Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9a906dc-54bd-31b7-b620-94f70204197d.roa
File:                     e9a906dc-54bd-31b7-b620-94f70204197d.roa (raw, json)
Hash identifier:          RPKtPC2fT3+IieJo76JeATpY3IJ3hTSf3OYiqNbHFN0=
Subject key identifier:   73:0B:D3:04:DF:26:8C:09:2D:B7:5A:A1:2C:53:DC:D2:03:08:97:5B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F220AB6D74B84F85E8DA80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9a906dc-54bd-31b7-b620-94f70204197d.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        68.1.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:20:ab:6d:74:b8:4f:85:e8:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=25b13b32-ffc0-4eb0-90a2-c2da8d61851f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:3e:3a:df:28:a1:66:d7:36:d0:2d:00:09:
                    03:c0:00:2f:b3:22:6c:c2:b9:19:5f:b7:8f:c9:d9:
                    70:c5:b6:55:1b:c0:5a:7f:9f:85:6e:bd:fc:0f:51:
                    75:ee:7d:4b:e6:67:12:3d:3c:6a:51:a7:c7:ef:90:
                    b3:ac:31:9a:ef:ec:a7:43:7f:4b:a3:65:e3:1b:98:
                    ee:a5:71:59:d4:bc:ae:55:d5:fa:44:c6:53:ea:24:
                    65:24:06:76:d2:ef:b4:0f:65:cd:7c:57:91:11:9c:
                    0b:72:6a:c0:4b:35:2a:0b:66:34:7e:df:cd:24:91:
                    c7:a4:c8:15:c6:60:d7:20:5f:e6:58:9f:a9:b4:d5:
                    c8:f3:34:ad:4b:0c:cf:5d:96:60:8e:7c:d9:b3:aa:
                    e7:2d:aa:95:1f:b4:8c:6f:34:fc:c8:a5:df:81:a1:
                    16:ff:cd:53:5a:e0:04:51:f9:4c:ee:9e:56:23:41:
                    a8:af:a8:e1:ae:30:fc:68:0d:ef:8b:2b:98:99:cc:
                    27:55:6a:ae:5b:a5:00:dd:e6:42:f9:56:c0:6d:e3:
                    b4:74:f0:14:c9:cb:2b:ad:4b:9f:8f:0d:47:d0:20:
                    ad:b9:17:ff:7c:10:f1:23:3b:38:b9:c7:7e:54:fa:
                    85:a3:7b:79:82:c7:f3:82:94:a1:87:fb:f8:6e:15:
                    09:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:0B:D3:04:DF:26:8C:09:2D:B7:5A:A1:2C:53:DC:D2:03:08:97:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9a906dc-54bd-31b7-b620-94f70204197d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.1.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:74:74:91:9a:46:b9:b6:50:7a:09:52:79:32:35:a3:d5:d7:
         ce:8d:62:0f:d2:d2:82:b1:9b:6b:57:29:82:b4:e7:31:f9:e7:
         ae:d4:48:d7:1b:f3:aa:5e:5f:3f:f4:c8:79:3c:b4:5f:cc:f4:
         f4:d3:d2:45:45:c5:5b:4a:1b:14:a5:b4:5d:ea:e3:25:ff:8e:
         e1:45:b7:b3:4d:d5:a7:c6:b5:f7:85:7e:09:0d:0e:6f:65:21:
         b7:64:74:20:4d:c3:5f:72:3e:02:cb:9c:35:82:60:32:d7:80:
         9e:35:7b:5a:3c:4e:3b:1c:45:8f:d5:f1:2c:03:df:6d:fe:b8:
         1f:ad:27:36:13:00:92:67:22:c9:f4:7c:c3:89:91:c7:fc:56:
         b2:02:19:1b:15:2b:74:0b:a2:55:e8:7c:4d:f6:53:18:bb:38:
         61:b1:f6:6e:58:54:c2:a6:86:a5:7a:30:e7:00:47:50:a7:8c:
         4f:ab:33:fc:65:31:bf:44:84:24:a8:4e:df:0a:52:9d:68:3e:
         c3:7f:62:ee:62:e6:9b:bf:ac:8b:ab:a7:58:d0:6d:74:85:e8:
         5b:3b:5e:e9:f5:2d:2e:0d:27:e8:06:c0:2f:5f:e5:b8:ee:9c:
         37:b9:2c:0a:1f:6e:c4:d8:66:98:65:bd:bf:a6:dd:ff:a2:01:
         c8:12:08:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28iCrbXS4T4Xo2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk
MjViMTNiMzItZmZjMC00ZWIwLTkwYTItYzJkYThkNjE4NTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRU+Ot8ooWbXNtAtAAkDwAAvsyJswrkZX7eP
ydlwxbZVG8Baf5+Fbr38D1F17n1L5mcSPTxqUafH75CzrDGa7+ynQ39Lo2XjG5ju
pXFZ1LyuVdX6RMZT6iRlJAZ20u+0D2XNfFeREZwLcmrASzUqC2Y0ft/NJJHHpMgV
xmDXIF/mWJ+ptNXI8zStSwzPXZZgjnzZs6rnLaqVH7SMbzT8yKXfgaEW/81TWuAE
UflM7p5WI0Gor6jhrjD8aA3viyuYmcwnVWquW6UA3eZC+VbAbeO0dPAUycsrrUuf
jw1H0CCtuRf/fBDxIzs4ucd+VPqFo3t5gsfzgpShh/v4bhUJkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHML0wTfJowJLbdaoSxT3NIDCJdbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTlhOTA2ZGMtNTRiZC0z
MWI3LWI2MjAtOTRmNzAyMDQxOTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAGoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABJ0dJGaRrm2UHoJUnkyNaPV186NYg/S0oKxm2tXKYK05zH5567USNcb
86peXz/0yHk8tF/M9PTT0kVFxVtKGxSltF3q4yX/juFFt7NN1afGtfeFfgkNDm9l
IbdkdCBNw19yPgLLnDWCYDLXgJ41e1o8TjscRY/V8SwD323+uB+tJzYTAJJnIsn0
fMOJkcf8VrICGRsVK3QLolXofE32Uxi7OGGx9m5YVMKmhqV6MOcAR1CnjE+rM/xl
Mb9EhCSoTt8KUp1oPsN/Yu5i5pu/rIurp1jQbXSF6Fs7Xun1LS4NJ+gGwC9f5bju
nDe5LAofbsTYZphlvb+m3f+iAcgSCDM=
-----END CERTIFICATE-----
Generated at Wed Oct 15 21:28:50 2025 by rpki-client