Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b0dd4280-21b4-3f0b-9b83-6c418d1dbcff.roa
File:                     b0dd4280-21b4-3f0b-9b83-6c418d1dbcff.roa (raw, json)
Hash identifier:          +R3fnGPtK+MTY8ETHJGhv0rpDA1oc2/TgpA1c6OffMg=
Subject key identifier:   DB:F0:B0:40:F0:E5:A5:15:C5:48:02:5A:FA:9A:D5:31:ED:C3:90:F8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C380C7C7FA3D655540B00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b0dd4280-21b4-3f0b-9b83-6c418d1dbcff.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        68.104.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:38:0c:7c:7f:a3:d6:55:54:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=e622587f-7d18-4713-a270-705186e1ffb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1c:5a:5f:d5:ad:57:5d:da:97:9b:46:85:48:
                    54:e3:4c:7e:5e:23:5e:bf:b0:2c:37:c6:45:20:ce:
                    b8:25:8c:84:03:c6:79:03:f3:26:87:0b:9d:89:12:
                    5b:c3:25:cb:71:78:3e:aa:f0:a4:7d:0e:b6:46:ed:
                    6d:9e:e6:e7:fc:a6:a1:f6:ab:c0:2a:d0:11:23:85:
                    16:e4:5e:e4:84:86:ae:4a:5e:af:ce:0b:52:c2:7b:
                    5d:c0:14:ce:51:6c:2e:a4:44:5c:46:71:9f:c0:92:
                    3f:38:50:d3:fd:72:02:5e:3f:21:35:7a:e6:08:c2:
                    e9:42:24:36:1c:86:0c:f2:4c:38:d9:4b:b9:ae:88:
                    06:b3:99:87:55:38:a7:51:42:26:60:db:e3:e6:b5:
                    25:6b:ca:88:06:10:80:2f:16:73:d3:54:8e:f4:6c:
                    22:a2:e2:ed:ca:d9:d8:7d:c7:d9:7e:75:a8:64:01:
                    9e:c3:8f:ec:c7:9a:da:b0:b8:00:24:95:e8:7d:4a:
                    11:e8:90:bd:20:1f:7d:f5:56:a6:a9:f8:db:cc:93:
                    06:fb:37:49:91:bc:18:53:cb:d8:40:5b:6c:86:14:
                    f3:d3:72:db:55:f7:3e:ee:a3:76:6f:92:d3:1d:d3:
                    7f:ad:a8:c3:66:6b:d8:10:f8:81:b8:d1:2d:21:e1:
                    77:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F0:B0:40:F0:E5:A5:15:C5:48:02:5A:FA:9A:D5:31:ED:C3:90:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b0dd4280-21b4-3f0b-9b83-6c418d1dbcff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.104.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e9:db:5e:ff:6d:36:71:73:45:30:24:91:b6:c3:9d:14:25:
         ee:32:d9:b6:9b:1c:57:e9:4e:b1:ec:52:8f:78:99:2c:6a:90:
         59:c8:4a:25:85:e8:c9:a3:3a:fa:37:53:1d:ee:9c:5e:0e:96:
         69:a8:a7:88:77:16:5d:c9:f6:1a:a6:98:dc:b6:89:da:26:49:
         ff:00:78:6a:ce:14:cd:67:39:94:b0:35:1e:96:63:ab:b8:24:
         42:03:cd:e8:27:73:b8:7e:38:7e:2c:b6:be:78:92:ed:91:d3:
         21:c9:45:59:f1:4f:a4:80:e8:0b:26:e8:bd:10:b1:53:54:0d:
         a6:7c:c9:80:e2:89:8b:d5:f0:27:eb:08:35:26:00:4e:d6:62:
         85:5d:58:27:95:f1:cd:c1:a0:37:28:6d:4c:b1:bc:a6:a0:29:
         c3:2b:4b:32:fb:c2:f9:84:62:c2:e5:db:32:73:91:32:b7:75:
         d3:85:62:33:2d:a9:91:15:5b:90:7c:33:76:51:83:94:ae:26:
         04:84:f9:ff:a4:ed:d6:6b:c5:45:34:14:27:48:56:40:68:77:
         f1:a0:e0:77:ed:b3:d4:fb:5d:d0:52:ee:d3:d4:bd:01:59:c9:
         e0:f0:77:67:99:6f:5a:03:37:c9:51:7a:a5:8a:6a:c4:b5:ec:
         a9:57:00:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:22:23 2025 by rpki-client