Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3d1a1ca-e714-3014-a6b5-f78c54c90f2e.roa
File:                     b3d1a1ca-e714-3014-a6b5-f78c54c90f2e.roa (raw, json)
Hash identifier:          4R0Eo8M9q/vT6I0S7s2omFgQwYSFRLTsFcShJJyuQjM=
Subject key identifier:   02:B3:48:2A:E9:35:18:73:E4:70:92:73:1A:27:71:D3:DA:EC:5B:2B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B2067009CC4800E86CFD17700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3d1a1ca-e714-3014-a6b5-f78c54c90f2e.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        68.224.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:00:9c:c4:80:0e:86:cf:d1:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=e6a67caf-c9d3-4046-aa92-f2aa6097be44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:46:68:d1:57:b9:2c:1d:3d:ea:fb:ca:6c:fa:
                    0a:57:40:24:2e:bd:89:ff:4d:3d:61:ab:77:40:78:
                    89:ad:3f:16:df:b2:c6:45:32:db:6b:f2:f0:46:2b:
                    32:0c:d7:e8:a7:b6:17:e8:85:1a:b1:62:ef:f7:14:
                    1c:47:c5:1f:2a:33:09:aa:88:a1:e0:e6:4d:c9:39:
                    7f:bd:51:95:5c:12:f4:a3:d3:20:50:57:80:55:62:
                    82:de:46:37:6f:53:8a:f2:00:d5:b7:09:1b:7a:92:
                    13:97:80:33:04:d2:1a:2c:6b:1d:bb:68:a8:ba:ed:
                    9a:a8:c8:67:5e:2c:54:45:b0:63:98:ed:f7:58:89:
                    a4:91:70:3d:e1:f1:c2:37:68:e5:5c:14:51:23:10:
                    10:d2:26:0e:8b:89:f2:62:fa:72:6d:03:18:8f:7c:
                    d8:ca:06:1b:72:e1:92:a9:7e:57:8f:08:ee:a5:d0:
                    a4:e9:c4:9e:36:de:3a:7c:e2:72:0c:75:59:7f:be:
                    41:33:ca:39:39:3c:7d:ad:90:b4:5e:b0:21:e3:6b:
                    f3:c6:c7:69:cf:cb:88:83:1e:e0:d9:fb:59:ab:14:
                    d5:55:70:0c:12:88:95:6e:8b:f9:01:34:98:d2:2c:
                    c0:19:85:c6:b4:5e:13:f0:4d:05:45:a4:be:c8:a8:
                    ff:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:B3:48:2A:E9:35:18:73:E4:70:92:73:1A:27:71:D3:DA:EC:5B:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b3d1a1ca-e714-3014-a6b5-f78c54c90f2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.224.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:78:30:c8:cf:6c:d4:01:5c:ba:45:b0:db:30:e6:b2:a2:f7:
         be:b4:8f:ca:f4:cf:79:c2:26:53:fc:07:91:91:aa:90:ec:8b:
         57:60:32:8f:55:3d:e4:a4:6e:7b:21:6a:85:9a:ff:fa:53:42:
         0e:3f:91:42:4f:a3:2c:5d:79:de:27:52:81:78:45:bd:40:a4:
         cf:8f:0c:67:68:d4:ff:f8:8e:3a:eb:24:e9:57:d9:c7:02:cd:
         5b:11:07:f6:7d:d7:a3:58:ca:7e:9e:1e:25:b9:42:55:13:5f:
         7e:6a:55:1c:b6:1d:03:b0:38:ef:9a:88:e9:08:6a:c0:64:fe:
         4b:89:ed:d2:5c:df:4d:ff:51:c2:f0:c9:42:da:0d:56:98:82:
         18:07:e8:d0:40:90:74:9e:7b:a7:8a:e5:c4:09:8e:4f:7c:36:
         2f:c3:79:b2:8b:9f:b2:51:4b:d9:47:b6:a9:95:84:12:b1:a0:
         42:f0:2e:29:14:00:fb:3e:9b:d6:8e:e6:2c:5f:6c:91:9a:56:
         ad:17:d7:db:57:2a:dd:ce:1b:20:82:36:5a:8d:00:69:6e:d9:
         09:9e:b3:0d:3a:75:fb:2d:8c:36:58:dd:d3:d1:1c:89:49:ac:
         cc:eb:89:f4:61:77:2a:bd:8d:43:ce:be:25:bd:ca:d8:91:64:
         31:e0:38:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 01:37:19 2025 by rpki-client