Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/72f54302-2f59-3c2f-865b-7fced66011df.roa
File:                     72f54302-2f59-3c2f-865b-7fced66011df.roa (raw, json)
Hash identifier:          Ta3O/jDOEtFUVE1qwM3mOCT23/0w3GbAMGgO5FfZ4L4=
Subject key identifier:   8A:D6:B2:38:B5:5B:45:69:5E:C6:9A:F2:1C:B6:36:8F:AC:7B:FD:D3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F8113911F21143026B9100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/72f54302-2f59-3c2f-865b-7fced66011df.roa
Signing time:             Thu 01 May 2025 17:14:58 +0000
ROA not before:           Thu 01 May 2025 17:14:58 +0000
ROA not after:            Wed 30 Jul 2025 17:14:58 +0000
asID:                     22773
IP address blocks:        68.230.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f8:11:39:11:f2:11:43:02:6b:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:14:58 2025 GMT
            Not After : Jul 30 17:14:58 2025 GMT
        Subject: CN=998aac34-6b43-4c6d-9889-b691f12cdfbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ce:c5:e6:3f:20:d9:7a:9a:a6:d2:12:97:76:
                    00:7b:88:35:13:c1:8d:e6:ad:c2:5b:cc:83:ae:99:
                    ca:52:c6:11:92:64:6b:bf:65:bb:09:dd:b7:cb:78:
                    90:da:57:b6:a0:bd:c6:09:b6:c5:f9:f0:d6:f8:f6:
                    a5:47:6b:60:26:9f:d5:33:d3:10:16:32:95:e3:4a:
                    11:37:1f:f5:86:5f:5b:ff:1d:8b:49:5b:d6:f2:0b:
                    07:a9:fd:5f:c6:44:78:f7:6d:f7:f4:80:26:d7:93:
                    0f:6a:92:18:bd:85:9a:4d:3e:24:25:ad:39:ef:53:
                    30:fd:9d:e8:11:3c:6e:af:33:71:a6:c8:a8:14:ac:
                    ad:bf:49:e4:f0:8c:bb:96:30:dc:b5:89:7d:c4:a2:
                    6f:1d:55:65:80:9b:e9:11:ea:4c:74:27:4e:01:e8:
                    af:49:ec:b4:02:9b:26:b4:97:20:fb:ad:3c:d9:af:
                    ab:45:c8:a3:dc:f0:17:63:4a:21:b1:e5:0f:27:ac:
                    45:d9:e9:ee:8a:5c:4b:3e:28:6d:5f:56:21:bd:ab:
                    7c:9a:7d:ad:22:f5:f5:5d:7b:db:b1:bc:2c:6f:5c:
                    df:d1:54:19:a9:12:f2:ac:81:e4:68:f6:93:14:8b:
                    fd:aa:3b:28:28:07:a2:cc:08:75:7d:12:ac:0d:dd:
                    3a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D6:B2:38:B5:5B:45:69:5E:C6:9A:F2:1C:B6:36:8F:AC:7B:FD:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/72f54302-2f59-3c2f-865b-7fced66011df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.230.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c0:00:de:06:04:bc:5d:83:75:02:f0:af:d0:a4:45:2c:4b:
         86:37:90:89:b7:52:87:27:15:0c:72:96:6e:be:88:b3:83:69:
         b9:79:a5:17:74:6d:d0:71:e9:9e:f6:ca:8e:8c:ff:86:6b:01:
         06:1e:64:85:68:e4:df:f1:71:0a:24:f7:aa:3a:c2:84:b0:0c:
         b4:f3:b6:cf:1a:7a:51:ed:44:06:a0:56:1f:ed:f6:8d:f2:03:
         97:ba:93:8c:cf:2a:ff:b0:4c:67:6c:01:f0:9f:f8:e3:ab:2b:
         ba:9e:57:6d:3d:d2:41:e8:31:25:38:8a:48:76:f8:fc:1e:a5:
         c4:77:41:48:ec:3e:f1:80:21:c7:ee:e3:f5:9c:3b:57:27:32:
         bc:9f:aa:ac:95:9e:02:35:e3:77:7d:0c:8e:50:c4:08:67:74:
         ec:d0:69:c9:a8:6b:ed:79:34:17:17:e7:51:b6:10:ad:e6:7e:
         c7:26:13:1d:82:b4:d7:93:ad:f1:ae:0a:03:2a:cc:ec:a5:69:
         85:72:53:a8:89:f0:a1:b9:f9:95:27:c0:79:11:e1:71:77:21:
         f0:30:e3:ab:f2:6b:d8:d1:ec:00:7a:93:54:d3:ca:40:4a:f9:
         59:92:e9:2b:f3:c7:3d:86:34:52:58:b3:a1:f0:39:b6:4a:48:
         e7:d9:4d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:19:25 2025 by rpki-client