Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6c439349-953f-3643-8c11-9363425bb721.roa
File:                     6c439349-953f-3643-8c11-9363425bb721.roa (raw, json)
Hash identifier:          tcoJKFWAcv7vDL6HGza0mVSWVkiPUaR1WEANl8iMjQA=
Subject key identifier:   44:DE:47:55:5D:62:44:EB:27:F2:8D:17:82:AA:5D:96:EC:31:A3:50
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F5687784666BA468F17B00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6c439349-953f-3643-8c11-9363425bb721.roa
Signing time:             Thu 01 May 2025 17:09:36 +0000
ROA not before:           Thu 01 May 2025 17:09:36 +0000
ROA not after:            Wed 30 Jul 2025 17:09:36 +0000
asID:                     22773
IP address blocks:        68.228.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f5:68:77:84:66:6b:a4:68:f1:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:09:36 2025 GMT
            Not After : Jul 30 17:09:36 2025 GMT
        Subject: CN=706f0097-ca6a-445f-b904-78297831c8b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:1e:38:e0:30:e3:72:45:5d:13:8f:53:93:
                    1f:46:0a:d9:d4:06:f7:37:b8:da:ce:33:38:f5:b6:
                    16:5d:fd:95:56:36:e7:4b:27:0e:7d:42:a7:08:2e:
                    d5:a1:34:1e:97:e1:49:41:16:54:ad:45:0d:43:09:
                    fe:2d:f0:f7:73:01:bf:fe:56:97:36:89:41:96:b0:
                    6a:97:b1:5d:19:6a:d0:16:f0:6e:33:80:37:36:87:
                    40:d3:63:1d:cc:bb:1a:92:78:63:b0:52:5d:4c:a3:
                    ef:45:2e:72:fe:37:3c:a3:c3:a8:d3:86:34:18:76:
                    ac:c2:22:82:1e:61:00:82:87:79:9e:fa:a4:06:dc:
                    ea:b8:66:39:44:ab:56:97:27:66:3e:95:4e:8a:65:
                    60:ab:f4:68:f0:1d:ed:d4:e7:bc:8b:82:e8:cf:cc:
                    00:9f:85:a3:40:04:41:ed:ef:29:2e:31:de:be:4a:
                    eb:65:dd:e4:6d:82:5f:ad:c1:71:04:2c:d4:3b:2f:
                    25:cd:d0:39:82:51:f8:29:c1:5a:4b:99:d4:a1:6b:
                    08:e7:4a:05:38:88:15:4e:c7:dc:76:57:2f:5f:dc:
                    58:79:13:11:d0:20:3e:c1:ae:7b:3f:28:9c:c5:7f:
                    8e:a0:a5:44:1c:13:cb:4c:b7:70:8f:1d:a8:19:a3:
                    42:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:DE:47:55:5D:62:44:EB:27:F2:8D:17:82:AA:5D:96:EC:31:A3:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6c439349-953f-3643-8c11-9363425bb721.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.228.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:cf:33:be:31:aa:6e:b9:12:9e:6f:e5:be:10:ea:b7:51:61:
         ee:d6:6d:fb:d4:b2:24:09:ab:3c:1f:c7:ce:60:e7:e9:64:c8:
         18:d7:c5:34:74:31:ff:fa:46:ae:d3:e1:28:84:9b:6e:85:15:
         ef:fa:ca:8f:e2:06:98:6d:d7:51:2e:d4:d9:78:8a:7a:bf:04:
         a4:4d:9a:01:1d:1f:9f:18:93:45:7f:3b:e3:13:f9:6f:10:4a:
         e5:a2:9c:61:a4:90:e5:1f:ed:6c:d2:ee:b3:10:20:03:89:6f:
         19:20:e6:09:08:95:92:54:84:ae:02:05:9a:c5:ca:1a:0e:9b:
         d7:6a:d3:15:39:00:d6:43:f1:7a:c7:d7:5b:47:f0:05:5d:21:
         cf:d8:3b:7e:8a:a9:20:bb:0f:9a:fc:32:a7:b9:49:bc:6d:12:
         55:bd:9c:72:c4:b4:63:dd:72:fc:e2:2a:b7:b0:3c:38:2d:76:
         53:2c:83:3b:ac:9e:2d:62:67:df:65:6a:58:f8:52:c0:2d:3e:
         a3:e8:bc:59:4f:8f:f9:30:32:af:81:52:99:b2:21:5b:47:fe:
         14:42:86:cf:fb:34:66:81:d6:c2:70:d7:3c:f4:1c:4d:8c:6a:
         04:19:f8:8e:2f:9e:6a:19:28:14:d0:8f:14:35:cb:6b:b2:e2:
         90:79:e1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 08:41:37 2025 by rpki-client