
MHx9Jo1M2N2Dsdn0bl3kIlUBvlz+8xtw2G1jtm6jSO1254dzQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOTHcB6lW0Go3AlXEepJquD9gjCaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjE1OTZiMzQtNzNlZC0z
YzI4LTljMWItY2VlMGRjZGZhZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBGP08MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJ8RFI4LrJWcwJnCsi8VDJkmT1G6xvDKoVOhqO+9q4cF8l6Ov/341nq
7gIDm2hOMDGyzeLA9Fv+y7Y2roJCjKZlJFc1Pa98xLVlvTuOkgHiNdjSeRkVxyKd
d3T2A4NSuLLvHvvZYjQP4wCGY+jGGehihprNflB8xi5WMIXvVtaGqAGY3EJbB2Oi
wS/PgR0FRU+2iduaHlldUYcVnrLrRTlEIA4rUT+OhbQwHn8gr/WiuJStyV2+G7RD
n4qJBigW0kixpuO0VtKbtjMHhptx7XIZwi7geqvkmFTJJfE7QzFlc0UhfIq1y8u1
wd9t9JSoJ0XYDgfQMLy9SKlMH9MkAtA=
-----END CERTIFICATE-----
Generated at Wed Oct 15 21:25:43 2025 by rpki-client