Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/13b99de3-00cb-3006-8a13-8d26c8d4a3c9.roa
File:                     13b99de3-00cb-3006-8a13-8d26c8d4a3c9.roa (raw, json)
Hash identifier:          j8sXxtSCSUMoD0/F6HWUZ1e6Uz/moWOZJq/SqXviKWY=
Subject key identifier:   FD:C1:E2:58:7F:7D:F7:F8:92:01:19:2B:3E:AF:1D:7C:B1:E5:75:56
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5FD1821754A4857C160A800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/13b99de3-00cb-3006-8a13-8d26c8d4a3c9.roa
Signing time:             Thu 01 May 2025 17:25:05 +0000
ROA not before:           Thu 01 May 2025 17:25:05 +0000
ROA not after:            Wed 30 Jul 2025 17:25:05 +0000
asID:                     22773
IP address blocks:        68.101.134.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:fd:18:21:75:4a:48:57:c1:60:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:25:05 2025 GMT
            Not After : Jul 30 17:25:05 2025 GMT
        Subject: CN=6d91909d-5d31-440f-a801-946d34fa7409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:af:64:91:8d:8e:96:f2:6b:d1:e1:80:1b:df:
                    0d:4b:b6:69:d6:8d:d3:81:87:b3:4c:d5:8b:2f:60:
                    01:ae:2e:02:d4:af:15:1f:37:43:3c:44:8c:aa:45:
                    7e:71:14:aa:5d:96:8a:1e:10:59:73:bb:07:19:16:
                    9a:ab:38:0a:44:d6:11:ff:7f:7b:b8:1a:0a:f0:aa:
                    2c:60:d3:a6:b6:93:8c:65:92:a5:96:ee:d2:56:96:
                    89:16:69:be:97:8d:c1:33:51:84:c8:65:2c:77:5c:
                    63:10:6b:f2:18:21:69:1d:56:0d:7d:e9:22:a7:83:
                    c4:87:a2:4c:3c:64:bc:c1:65:99:35:98:74:8f:22:
                    cb:84:25:c2:73:60:3d:62:b0:e7:44:d2:32:13:4d:
                    b3:96:61:cd:07:55:8b:cb:e3:09:59:91:ab:d6:00:
                    a3:a6:cb:de:97:4c:bd:c4:99:3f:2c:c7:98:ac:52:
                    5e:64:f7:ec:df:6b:e2:0a:56:63:16:10:36:6b:d8:
                    8c:4a:42:85:94:2a:69:5e:be:0e:fe:b3:50:6f:7e:
                    3f:aa:a0:a3:1e:b8:d0:0a:0f:0a:01:12:38:ce:b3:
                    b6:ec:cf:c4:3b:39:57:9d:00:b3:a7:c2:2c:40:10:
                    ff:a1:1e:1d:cb:33:12:26:66:46:02:de:c1:72:d1:
                    d3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:C1:E2:58:7F:7D:F7:F8:92:01:19:2B:3E:AF:1D:7C:B1:E5:75:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/13b99de3-00cb-3006-8a13-8d26c8d4a3c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.101.134.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:64:1d:05:8b:d2:14:56:36:e5:aa:7f:f1:74:7e:be:87:88:
         44:6e:af:87:bb:54:0d:f0:93:f4:84:1c:09:d2:10:d4:4e:c3:
         5c:2d:5a:9b:8c:d6:c3:e0:9d:4a:17:7f:fe:5e:61:1d:fb:0c:
         af:23:d1:5e:60:8c:f0:bc:57:76:fe:77:38:9c:37:01:56:d8:
         4d:43:b6:8b:34:ac:a8:1e:d7:54:8a:e6:15:93:5a:d9:5b:89:
         a9:32:91:d5:b4:d7:5c:9b:96:88:65:34:73:21:21:8c:7d:0e:
         e0:d4:84:48:d1:7f:16:16:1a:68:50:60:f0:17:fe:d9:56:90:
         1f:31:a8:28:dc:dc:a4:ba:d8:dc:36:56:83:6a:a6:ea:95:cc:
         0c:84:7a:04:b4:b9:89:10:01:c9:c6:73:1a:85:29:72:41:2b:
         cc:a5:41:62:9a:a5:a2:39:6c:96:71:0c:a7:0e:46:aa:c1:c3:
         e3:8e:ed:3a:a1:0a:d7:f9:b3:c2:74:cf:74:e0:ae:68:f9:c3:
         f4:48:fe:46:e3:dc:43:48:8f:f9:ef:15:86:e9:66:56:3a:df:
         c5:b2:56:84:f7:89:53:b7:d5:56:99:be:03:67:4c:78:15:b8:
         d8:a0:97:ea:b7:db:7b:9f:52:f1:f0:d2:aa:0e:c1:c6:4c:68:
         a3:27:4d:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:35:33 2025 by rpki-client