Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c141c4ab-a9a8-3043-bff3-51ae5a42f996.roa
File:                     c141c4ab-a9a8-3043-bff3-51ae5a42f996.roa (raw, json)
Hash identifier:          v35SNI1VrAhTJgpyT3HiLAt2zVYn2tBIVvO+lL55ysk=
Subject key identifier:   74:B4:0C:F8:10:42:62:D5:2B:90:4C:75:E0:C1:46:0D:B4:44:DC:74
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1C3750234E495E20B4800D80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c141c4ab-a9a8-3043-bff3-51ae5a42f996.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        68.99.224.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:50:23:4e:49:5e:20:b4:80:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=93eb65c9-346c-4cc7-9052-4d54c45a8840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b6:e2:15:56:b9:aa:0c:e0:3a:8a:be:0d:c6:
                    87:31:ac:72:ed:2c:10:74:13:4b:28:8e:63:40:c1:
                    7e:55:92:c1:c5:f2:51:e9:09:dc:4e:2b:a5:71:34:
                    20:04:b9:2d:3d:42:f3:3a:ae:51:44:2a:51:c6:04:
                    ed:ef:0b:38:82:3c:aa:db:bb:34:4e:68:a3:0a:3c:
                    84:c2:57:c4:96:0a:e9:bc:26:19:03:6a:c2:0b:87:
                    d2:5f:de:0b:79:3c:e8:bb:23:3c:7e:43:9a:fc:a9:
                    ca:9a:7e:27:1a:81:02:be:7d:a6:9c:01:26:14:d8:
                    6d:d0:e2:65:61:21:74:2d:65:91:7f:4d:c0:69:ec:
                    ce:78:08:6a:67:d3:45:6c:6c:01:1a:b4:58:d3:7a:
                    31:9f:06:f0:5a:46:a4:07:b2:b9:0a:e2:2b:ba:98:
                    91:04:ef:d3:33:36:67:4f:35:5e:5a:d6:55:27:fe:
                    fc:2c:ec:0b:a3:be:81:24:a4:ea:ab:7d:87:ba:88:
                    88:05:5c:0c:44:28:97:3f:1e:2a:55:45:d3:69:46:
                    3c:e5:95:e9:e1:0d:c4:4d:00:51:3f:7b:86:7a:b5:
                    6f:cf:dd:72:1a:0d:bc:14:0b:d9:88:ec:2e:7b:50:
                    84:80:ec:8f:fd:29:3d:c9:93:8b:ea:59:a8:7a:e3:
                    ce:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B4:0C:F8:10:42:62:D5:2B:90:4C:75:E0:C1:46:0D:B4:44:DC:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c141c4ab-a9a8-3043-bff3-51ae5a42f996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.99.224.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:15:d3:94:f9:1b:59:bb:43:19:e5:61:4d:37:c1:de:bf:5c:
         af:54:48:01:e9:9c:82:c5:6e:6a:89:84:f7:01:5e:ae:8c:bb:
         69:c0:95:62:a6:7e:15:01:76:bd:f6:3e:26:60:52:b1:94:6f:
         34:f5:13:c1:20:00:22:de:1e:ab:32:02:19:5f:bd:8c:2a:4c:
         dd:df:7e:58:c3:ae:4a:77:54:e8:15:ab:67:af:58:4b:aa:a1:
         51:a3:8b:4d:80:d0:0d:eb:8f:9b:4b:a6:87:17:b4:fa:8a:f5:
         70:e5:e8:01:54:8a:5e:44:80:58:fa:15:2f:c9:97:d3:7b:15:
         62:05:50:a5:45:e5:e1:ba:0c:5a:e7:4d:29:b3:68:fa:a7:09:
         cf:6c:e7:8e:86:45:12:01:fe:4d:14:9b:9e:12:45:79:49:04:
         45:dd:0f:c8:e6:f5:c6:72:a9:24:e6:bd:31:a4:6b:20:52:c5:
         20:e5:87:c1:61:13:c8:a4:62:4e:c4:e4:c6:49:59:ca:26:be:
         52:e6:4c:e2:f4:12:d9:e0:ce:7b:ee:63:14:82:94:e7:0a:7b:
         38:c2:ec:69:8e:e2:23:11:8c:ca:4c:cf:60:34:0c:29:49:78:
         5b:51:d8:78:e1:79:fc:58:05:5f:d5:d2:ad:4e:38:3c:59:51:
         64:5c:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:20:36 2025 by rpki-client