Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9956366-8d5c-394e-ad52-b655b4fb1121.roa
File:                     c9956366-8d5c-394e-ad52-b655b4fb1121.roa (raw, json)
Hash identifier:          gydyLPOmr68bxmvToN8I65/HIBfEpNGe7DkQQw/s0bk=
Subject key identifier:   7C:FD:65:6E:DF:D9:14:2B:6C:66:66:ED:48:E1:E7:7C:1F:4A:A4:CB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C5001466A277AB6E23A80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9956366-8d5c-394e-ad52-b655b4fb1121.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        68.230.32.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:50:01:46:6a:27:7a:b6:e2:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=cc1440c5-74c6-40b5-96f7-5c23e87a266e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8a:bf:29:74:09:d9:9f:3f:0c:95:9f:8d:51:
                    e0:83:2c:6d:6b:60:28:42:4e:84:d8:d0:7f:8f:57:
                    2f:45:8e:47:62:21:fe:3d:85:c0:1b:61:da:19:57:
                    21:aa:44:de:da:f8:96:c3:08:7f:f3:31:38:d4:21:
                    b1:59:7b:a0:c1:ee:77:80:56:b1:f1:e5:45:9f:4b:
                    80:66:47:85:1f:ea:c4:00:78:c5:68:c1:48:ff:e7:
                    5e:97:84:d0:a2:e0:9d:ef:50:7f:4e:44:ff:39:3f:
                    03:50:ac:68:80:38:39:22:05:13:88:b5:f3:3e:c8:
                    58:11:03:66:0c:5c:69:b7:1f:f3:1c:bc:ee:03:62:
                    9e:f5:d9:a5:9c:b6:b9:55:0f:2c:02:96:29:5d:9f:
                    c8:95:2a:a9:d9:0d:a4:7a:3a:93:5c:87:72:53:97:
                    ef:79:09:cf:16:d9:99:94:ab:97:9f:14:69:10:49:
                    2f:95:77:9c:cf:f8:d8:40:88:da:d4:b2:27:b3:2d:
                    cb:91:4b:01:80:46:c7:dd:9d:31:ac:8b:7b:b1:c4:
                    fb:ff:99:a9:77:ff:76:25:cf:0c:de:7f:47:b0:7b:
                    89:27:5a:43:3e:87:99:15:ff:3b:03:2f:25:ae:c2:
                    df:c0:56:91:94:21:db:a7:f4:bc:47:a7:fe:8d:54:
                    8e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FD:65:6E:DF:D9:14:2B:6C:66:66:ED:48:E1:E7:7C:1F:4A:A4:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9956366-8d5c-394e-ad52-b655b4fb1121.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.230.32.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:37:d1:07:f5:bc:7b:1e:c0:90:83:c2:1b:56:45:93:f1:0d:
         59:ec:2c:b7:f9:50:1e:59:48:6f:59:49:9f:ae:15:72:e2:e9:
         3c:25:6b:14:b0:a1:26:87:49:4c:90:7d:fa:95:62:bf:c0:0d:
         d3:90:c3:57:1b:25:41:cd:3c:ac:86:89:cb:46:2f:23:47:ca:
         8f:04:99:ae:67:c9:3b:45:75:49:a5:b6:38:9a:f3:8b:de:5c:
         51:f0:f4:6a:46:33:d0:a9:be:54:05:e2:86:09:c1:b8:b2:6c:
         f7:51:2a:b2:cc:5c:ff:92:93:d3:93:05:b5:b3:98:51:7a:ae:
         76:54:8e:83:6e:f0:dc:61:7c:28:da:cd:d7:99:4a:69:10:2a:
         4d:4d:4d:38:04:fc:49:06:aa:bb:c9:d0:7c:cd:82:4b:69:fc:
         5d:93:64:39:74:0a:f6:70:8a:21:da:f9:78:17:83:2f:d1:92:
         90:0d:dc:13:20:b1:68:b7:b8:25:81:f5:35:ea:20:77:ac:08:
         80:12:70:5a:5b:d7:e7:2e:4a:a9:ac:2e:a0:b6:f1:7b:cc:c0:
         c4:a2:95:68:89:01:9e:0d:6f:43:3d:cb:df:d8:e9:67:e9:58:
         7b:63:29:f7:d0:84:a4:b0:fa:ef:0d:6d:3b:c5:5b:80:de:13:
         f9:1b:76:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:22:05 2025 by rpki-client