Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f371f248-24ef-3f97-826c-c37fcf706e5f.roa
File:                     f371f248-24ef-3f97-826c-c37fcf706e5f.roa (raw, json)
Hash identifier:          xr++kYL+w7B8DmG+xtUbV6TOCbQ0NrsZUJOO2PK36IY=
Subject key identifier:   E0:36:ED:C7:9E:E1:B6:08:B4:74:26:F5:AA:4D:4E:11:6F:89:11:2F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F2182F34C866C74165EF90
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f371f248-24ef-3f97-826c-c37fcf706e5f.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        68.98.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:18:2f:34:c8:66:c7:41:65:ef:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=566001b3-2d4d-4448-a5c6-697c4fa05a6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:58:5e:9f:e2:ca:aa:47:6a:8d:7e:f4:cb:60:
                    e3:cf:c7:0d:6c:d0:66:37:32:5c:38:0e:ab:f0:24:
                    44:76:22:ac:1a:a0:44:38:92:0a:10:63:2b:dc:18:
                    af:79:15:36:b5:89:46:5e:09:c2:70:9f:48:ae:55:
                    95:10:25:c2:78:30:57:74:36:bf:43:30:76:1c:be:
                    49:0e:32:a0:e2:05:85:d3:a8:54:a4:f7:ab:2d:80:
                    c8:b6:1d:e0:14:f8:94:62:17:5f:c0:60:52:c5:6f:
                    f3:2b:98:94:1a:6b:91:68:2a:ae:49:84:7d:10:ca:
                    e0:5c:e1:d6:74:7a:60:3c:87:09:e5:19:7b:38:bb:
                    6f:92:df:8a:11:83:9a:da:db:a4:27:66:aa:4e:37:
                    b7:86:03:0f:b8:e1:07:aa:2d:c7:49:97:8c:b4:73:
                    8d:dd:e3:7a:bf:b4:9c:4d:0f:03:46:48:42:86:df:
                    36:c2:12:e8:bc:20:ce:24:ab:6a:34:a7:0a:97:4d:
                    1c:9b:92:3b:4f:9e:8b:cc:2f:ec:9c:58:0b:52:00:
                    f8:42:ba:ff:1d:3e:06:84:03:39:57:6a:60:6e:9b:
                    c3:52:88:42:3e:19:46:5e:45:7f:f1:41:11:a0:7f:
                    3c:ef:ef:44:c5:90:0d:df:f5:84:46:ed:d5:ec:6c:
                    39:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:36:ED:C7:9E:E1:B6:08:B4:74:26:F5:AA:4D:4E:11:6F:89:11:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f371f248-24ef-3f97-826c-c37fcf706e5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.98.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:95:0e:2a:33:6e:74:46:6d:af:ff:59:cc:52:b4:3d:a4:66:
         83:ed:56:af:f5:26:d1:e0:74:5f:1c:6a:34:14:e1:bb:a4:e8:
         5b:94:86:dd:73:a4:fa:4e:52:f3:ff:c5:84:e4:21:5e:d1:83:
         f7:46:3e:18:ee:95:25:89:3c:53:f6:ac:a8:e7:24:3c:6e:d7:
         54:1e:3e:8e:66:2c:26:67:ed:fa:85:c4:d5:92:96:4b:e6:58:
         3f:f9:49:34:8e:c1:3c:92:d3:4e:e5:b3:f3:3d:a8:a1:e2:9b:
         fd:d2:dc:6b:f3:7e:db:14:40:02:43:f7:1b:69:f3:82:57:f1:
         ee:26:57:98:e1:27:18:1e:a7:8f:90:44:e9:da:eb:5e:1d:c2:
         e8:94:ef:a0:6b:9b:4f:34:06:86:a9:ef:2e:51:47:6d:55:1e:
         ba:1b:86:d6:92:f7:07:1d:fb:aa:1c:d6:af:c5:e4:d5:47:6e:
         ea:74:57:ca:a9:97:27:39:26:de:ba:48:c4:7b:c4:ec:18:6a:
         b6:ec:b7:b6:e7:1d:67:dc:06:3e:c3:d5:08:06:49:d5:84:17:
         15:cc:73:82:90:ad:05:4e:3b:04:42:60:0c:88:4d:3b:54:38:
         d7:f4:d4:6c:74:50:96:ec:ac:d3:d4:56:82:7f:44:63:8a:ce:
         51:fe:39:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:22:41 2025 by rpki-client