Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12c07cd6-b81e-3676-ae3c-8e441c8a8d8d.roa
File:                     12c07cd6-b81e-3676-ae3c-8e441c8a8d8d.roa (raw, json)
Hash identifier:          js76SR9frFTlCFn2cpl2Xg157PAoQLHSv/Tuo/9yhb8=
Subject key identifier:   0B:95:32:71:A7:49:B4:15:A4:0B:94:8A:D0:CC:18:CC:5C:FB:43:FE
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DD5E350F588CD96862543C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12c07cd6-b81e-3676-ae3c-8e441c8a8d8d.roa
Signing time:             Thu 19 Jun 2025 09:16:02 +0000
ROA not before:           Thu 19 Jun 2025 09:16:02 +0000
ROA not after:            Wed 17 Sep 2025 09:16:02 +0000
asID:                     22773
IP address blocks:        68.106.242.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:d5:e3:50:f5:88:cd:96:86:25:43:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 09:16:02 2025 GMT
            Not After : Sep 17 09:16:02 2025 GMT
        Subject: CN=3732d7eb-a7a8-4cb3-9497-6c6788ed1dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:59:62:bd:be:8e:fd:fc:27:5b:f0:61:6f:b0:
                    f3:f6:58:58:43:ac:ed:47:0d:5b:f6:b3:8b:9e:5b:
                    22:2f:de:72:de:53:75:b9:7e:77:6b:eb:fe:ba:c8:
                    86:38:31:a3:2a:a1:e4:cc:e0:09:ea:32:cb:27:de:
                    28:3f:8e:65:d9:5f:9f:7a:6e:60:85:3a:23:fb:d5:
                    3d:a0:06:47:c0:60:36:c4:0d:98:65:ff:6c:7e:6c:
                    48:f7:4e:da:e5:b8:85:42:bd:4f:5e:21:d9:94:c1:
                    56:72:07:7a:35:bc:b6:0c:b9:d3:4c:46:d1:e1:68:
                    65:d1:30:fa:14:af:6c:49:a7:d7:f8:95:22:91:2a:
                    1b:5b:e6:41:66:4e:64:34:8c:82:41:c5:fb:c0:b2:
                    2e:a3:b9:b6:cc:81:e8:81:d5:5e:dc:1b:0c:cb:9c:
                    04:cd:cd:48:1d:39:f1:1b:40:ad:dc:20:75:bf:d7:
                    70:46:b1:57:fc:ea:f6:0d:bb:1e:27:18:43:8b:3f:
                    35:f5:4a:c0:17:64:45:fb:86:6b:6f:73:41:8f:b3:
                    34:03:a2:dd:4d:9f:fa:01:ce:e7:37:ab:dd:41:22:
                    a3:d0:29:b2:11:67:15:14:10:42:5c:6f:03:57:cb:
                    58:73:8a:a2:e8:e8:16:92:77:f7:73:a9:d3:93:0b:
                    e2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:95:32:71:A7:49:B4:15:A4:0B:94:8A:D0:CC:18:CC:5C:FB:43:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/12c07cd6-b81e-3676-ae3c-8e441c8a8d8d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.106.242.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:55:20:5b:f7:bf:33:ed:5b:f3:9d:6c:b4:6a:15:94:1c:a4:
         1d:9b:45:c1:4f:a5:ab:70:01:1f:04:de:ea:33:85:0a:5f:2e:
         ff:2b:b5:8d:f2:32:0c:a3:9d:f3:8f:41:61:5b:6a:13:3d:19:
         17:19:df:59:d2:b0:6a:40:d4:7b:7a:17:6c:56:b7:fa:01:65:
         a5:66:8e:c9:04:03:ea:58:c0:a1:31:9b:21:14:02:02:43:25:
         d6:eb:28:78:c9:b7:4d:39:67:c0:2e:ed:ac:ee:fb:e7:d7:c2:
         66:75:ad:77:06:ac:7d:63:23:7a:33:e3:a0:45:9c:71:e3:b6:
         25:73:38:0c:ac:f8:b2:e0:08:4e:05:79:44:c3:6c:50:df:f7:
         0f:46:c3:8e:05:51:cc:fd:f9:8d:17:e5:7d:89:34:4d:21:1a:
         83:5d:fd:57:1b:5a:28:ce:21:07:d8:4d:a2:fd:98:4a:da:ce:
         a9:f6:03:6e:9c:4c:33:de:86:e9:1b:e6:aa:66:23:0e:0c:de:
         9b:dd:5d:bf:fa:1a:22:f2:70:5a:e0:b8:63:45:7e:ca:7d:ca:
         3b:13:41:4a:f2:a5:6d:07:0b:cb:64:84:c0:02:c6:98:1e:96:
         4d:71:0b:55:28:62:84:88:8f:84:ae:fb:73:c0:cf:a0:e7:bb:
         98:a3:6c:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 11:28:36 2025 by rpki-client