Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fae8df04-2f3b-341c-ac26-bc6a3a2cdd40.roa
File:                     fae8df04-2f3b-341c-ac26-bc6a3a2cdd40.roa (raw, json)
Hash identifier:          EtrGoO3DnIpdz1fGpFfRJYWl+OzoaY+ol7KDbcLtGnU=
Subject key identifier:   19:A4:20:E2:16:D6:0E:82:F7:15:5B:94:A6:12:25:48:F0:49:A8:2D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B2066FBE8C487D7551EA81500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fae8df04-2f3b-341c-ac26-bc6a3a2cdd40.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        68.224.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:fb:e8:c4:87:d7:55:1e:a8:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=2234d3ec-69c9-4ad3-a61a-4979cc88511e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8b:83:b6:81:43:97:67:a4:c3:20:3c:13:6c:
                    4d:99:56:96:fa:b2:8a:20:48:b3:fa:e6:b4:09:cf:
                    b4:fc:9c:6d:ae:86:82:42:13:b7:18:3a:84:54:48:
                    8c:37:dc:0f:b4:1a:5d:08:62:3c:13:bd:e1:d9:40:
                    4e:c7:d5:ea:6c:05:1c:35:e6:bb:e7:81:31:32:3e:
                    2f:ee:58:49:02:61:19:a7:84:5c:4c:3c:a0:e9:9b:
                    cc:ee:1a:10:05:9c:f3:31:1d:db:80:c2:3e:5c:6b:
                    76:f3:84:a6:de:57:33:25:bf:43:24:cd:9b:ce:14:
                    23:9b:7a:e8:4e:da:8c:6d:bf:ec:1a:1f:aa:63:a9:
                    ca:e1:92:e5:67:26:d8:23:d8:89:9c:be:b8:ce:b6:
                    2c:f0:e5:11:6d:9b:a1:4b:a0:4b:03:bb:2d:13:3b:
                    01:a7:cc:45:65:27:1c:e7:1e:24:b5:ad:e4:00:0e:
                    7b:6c:e2:93:ac:12:d4:28:56:4d:62:77:9e:e7:b5:
                    3b:da:60:a5:ec:8c:55:b4:00:6d:7e:aa:03:45:6a:
                    5e:55:58:a6:63:0d:6c:1f:1b:80:75:7f:3f:a4:c2:
                    53:34:06:ad:74:50:88:3a:e7:d0:5a:ef:0e:25:6e:
                    13:5c:a2:cb:58:da:7f:1f:d1:63:b4:1c:12:36:d8:
                    c2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:A4:20:E2:16:D6:0E:82:F7:15:5B:94:A6:12:25:48:F0:49:A8:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fae8df04-2f3b-341c-ac26-bc6a3a2cdd40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.224.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:22:d2:de:ea:a8:b8:18:63:09:ff:c3:aa:50:1b:6d:cf:b7:
         39:9a:89:8f:09:fb:92:d1:de:5c:8e:dc:d7:ce:4f:59:7f:8b:
         bc:b6:3d:c7:25:4b:b5:76:5b:5e:e4:42:28:83:55:9d:02:f5:
         b1:88:15:00:da:a4:38:f0:29:48:d0:17:9f:5a:f9:e9:30:38:
         7f:1d:fa:71:0a:2e:5e:2a:bf:ef:fb:e7:2e:7c:22:5e:6b:b9:
         26:60:c1:d5:75:39:09:e7:b1:35:e4:9c:2a:64:7a:59:2a:88:
         35:9c:c5:bf:66:25:49:1f:23:42:34:95:d5:56:4b:a3:5a:b1:
         8a:bc:db:57:48:90:5a:b0:b1:af:9f:b5:63:88:5f:01:c8:96:
         ef:5d:e9:7f:fc:aa:b8:13:33:a9:13:d8:b6:28:71:ed:c6:59:
         fc:da:8d:36:aa:22:49:2c:3b:a0:8f:0d:f4:ae:7c:0b:74:4e:
         27:61:20:aa:fe:2d:ff:62:1c:a3:e4:51:ee:fd:89:df:31:0a:
         12:24:9a:a8:87:19:3e:ef:84:a3:4f:d5:3d:00:45:0c:e3:66:
         5d:10:fe:20:6d:52:1f:6d:75:79:2f:7c:c6:50:ad:bb:90:e0:
         48:6b:10:94:1a:3f:05:47:8a:5f:3c:02:5a:59:02:1e:d6:14:
         4d:9d:8a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 01:28:42 2025 by rpki-client