Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/edb2450a-bcd3-3cdb-8b42-42797765e8de.roa
File:                     edb2450a-bcd3-3cdb-8b42-42797765e8de.roa (raw, json)
Hash identifier:          PIbk+Lg0mMfa9lW6slxWLeOYJC8mk4J2L7v3ZRPj0YM=
Subject key identifier:   15:56:A4:34:2B:A0:7A:0E:BB:F8:A5:0D:E3:4C:5D:2D:52:64:AB:A7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F238DA342B4ACCEBE84AA0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/edb2450a-bcd3-3cdb-8b42-42797765e8de.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        68.14.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:38:da:34:2b:4a:cc:eb:e8:4a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=86693bcd-b621-4940-880d-b00fe07ff7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f7:2a:75:e7:44:de:45:76:52:2e:7f:c7:bb:
                    ee:dc:11:e4:a4:1c:d1:17:a8:bd:90:99:73:8e:57:
                    4c:0e:54:d2:e1:2d:0a:12:d3:f9:fa:18:86:7e:72:
                    83:8f:bc:4d:2a:00:e9:2c:1d:20:72:eb:44:54:e0:
                    ce:7d:d7:8d:c2:39:d5:e4:38:78:dd:af:e0:a9:4e:
                    88:e0:5c:92:ff:c2:d0:1f:18:ba:31:95:8a:60:61:
                    8c:b7:b2:a5:68:50:f6:0c:f9:d3:17:40:a6:38:4c:
                    a1:ea:a1:31:d3:68:e5:3c:a2:1a:6a:3a:db:bc:4c:
                    f5:ff:d0:cc:ed:72:06:ca:8e:57:56:d2:4a:ce:22:
                    81:21:16:1b:5b:5e:0d:72:a2:fc:a0:a5:da:37:28:
                    b2:74:10:84:60:62:d6:8c:ca:30:9b:75:69:e3:a6:
                    cd:91:30:58:61:f1:ec:ab:aa:1a:2c:3e:95:93:33:
                    ad:c5:14:90:60:cf:bd:d6:80:e8:4a:ad:44:2d:d6:
                    fd:70:3d:7b:53:a9:1b:0c:ba:ad:6a:ac:67:db:c7:
                    18:6d:ca:1b:fa:e5:79:38:74:8f:d8:7b:9d:f1:ad:
                    2b:b7:c0:29:12:03:26:75:b2:0f:f7:9d:d7:7f:c4:
                    5a:91:b7:c4:ba:b8:b8:94:53:c3:cb:b0:83:cb:83:
                    15:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:56:A4:34:2B:A0:7A:0E:BB:F8:A5:0D:E3:4C:5D:2D:52:64:AB:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/edb2450a-bcd3-3cdb-8b42-42797765e8de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.14.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:22:16:1c:1a:a0:b3:62:c6:47:3f:3d:ee:15:b5:32:2a:f3:
         6b:9f:38:cc:48:08:e5:ce:8c:e1:9c:8c:23:6b:71:1f:9f:bb:
         01:34:56:52:68:3e:39:9e:0e:f7:ea:92:a3:ab:ce:e4:16:4c:
         00:73:68:f2:12:ce:45:1e:54:41:98:01:25:07:94:77:7f:15:
         01:51:9d:4b:01:cc:be:49:8f:1f:98:a6:56:f4:4f:9b:98:e1:
         bc:f9:a5:45:80:cb:63:ed:2a:67:1d:85:cd:1f:98:4d:af:3a:
         5d:dc:f5:cb:40:5f:97:3d:60:9a:bf:d6:54:eb:79:4f:dd:48:
         ea:c0:81:85:13:d5:34:5e:e9:78:24:13:ae:94:9d:cf:20:01:
         3c:e8:3b:6e:36:ff:e8:86:76:45:fc:9e:1f:6c:70:bb:e0:51:
         9e:aa:23:09:0f:1b:c3:3f:da:01:21:3f:d7:27:f8:62:93:4f:
         1c:bf:bf:f3:4e:be:8b:29:8e:fe:07:cd:ad:1f:8f:23:3e:bf:
         87:64:60:f5:0f:27:29:3e:d3:fe:16:64:74:2a:f9:13:b0:4f:
         9d:5e:32:07:74:7e:fd:c3:d0:82:cb:f3:98:05:c5:1b:07:0a:
         11:fe:6e:d8:96:95:f0:a4:a6:db:ab:5c:a5:96:aa:c6:ba:77:
         42:14:be:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:35:23 2025 by rpki-client