Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/791dbf4c-b066-3cef-b4f3-7a91a6e2c803.roa
File:                     791dbf4c-b066-3cef-b4f3-7a91a6e2c803.roa (raw, json)
Hash identifier:          O8kJ7XzjzXHK2vJNFdoyQ3zQyrKQS1S3BrO5NWKiDXs=
Subject key identifier:   92:CD:65:78:E7:49:65:AD:BB:86:CF:1F:6C:AD:FB:72:D5:3C:2E:42
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F238570EF9C82602EEFA80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/791dbf4c-b066-3cef-b4f3-7a91a6e2c803.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        68.10.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:38:57:0e:f9:c8:26:02:ee:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=ca236028-cce7-444d-a0a0-ed647f4fd45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:03:8b:ce:d5:73:fc:94:86:a8:cf:bf:ee:f8:
                    ca:f4:63:0b:f5:50:12:d4:b8:fa:45:a0:11:50:4f:
                    09:01:67:a9:f2:a9:0a:80:90:22:fe:b0:19:58:91:
                    a3:52:e3:aa:03:04:ba:47:9d:b8:c2:cc:e0:88:67:
                    7c:e4:8a:a5:73:42:0d:a4:79:06:02:51:64:6d:e0:
                    64:ab:51:08:bd:da:64:c9:7f:eb:85:dd:fa:e2:77:
                    cc:d4:b4:01:a8:d7:5c:3c:e2:19:88:d9:79:d3:a3:
                    e5:a8:46:1e:c5:d6:fb:27:55:2c:ff:7d:30:22:0b:
                    54:93:69:62:42:c9:c6:3c:21:f3:01:e4:5e:25:17:
                    9e:18:57:f4:ad:c7:0c:51:4c:e4:d5:19:d0:5e:9f:
                    2f:20:86:1e:b0:2f:91:d3:e4:7f:9f:a7:1d:80:c8:
                    09:98:02:9b:7f:d8:ce:6b:6b:76:5b:d4:f7:b3:53:
                    18:a9:07:0a:3d:c5:ef:13:42:e2:eb:ae:8e:3c:34:
                    ab:d2:24:6c:5d:7c:b8:0d:3d:79:5a:9d:7f:88:d6:
                    d1:d4:a1:fd:7b:65:b9:74:14:58:1e:db:14:6a:70:
                    88:2d:5c:81:c0:b4:ca:b1:c1:6f:0e:c0:61:48:73:
                    ce:95:bb:4e:3f:ac:1c:3f:7d:c4:25:b7:a8:b9:a9:
                    2a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CD:65:78:E7:49:65:AD:BB:86:CF:1F:6C:AD:FB:72:D5:3C:2E:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/791dbf4c-b066-3cef-b4f3-7a91a6e2c803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.10.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:db:e5:93:7b:ad:ad:c1:99:16:ab:a3:d9:cc:65:3e:a9:fb:
         83:e5:38:25:99:b5:b7:d0:e5:23:bf:9b:aa:05:29:9c:22:e3:
         bb:ea:b5:73:9a:c0:e9:37:12:7a:28:64:c6:bb:9c:29:86:82:
         d5:77:95:e3:4f:09:32:48:00:7c:ed:19:e8:fb:7b:0c:7f:90:
         8f:dd:9d:d8:b4:1c:06:de:fd:c5:17:0b:01:bf:45:45:fa:1a:
         5b:63:50:e7:fc:23:6f:6a:71:c1:9c:45:76:cb:73:07:88:3f:
         fe:19:10:a3:1b:8c:1e:54:d9:a4:51:cd:ea:b7:86:7a:d9:84:
         9b:ab:6c:36:9e:65:59:6e:5e:9b:a0:03:f2:41:c1:85:ce:f9:
         08:c5:5a:4c:ca:70:40:1b:5a:ca:5e:bb:1c:56:91:59:65:ef:
         d6:4c:4e:60:c3:d8:33:e0:5b:9a:d4:5a:0b:7e:91:07:29:70:
         cd:58:c8:ef:8d:5e:79:0a:f0:32:8c:66:2a:4a:0d:5f:21:a7:
         0c:8c:37:1a:33:e9:64:7b:f7:46:6d:ab:6d:82:a6:30:a6:78:
         be:58:07:4b:8d:2e:9e:1f:4e:23:dd:b6:4a:cd:cb:f8:91:c3:
         77:4b:51:20:cc:4d:69:26:6c:4a:b9:2e:81:81:6f:01:4f:2e:
         62:10:39:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:36:07 2025 by rpki-client