Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d36b4dc-f942-3c67-aed0-cf76174db0f0.roa
File:                     5d36b4dc-f942-3c67-aed0-cf76174db0f0.roa (raw, json)
Hash identifier:          NaNygqtlWEGax1Yr1wNdeRPn+gigavh6VXiiwpIdbLI=
Subject key identifier:   BC:8C:EE:74:39:EB:E2:E1:7A:A4:18:36:34:45:F1:E0:60:AE:1D:55
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F7F96CEC90D2689F82C0C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d36b4dc-f942-3c67-aed0-cf76174db0f0.roa
Signing time:             Thu 01 May 2025 17:14:46 +0000
ROA not before:           Thu 01 May 2025 17:14:46 +0000
ROA not after:            Wed 30 Jul 2025 17:14:46 +0000
asID:                     22773
IP address blocks:        68.13.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f7:f9:6c:ec:90:d2:68:9f:82:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:14:46 2025 GMT
            Not After : Jul 30 17:14:46 2025 GMT
        Subject: CN=09cfb9bf-c60d-499f-8e61-0e68e5ba1e36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c8:db:5b:b7:5a:c4:6e:7a:af:a9:a6:3b:54:
                    09:29:60:a7:ab:86:da:05:ac:45:0d:32:15:ef:63:
                    fc:71:61:6a:16:dc:ce:19:8d:48:56:14:a1:1a:e4:
                    30:11:fc:9f:11:0b:1a:73:f9:87:f4:2a:fb:1c:4f:
                    81:0a:82:42:d8:70:aa:02:60:35:93:91:e3:2d:09:
                    ba:45:a9:df:6c:c2:d6:8e:5d:f6:bd:2c:a8:15:67:
                    70:d1:b2:2e:7e:cf:ba:41:44:46:2d:57:5b:db:7c:
                    a3:19:4e:0d:3e:3f:a8:da:b5:cd:8b:fe:6d:6e:9a:
                    df:35:4b:ff:ad:77:66:32:36:f8:19:7e:ee:8d:70:
                    32:26:cd:80:27:21:39:33:6c:f3:ab:74:3a:21:dc:
                    41:15:32:78:c6:5f:41:34:81:42:ff:18:36:fc:d4:
                    7f:51:f9:61:ce:a7:3a:09:e3:b2:f7:46:2a:52:e8:
                    21:32:f3:5a:ef:83:6f:88:7f:26:5c:5b:a9:d6:41:
                    cf:10:eb:89:88:10:e9:20:26:69:8b:1d:76:ed:84:
                    5d:b3:da:da:c0:e9:db:39:5c:3d:3a:08:ef:0c:db:
                    26:1b:3a:74:70:b6:08:82:22:7f:fd:09:6f:42:bd:
                    37:c3:70:d7:ea:fb:82:5d:5c:eb:15:ba:dd:13:4e:
                    11:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:8C:EE:74:39:EB:E2:E1:7A:A4:18:36:34:45:F1:E0:60:AE:1D:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d36b4dc-f942-3c67-aed0-cf76174db0f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.13.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:30:bc:47:90:64:6b:5e:49:9c:11:30:a4:c3:c7:08:22:76:
         58:ac:d2:c0:41:6b:ae:05:73:88:98:6c:40:e3:b5:15:60:e2:
         b9:12:3d:07:a6:71:c5:42:45:74:53:1b:29:ac:0c:0c:8c:e3:
         2e:21:f0:d8:fa:ef:75:5e:4b:ee:7a:e0:f5:d8:b5:7e:45:26:
         39:4e:22:dd:47:b4:d2:d0:80:8e:2b:de:02:52:d5:f3:e4:88:
         f5:8e:95:dd:10:6a:85:cd:3e:16:22:28:39:38:77:ae:35:37:
         83:9c:2a:28:a7:b8:7d:4e:97:4c:21:dd:23:f1:18:23:b6:c5:
         a8:d0:c5:30:ff:ec:41:d2:58:cd:f1:2b:bb:cb:c0:23:49:59:
         11:09:bb:f5:52:1f:83:88:bb:04:30:3e:f0:bd:69:04:2c:4f:
         71:b5:4c:89:6b:fe:8e:f8:16:48:4b:19:19:64:b9:9f:7a:1f:
         45:59:43:8a:a5:36:ec:a8:30:16:22:7f:58:aa:6e:fe:c3:46:
         34:c9:ec:3d:52:ab:52:65:31:dd:4e:f2:4f:7d:fc:e4:18:8b:
         a6:df:31:60:b1:42:b2:c1:76:9b:ba:35:fd:e8:12:c9:11:7f:
         eb:20:87:55:c3:94:94:72:22:06:b2:34:af:1e:82:8b:bc:5d:
         9f:d1:c1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:56:40 2025 by rpki-client