Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/339ad03d-87b9-3fc1-b718-bffe28e149c2.roa
File:                     339ad03d-87b9-3fc1-b718-bffe28e149c2.roa (raw, json)
Hash identifier:          4eMMU6s8EjpQUQ31CQYFp1qgn9FxCbmkjlvbf5+uvVY=
Subject key identifier:   F5:C9:5E:66:F9:F1:DF:41:15:58:29:DC:90:E4:0E:7E:B8:38:68:B7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DD6EBF1BA0F6F6315F2C900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/339ad03d-87b9-3fc1-b718-bffe28e149c2.roa
Signing time:             Thu 19 Jun 2025 09:18:07 +0000
ROA not before:           Thu 19 Jun 2025 09:18:07 +0000
ROA not after:            Wed 17 Sep 2025 09:18:07 +0000
asID:                     22773
IP address blocks:        68.231.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:d6:eb:f1:ba:0f:6f:63:15:f2:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 09:18:07 2025 GMT
            Not After : Sep 17 09:18:07 2025 GMT
        Subject: CN=3a28a755-16b1-405d-92bc-47adaccea000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:06:ac:e9:e1:0f:86:9c:30:19:77:64:9e:e2:
                    52:16:c2:01:34:61:88:56:06:3c:d3:1a:73:ac:80:
                    1b:de:c4:03:ee:d3:0d:12:66:60:e9:b9:52:e7:b3:
                    17:3f:63:9b:28:f3:65:52:1a:7c:ee:bb:7d:08:20:
                    3d:42:8b:f2:70:f7:d4:ca:3a:9c:d6:bd:80:27:24:
                    69:b2:76:67:d0:be:56:70:e1:0e:33:70:a3:db:a4:
                    1b:34:3a:38:a7:33:9f:33:b2:4e:47:63:be:80:cf:
                    c7:f0:dc:4e:b6:08:dc:10:89:9a:21:77:26:3b:c3:
                    3d:69:00:7b:4e:41:95:32:a3:22:40:34:7b:69:86:
                    f1:d8:91:56:1e:72:7b:e3:c0:f2:44:70:05:d2:e7:
                    eb:b5:3d:e9:ef:b5:8c:59:5e:0d:7a:5c:0b:87:fd:
                    d6:6f:4f:b0:13:70:e1:38:16:17:cb:5a:4f:31:8b:
                    26:84:bd:ed:0e:4f:34:a5:d3:b8:8f:10:b0:d5:67:
                    7d:30:ca:9f:ef:11:ae:0f:dd:6d:aa:1c:46:f7:76:
                    2a:23:e5:73:5e:cf:df:c0:74:83:e7:79:df:bf:b3:
                    12:a8:cf:a8:eb:bb:7b:9a:57:02:50:27:32:39:50:
                    e8:cd:ba:66:1c:1f:16:10:8c:e3:1c:9a:e1:f0:61:
                    e9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C9:5E:66:F9:F1:DF:41:15:58:29:DC:90:E4:0E:7E:B8:38:68:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/339ad03d-87b9-3fc1-b718-bffe28e149c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.231.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:f2:1b:22:0e:ef:d9:18:a0:bc:ef:72:7b:fb:6f:96:3b:eb:
         06:0f:81:df:f4:2b:f1:28:1d:c1:ff:9c:ec:68:68:da:ac:92:
         4d:9e:12:85:3d:9d:40:5b:7e:e7:27:8f:15:66:fa:01:df:79:
         50:55:1a:63:42:84:f4:05:4f:57:c9:32:bf:4d:8a:25:b6:07:
         eb:45:fa:78:ca:78:80:6c:8d:00:be:ba:c3:29:12:f7:3e:db:
         58:70:84:9d:15:77:fb:78:36:c3:d1:42:ba:f7:94:de:9e:24:
         d1:d1:52:54:2d:ee:3f:43:51:99:36:67:b1:ce:1f:25:bc:d9:
         6a:f6:b2:0c:e8:fa:3d:cd:30:38:fa:4b:2b:4d:1a:b4:2c:58:
         3b:12:ab:52:49:bb:2f:d1:ef:09:78:1f:55:31:16:52:0c:11:
         18:74:28:58:09:21:c7:ed:a1:24:f4:ae:87:24:12:e2:f7:f3:
         05:f6:1e:53:65:8e:2a:f4:ef:6c:e4:44:16:75:b6:99:2d:8e:
         c3:c0:44:35:2b:99:bd:0e:2e:e4:bd:bc:db:b7:d2:3a:23:c2:
         ab:02:f9:38:9d:e9:e0:d7:d6:1a:79:57:6e:af:54:a1:33:7b:
         84:06:38:c5:91:32:53:7f:21:f8:b1:d4:8b:85:12:47:c2:a0:
         20:be:e5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:59:12 2025 by rpki-client