Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f342d759-5e92-372e-bef5-c4dbf2076730.roa
File:                     f342d759-5e92-372e-bef5-c4dbf2076730.roa (raw, json)
Hash identifier:          uzWwUV2RaEfiuiJGwQjmWl4uzrTpSmnymK1jxmwLuuk=
Subject key identifier:   7B:D0:7D:A5:BE:B2:42:6F:A1:06:A0:70:34:D6:0A:42:18:FD:9B:F0
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B0A117E6BDEC905DBA9A714C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f342d759-5e92-372e-bef5-c4dbf2076730.roa
Signing time:             Sun 31 Aug 2025 13:00:42 +0000
ROA not before:           Sun 31 Aug 2025 13:00:42 +0000
ROA not after:            Sat 29 Nov 2025 14:00:42 +0000
asID:                     20269
IP address blocks:        68.228.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:0a:11:7e:6b:de:c9:05:db:a9:a7:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug 31 13:00:42 2025 GMT
            Not After : Nov 29 14:00:42 2025 GMT
        Subject: CN=b3f524fd-73a5-4411-b332-47157d0ee941
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:24:db:72:cc:53:72:46:ab:44:4f:f0:23:07:
                    e8:03:71:89:fb:17:f2:d1:af:a9:7c:c1:6e:81:d5:
                    5d:f4:7f:a2:ed:34:d6:2b:6f:24:08:e5:27:14:76:
                    db:92:c7:aa:a5:e5:3f:ca:45:b8:b3:d3:04:4e:44:
                    26:35:c1:8c:00:db:de:17:f3:ad:b5:a8:13:25:fc:
                    c8:34:b6:d3:b6:dd:45:e7:f5:6f:00:19:10:f3:fd:
                    3f:a2:69:82:fe:5e:39:0e:72:a9:fc:b8:8c:4f:72:
                    a8:8b:6e:58:4c:6f:c1:94:53:f7:ae:fc:a3:97:2d:
                    20:bc:eb:ad:ea:78:c2:07:ab:ba:f9:39:e2:b8:e3:
                    ce:f5:37:a7:c1:93:ee:11:b1:ed:98:69:18:d8:3f:
                    98:e0:a0:16:8e:92:3a:06:70:eb:49:ce:b0:3a:e7:
                    34:68:66:8e:30:61:5e:f1:26:c4:61:77:85:a3:db:
                    46:38:2c:63:99:d1:a0:d1:26:0f:a2:09:98:80:f3:
                    47:6f:30:98:44:f9:9f:f0:ac:1a:77:c3:11:f0:ab:
                    fd:1d:db:9c:c3:87:1f:b9:dc:ac:02:bd:ca:65:8e:
                    c2:86:7a:4e:25:de:36:c3:f6:6a:16:ae:30:73:9f:
                    ef:4b:ab:9d:d3:84:3b:d6:d9:8a:0b:5f:8d:44:fb:
                    d9:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D0:7D:A5:BE:B2:42:6F:A1:06:A0:70:34:D6:0A:42:18:FD:9B:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f342d759-5e92-372e-bef5-c4dbf2076730.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.228.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:9f:6e:fe:12:e7:56:62:d2:34:6d:e3:97:86:1f:38:25:82:
         57:a1:f9:ce:81:1a:41:f1:d4:0d:9c:6f:88:05:6f:e6:6a:de:
         74:dc:fc:13:23:09:fa:cd:e5:60:e3:63:93:75:4f:81:c6:77:
         cc:75:38:5f:a2:cc:e5:0e:fe:d0:df:fb:70:76:78:45:09:c3:
         53:c1:4d:b8:7a:d9:c5:ef:20:6f:f8:e8:8e:18:9b:fd:9f:16:
         cf:94:ed:99:aa:c6:f4:75:6e:7b:30:75:5e:6f:1b:d7:fb:05:
         dc:64:7e:39:ae:04:f5:e7:ef:f7:b7:4a:7e:e8:5e:5f:11:c3:
         67:8f:a1:68:aa:a6:e7:c1:43:1d:6f:bd:e3:95:d0:17:ea:cb:
         d0:25:df:bf:8c:fd:8e:d6:31:91:f4:f1:a6:fd:94:ae:47:85:
         53:ad:a9:24:ba:d1:07:9d:24:4e:5c:ed:67:98:c8:93:f5:c9:
         4a:b1:e0:a6:db:a3:67:b1:19:ad:9b:f4:2b:9a:54:3d:74:1a:
         f4:84:b3:91:80:a7:96:26:89:dc:cd:4c:67:af:25:04:42:4c:
         5a:41:31:4c:bb:c0:71:a5:bd:3a:ea:3a:97:a4:84:c2:b2:46:
         8d:d0:24:20:40:e4:6b:66:57:f9:78:66:e6:22:84:a0:fb:a5:
         d8:b7:93:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 02:03:34 2025 by rpki-client