Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39c261b5-010c-3682-bd51-9d8b1e376356.roa
File:                     39c261b5-010c-3682-bd51-9d8b1e376356.roa (raw, json)
Hash identifier:          8uzVSINiFQc1N34iI5MxP5vOhAZ2w7zID98h3kMtOc8=
Subject key identifier:   65:26:1F:07:9A:F8:76:CA:C5:65:F3:4D:5F:D9:E5:B3:E3:1F:5B:ED
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3990B02521029F6E9436E940
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39c261b5-010c-3682-bd51-9d8b1e376356.roa
Signing time:             Tue 17 Jun 2025 20:33:22 +0000
ROA not before:           Tue 17 Jun 2025 20:33:22 +0000
ROA not after:            Mon 15 Sep 2025 20:33:22 +0000
asID:                     22773
IP address blocks:        68.2.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:39:90:b0:25:21:02:9f:6e:94:36:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 17 20:33:22 2025 GMT
            Not After : Sep 15 20:33:22 2025 GMT
        Subject: CN=eb11ed1d-b132-47f8-ae43-14e49a3012df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2b:88:82:22:f5:ab:5e:90:e4:ca:89:3e:02:
                    83:20:fc:6e:ab:68:f1:17:77:da:fa:09:fb:c5:71:
                    c0:b1:0d:bb:36:3d:39:21:63:52:5e:bd:fd:68:d1:
                    f6:59:36:c1:00:fb:c5:44:d4:5a:f2:59:7d:2f:63:
                    7e:0c:f3:5c:43:02:a2:c5:02:d9:78:13:27:b4:0d:
                    0e:57:a0:f5:59:01:27:59:bc:07:ae:ed:58:40:0d:
                    be:78:db:b9:f6:3b:52:de:3c:cc:05:e7:2c:eb:5c:
                    fa:f5:ca:87:2b:a7:7e:d0:a8:30:e6:ee:db:62:c1:
                    8e:c2:68:ba:53:4e:fc:c1:af:b5:f4:0b:3b:98:07:
                    02:33:c6:9e:57:a3:e1:a3:53:08:71:0c:05:d4:68:
                    0e:7b:07:44:fe:ce:84:87:f1:12:46:84:77:c1:9d:
                    fd:ba:be:28:a3:16:81:57:bf:20:d7:5d:df:61:d3:
                    a6:c7:c6:c3:46:fb:d9:31:97:22:d2:da:49:e4:91:
                    13:f2:f7:b5:af:06:09:fd:0e:47:06:22:a6:9a:e7:
                    c4:83:43:2b:37:dc:89:51:83:7a:42:69:41:d1:5b:
                    41:b4:79:a0:4c:6e:e2:3d:89:2e:25:5b:18:2b:5e:
                    aa:c9:a3:25:50:f0:04:6b:5b:35:bb:f6:53:32:a6:
                    68:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:26:1F:07:9A:F8:76:CA:C5:65:F3:4D:5F:D9:E5:B3:E3:1F:5B:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39c261b5-010c-3682-bd51-9d8b1e376356.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.2.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:4e:90:df:c8:40:95:a5:2f:0e:33:bd:74:5b:9b:cc:6d:2d:
         e7:89:be:4f:ae:c1:42:98:39:b4:4e:27:22:73:bc:90:f1:b6:
         d9:13:0c:21:18:b1:7b:54:8e:30:08:b9:d9:f1:64:6a:77:2e:
         dd:e0:74:2c:95:c9:19:f6:d3:ca:cd:f4:f9:c5:43:c9:98:3c:
         43:b4:46:f3:25:dc:18:2c:1c:74:f7:9a:72:b0:c8:5c:96:94:
         a0:b8:3c:c3:ca:96:01:f9:74:8a:b6:4c:75:3e:b6:67:72:29:
         01:00:29:cd:26:10:58:33:05:86:05:39:7f:5b:42:2d:72:f8:
         9f:5d:23:aa:39:44:5c:78:be:8d:56:d5:e8:a1:e9:d5:6f:10:
         34:41:a3:7c:06:4d:fa:66:e6:dc:3a:5a:fe:76:f8:bf:d8:67:
         02:d3:1b:ec:e4:5d:7d:01:82:12:b2:a6:5b:13:87:a6:0f:66:
         5d:43:ff:58:69:88:6a:7d:69:76:fb:23:33:c8:7b:7c:32:8f:
         15:01:0b:ca:23:b7:12:f2:85:a5:66:0c:6d:85:64:bb:3c:69:
         52:7b:26:f8:46:c2:4a:1c:45:24:46:da:74:cf:d7:f4:46:27:
         a7:88:1f:3a:13:97:33:05:15:cf:d3:17:81:48:b5:d2:0a:35:
         0a:d0:00:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:26:36 2025 by rpki-client