Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff054053-2588-33ba-9fcb-2ca154b8f051.roa
File:                     ff054053-2588-33ba-9fcb-2ca154b8f051.roa (raw, json)
Hash identifier:          EeDu43aQ2I6zUQJIgsUzvouyQcX/8TNR7TuCJsqEOfw=
Subject key identifier:   00:E4:F7:68:F5:3D:90:7E:AB:66:3A:38:A0:E9:FE:E4:78:BD:F3:FC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3C1098B6876BB74C731EB640
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff054053-2588-33ba-9fcb-2ca154b8f051.roa
Signing time:             Wed 18 Jun 2025 18:02:42 +0000
ROA not before:           Wed 18 Jun 2025 18:02:42 +0000
ROA not after:            Tue 16 Sep 2025 18:02:42 +0000
asID:                     22773
IP address blocks:        68.98.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:10:98:b6:87:6b:b7:4c:73:1e:b6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 18 18:02:42 2025 GMT
            Not After : Sep 16 18:02:42 2025 GMT
        Subject: CN=04e711af-de00-419f-b2c7-bedb36f04b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e1:6d:da:30:73:5d:0f:38:ea:c0:e3:e4:71:
                    a7:3c:5f:36:9e:95:c6:ba:4a:77:40:96:c2:ee:c3:
                    c4:b4:c1:ec:f2:9f:9d:34:85:76:94:a2:e8:09:66:
                    87:5f:3e:fb:5c:5f:53:6e:1e:22:11:1a:0a:37:8a:
                    7c:4f:31:d7:46:11:3d:cb:36:2e:72:46:a2:67:ae:
                    48:b8:27:46:e6:4a:47:ae:1e:9c:ce:3e:0f:11:f7:
                    2e:1a:7b:03:fc:18:dc:4b:67:14:24:69:f7:39:43:
                    32:24:25:8a:ba:fd:11:46:d6:c6:42:f6:9c:8a:47:
                    82:12:61:5f:4a:d7:0b:52:34:c3:31:81:25:f4:3d:
                    fe:d1:9e:93:80:bc:ee:e3:41:2c:cc:b0:54:9d:ed:
                    4f:c0:57:c9:4b:61:35:aa:f5:0a:56:5a:b4:e7:a2:
                    77:d5:62:49:4e:29:61:46:b5:af:53:9a:5e:2d:7a:
                    98:13:0d:c4:24:a2:50:7c:ba:50:4e:84:ea:bf:75:
                    4f:18:76:45:76:3d:c4:b2:85:26:3c:45:f0:9a:13:
                    a6:b1:cf:91:22:51:b2:ae:59:11:2a:54:a7:50:30:
                    56:5b:a5:ef:d3:c6:3a:70:ee:6f:1b:18:f7:5c:03:
                    75:f1:76:a8:7b:7c:20:f2:c2:e2:23:72:d5:8c:f6:
                    81:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E4:F7:68:F5:3D:90:7E:AB:66:3A:38:A0:E9:FE:E4:78:BD:F3:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff054053-2588-33ba-9fcb-2ca154b8f051.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.98.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:7f:dc:3a:8b:54:fc:03:a5:93:a9:d2:70:c8:99:c9:93:30:
         dc:7b:41:bf:1e:59:8d:e9:13:b0:16:f1:9e:f5:bc:c4:3f:53:
         2b:24:9b:5a:6a:41:3f:53:8b:05:46:d9:93:31:3f:bb:a9:ce:
         07:fc:d0:a2:ad:9c:89:1c:6c:69:98:8e:af:65:2c:95:ae:1d:
         9d:66:71:74:84:d6:0c:ec:de:d3:92:1d:af:e5:78:52:57:04:
         fa:44:0b:77:0c:56:81:8e:64:40:5d:fe:84:f7:97:af:e6:ee:
         31:dc:f1:08:da:bc:cf:33:ef:f3:02:ad:ca:df:fd:d9:08:3b:
         69:ef:0d:c4:e3:7d:ae:c1:78:55:8b:eb:66:05:3e:2f:d7:63:
         0d:10:21:2c:88:f3:82:40:1d:c0:b4:46:b4:18:4f:bf:04:95:
         2d:11:1b:00:b0:04:a1:bc:06:84:cc:06:30:35:52:21:11:25:
         c6:4c:d4:a9:1e:78:12:4c:68:05:0f:4f:44:d0:3a:a0:f7:84:
         76:72:ae:b5:16:91:97:69:63:44:56:98:53:cd:a1:6f:87:4e:
         e5:95:5f:a8:a6:aa:2b:29:db:bd:c1:91:da:e5:5e:ab:2f:36:
         82:35:2f:c2:b7:d3:05:b8:1c:a9:b1:49:99:2f:1a:df:7f:9a:
         db:2b:fb:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:15:53 2025 by rpki-client