Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6fd6d3b9-e4dc-3e32-b2cb-bb8bd193282d.roa
File:                     6fd6d3b9-e4dc-3e32-b2cb-bb8bd193282d.roa (raw, json)
Hash identifier:          Z+ghGEIvg+ClZQaCrtua3sfIN5iycCXufyh5gi8Pu/o=
Subject key identifier:   6A:A0:EA:23:9C:9E:FD:88:7F:7D:AF:D2:26:02:A3:F9:2D:5A:1A:A7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F28754791348A463F23FA0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6fd6d3b9-e4dc-3e32-b2cb-bb8bd193282d.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        68.230.138.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:87:54:79:13:48:a4:63:f2:3f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=42aaa999-ae9f-43bc-851a-58fd5001d075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c2:f6:b0:0b:47:87:97:42:6c:b9:69:f0:af:
                    63:26:67:ec:97:51:b3:6c:81:cf:30:48:bc:10:ac:
                    df:63:21:be:3a:17:18:e1:a8:17:d8:a7:7e:10:18:
                    e2:0b:5c:3f:da:dc:8c:40:cd:56:8c:c2:e7:f1:89:
                    0a:6f:e7:00:16:3f:58:77:9f:7d:61:3e:ce:3d:73:
                    9d:06:06:15:2d:19:05:34:84:63:d7:ad:cc:ec:d9:
                    c1:ca:7b:2d:11:9f:50:e5:98:bb:24:91:cf:73:b9:
                    0f:4a:7e:97:65:bf:74:bf:46:3f:05:bf:3e:c2:ee:
                    02:32:05:58:95:49:cf:03:58:cb:00:6e:b5:95:65:
                    68:2d:ac:5f:47:96:27:1d:93:e9:bc:e0:c9:bc:df:
                    52:e7:57:ae:b5:7e:84:5c:93:82:2e:36:b7:7f:2b:
                    f3:2a:3b:0d:82:b8:77:d0:0d:80:b5:2a:fa:f7:cd:
                    07:b7:ae:ee:f1:a7:8e:62:a9:eb:3b:c8:a0:54:d8:
                    d7:0b:cb:62:37:58:84:57:e8:69:ba:75:53:8c:f6:
                    ce:47:22:f5:8d:1c:45:b4:b2:fc:90:dc:8e:67:85:
                    ea:b6:de:33:dd:6f:8e:f4:0f:74:02:bd:4d:9e:98:
                    23:46:58:88:1c:3d:39:d1:be:92:0d:a2:ba:07:2d:
                    66:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A0:EA:23:9C:9E:FD:88:7F:7D:AF:D2:26:02:A3:F9:2D:5A:1A:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6fd6d3b9-e4dc-3e32-b2cb-bb8bd193282d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.230.138.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f4:5a:a8:01:76:05:a2:8d:6e:0d:18:d3:6d:83:d3:9a:a9:
         66:f3:27:69:65:a7:49:24:46:a9:c1:e9:1c:db:5a:8e:86:81:
         dd:bd:a8:bb:8e:99:53:5f:4d:e8:e9:ce:7b:74:f6:06:b4:a6:
         dd:32:d8:5c:b4:b3:0c:e5:a7:1d:dd:9d:0f:d7:f1:a0:cb:2c:
         11:dd:f0:10:13:0b:e4:2d:0c:49:76:dc:03:0e:d5:2a:52:cb:
         71:da:84:58:88:c6:64:b7:2c:e5:4d:4a:3b:ef:fb:cd:4e:d8:
         69:dc:7c:79:14:cc:ac:c5:c1:a1:77:ba:be:58:c8:5e:3b:3c:
         7e:f1:f8:2f:b2:d0:5f:e6:64:16:04:6b:5c:d2:f4:79:31:bb:
         64:24:ac:9b:c8:a6:de:c4:21:15:25:ba:52:23:7a:00:2d:b4:
         33:1f:0b:be:f7:2b:bf:9b:3d:b3:1a:75:d3:8a:75:0b:26:c2:
         61:b2:7e:03:33:ac:db:93:bf:fe:68:3a:35:29:1a:76:9e:2d:
         fe:03:bd:0e:7e:57:4b:08:66:1b:b6:16:bd:5a:3e:b8:59:ca:
         e1:26:4a:37:20:34:3a:0f:bd:fe:ee:cf:5d:f1:59:35:67:1e:
         05:16:6b:72:6d:6e:c2:7e:38:78:92:c4:47:53:70:07:24:7b:
         19:4e:05:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:28:37 2025 by rpki-client