Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9385082e-5803-3163-baea-1f8c50d29c52.roa
File:                     9385082e-5803-3163-baea-1f8c50d29c52.roa (raw, json)
Hash identifier:          ChPunrFnvcyHV9kg+q7DgWa6InosOFo36DbKKcwurp4=
Subject key identifier:   7F:FE:4E:BF:37:BE:C1:E9:9A:C2:0B:DD:AE:29:0F:2E:18:11:5A:39
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B196C234184019CA647AD8280
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9385082e-5803-3163-baea-1f8c50d29c52.roa
Signing time:             Sat 06 Sep 2025 01:00:33 +0000
ROA not before:           Sat 06 Sep 2025 01:00:33 +0000
ROA not after:            Fri 05 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        68.2.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:19:6c:23:41:84:01:9c:a6:47:ad:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  6 01:00:33 2025 GMT
            Not After : Dec  5 02:00:33 2025 GMT
        Subject: CN=6e21a7c5-0821-4a1d-8406-b81d2108abbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1d:96:7e:a5:78:f3:bd:d0:42:c2:22:9e:11:
                    b8:c9:17:86:2d:f0:2c:cb:b5:a5:7b:d6:0a:f2:f2:
                    d4:81:59:f4:f8:b8:e5:e9:aa:90:65:71:08:12:95:
                    14:c3:21:53:0f:63:c3:e5:24:e8:eb:4d:e0:0f:9e:
                    bc:27:fa:43:25:d9:18:b9:e6:5c:fd:3d:36:7f:53:
                    f7:f7:c3:d1:32:3f:ef:8c:37:8e:18:95:4c:4c:61:
                    8f:26:b9:c0:e1:63:52:35:c5:1c:92:ec:ff:70:54:
                    12:5c:89:8b:ee:e1:37:bf:d2:04:aa:9e:48:16:cd:
                    e8:e4:03:d0:4f:7e:50:d6:8a:24:ad:44:67:6c:f0:
                    71:b1:df:37:70:1b:3d:70:43:a4:63:c7:8b:da:58:
                    bf:d0:ec:4d:41:1c:54:2b:58:2b:53:a6:48:36:96:
                    dd:f7:ee:00:79:e1:87:e3:24:85:8c:09:46:7e:ec:
                    e6:3e:25:29:c7:7d:26:7a:80:dc:ae:f2:e3:82:6f:
                    b4:bb:04:a4:56:84:0c:1a:b8:49:5f:9e:cb:a7:08:
                    24:50:b7:58:38:86:1d:e9:41:30:9e:65:0d:e5:3f:
                    4a:8b:12:92:46:a5:46:f2:44:59:69:b3:bb:ba:23:
                    5e:0e:bf:bc:78:16:01:ca:8e:19:40:36:fd:61:17:
                    7d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:FE:4E:BF:37:BE:C1:E9:9A:C2:0B:DD:AE:29:0F:2E:18:11:5A:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9385082e-5803-3163-baea-1f8c50d29c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.2.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:8f:65:d6:17:aa:03:92:29:28:82:3d:ca:43:81:8f:b4:55:
         2d:28:b9:97:7a:00:95:c4:7e:3b:8b:9d:9f:4e:ec:37:41:c0:
         67:53:63:76:bd:b0:b2:34:51:0e:0b:66:7e:9b:72:54:f1:a6:
         cb:76:7f:43:99:6e:33:fe:65:cd:eb:1c:ce:8d:48:ff:3b:16:
         2f:e6:06:b1:4d:ed:a2:d5:b5:ae:c0:28:c8:30:99:48:b5:8b:
         53:9b:ce:c1:76:f2:eb:c5:c8:44:7f:4b:eb:6a:c3:f0:88:a1:
         e8:b1:3f:76:f2:81:f6:4d:1b:5e:0e:be:8f:e2:92:28:99:6a:
         c2:e5:61:69:7a:e2:df:37:63:29:c3:a0:b4:56:0c:9b:9d:67:
         60:93:7d:1d:2b:f5:14:a0:99:80:cc:07:8f:6b:46:21:99:51:
         5e:f2:20:f4:46:dc:b4:b8:0d:80:9b:5e:29:e6:18:a3:05:35:
         b9:8e:ac:c0:75:3d:31:67:e3:92:c2:b7:a8:89:68:9d:e9:8a:
         38:b0:34:43:16:01:73:5b:84:1c:1b:b0:3b:91:6c:60:69:c7:
         ff:de:4a:10:48:20:65:24:a1:10:a7:f2:59:61:da:61:79:b4:
         52:d4:2d:bc:6a:f6:96:cf:8c:48:3d:67:a0:d6:de:d0:98:2c:
         aa:8d:37:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:24:07 2025 by rpki-client