Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/74adf2db-12a8-308a-8b7e-6f329b21b65c.roa
File:                     74adf2db-12a8-308a-8b7e-6f329b21b65c.roa (raw, json)
Hash identifier:          +7y9RtL/ABbVpnVE0W1pKdDXsYkjuvdCJkr26P34jQU=
Subject key identifier:   87:C7:AF:67:D1:10:B4:27:28:59:35:A3:34:97:D2:1A:94:59:C3:7D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1C373D60D28E5AB574555E00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/74adf2db-12a8-308a-8b7e-6f329b21b65c.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        68.3.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:3d:60:d2:8e:5a:b5:74:55:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=7366b705-7d80-4d71-8959-2b2207486af3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:95:53:0f:b5:e9:3d:6b:d5:e7:89:a3:6e:32:
                    fe:f2:0b:4d:40:8d:71:c8:97:1d:5f:9a:ff:b3:56:
                    e0:a9:8a:4d:93:d7:c7:75:e0:9a:12:eb:65:be:86:
                    f6:90:00:a8:ea:df:18:44:85:4d:fc:70:33:c3:6a:
                    ea:ac:7d:6a:54:a1:08:7a:e3:e8:44:45:61:51:34:
                    71:5e:a7:06:c2:d3:03:8b:ff:e8:6c:be:3c:87:dc:
                    45:d6:72:95:7c:71:95:04:ce:ad:ad:51:47:1e:90:
                    44:f6:35:4e:c5:25:37:ea:c2:cf:9a:5a:bf:74:9e:
                    5e:2c:e7:55:c2:bf:e8:ab:92:d4:02:4f:b0:34:eb:
                    4e:65:f1:bd:5c:d4:b2:59:1c:6d:e2:bd:39:0b:ce:
                    56:9b:ce:42:18:ea:f2:a9:2b:46:a6:f9:32:ed:c2:
                    37:b0:7b:31:f9:5d:73:7c:74:15:16:2a:c2:37:d7:
                    46:e7:50:23:63:6f:7f:1e:96:6b:05:df:62:da:1e:
                    ff:6d:74:f5:a0:5d:b0:fd:ca:ca:7e:f9:87:26:01:
                    b6:e9:74:34:43:89:7d:59:83:03:3c:3a:ae:81:b3:
                    a1:5a:d9:a4:fe:ca:95:4a:48:de:cb:f5:8d:ba:65:
                    a3:02:eb:ab:4f:51:34:62:ce:cc:ed:2c:ca:c2:ff:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C7:AF:67:D1:10:B4:27:28:59:35:A3:34:97:D2:1A:94:59:C3:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/74adf2db-12a8-308a-8b7e-6f329b21b65c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.3.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:eb:0e:d6:bb:a3:df:ec:83:e9:76:b9:62:2d:dc:84:81:49:
         d7:ff:6d:3d:a3:10:c7:cc:b8:9c:f9:38:ae:f0:2f:ae:60:0d:
         3b:ca:21:68:d1:8f:d1:12:c7:9c:08:c8:d0:39:e4:45:a0:9e:
         59:ad:24:d3:ba:9e:ae:95:a1:77:31:ef:9c:d2:7e:83:b9:9a:
         7e:ff:b6:1f:3d:54:98:55:b8:fc:66:06:3f:18:35:9d:2f:2e:
         3a:b6:e9:9d:17:93:ba:d8:51:49:01:58:e7:70:8c:a8:4a:f5:
         ce:4f:20:46:b4:e1:53:66:d2:a4:14:2d:5c:15:f9:8f:93:d5:
         62:8c:54:a3:8a:77:83:af:00:eb:21:ad:9e:09:d0:0f:9c:09:
         5e:ae:f9:1f:ae:4c:2a:8d:08:63:ee:0f:e2:7b:2f:63:21:d3:
         b4:f7:bb:fe:45:8c:37:2b:c1:86:f8:68:ec:a0:1b:f2:d8:04:
         63:4c:b4:2a:bf:76:41:4d:b7:ae:33:0a:72:21:db:14:c4:40:
         2a:17:b6:20:65:27:9a:73:1a:65:72:fb:20:81:9f:75:ad:98:
         99:0f:f6:69:5a:21:31:f0:ef:b2:e4:8b:3d:d4:3d:de:18:2a:
         90:bc:f7:ca:01:f4:ec:45:f9:14:90:33:0c:20:3e:c4:c7:13:
         70:63:27:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 01:40:03 2025 by rpki-client