Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/833b1350-ceda-39ec-b9f3-73443e10fcd9.roa
File:                     833b1350-ceda-39ec-b9f3-73443e10fcd9.roa (raw, json)
Hash identifier:          EkOtG3AAeB25ww7i62uQklkQLUbxfb/axD8zogn8Jws=
Subject key identifier:   B4:EC:D7:9E:08:F1:C6:D8:EE:B4:41:37:DC:A7:69:AE:F9:5C:0A:CD
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F50C446C8E9F815C3DCB00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/833b1350-ceda-39ec-b9f3-73443e10fcd9.roa
Signing time:             Thu 01 May 2025 17:08:53 +0000
ROA not before:           Thu 01 May 2025 17:08:53 +0000
ROA not after:            Wed 30 Jul 2025 17:08:53 +0000
asID:                     22773
IP address blocks:        68.9.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f5:0c:44:6c:8e:9f:81:5c:3d:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:08:53 2025 GMT
            Not After : Jul 30 17:08:53 2025 GMT
        Subject: CN=c5d11120-4a0c-4f8c-a75c-799e66cd5782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:97:97:4b:0f:ee:c9:8c:a8:48:53:27:50:
                    5b:9f:d1:92:b6:8f:f7:ac:c0:14:70:da:82:cb:83:
                    1e:22:b4:ba:fe:77:42:51:cb:88:35:0c:74:b3:bd:
                    51:d5:41:81:f8:00:55:73:74:0b:85:58:a8:d0:6b:
                    25:79:80:fa:c3:92:ee:08:4d:ba:ea:cc:21:43:de:
                    8a:d3:f4:de:16:5a:f5:a7:ff:f1:b4:e4:99:51:72:
                    e3:ea:96:5a:27:a2:45:84:87:b1:52:8a:e4:28:35:
                    f1:c5:25:81:d9:43:ed:26:10:47:bf:85:28:ad:4d:
                    85:0a:f2:11:a4:73:7e:f5:68:fc:37:bd:c8:c8:e3:
                    79:c6:a5:e4:e0:04:7e:9f:54:c7:f2:68:8f:34:45:
                    a4:31:d2:06:b0:7c:fa:ff:85:8c:97:6b:b3:b0:34:
                    9e:d8:95:5b:16:df:7b:a2:88:d7:ab:05:0a:72:c2:
                    58:2a:84:de:61:7e:f0:8b:3a:d1:34:cb:1c:49:59:
                    48:d4:f6:65:28:bc:7b:85:e3:2e:86:52:9b:0a:03:
                    49:2b:14:90:85:76:f1:0f:24:7d:61:d1:59:5c:63:
                    a3:c0:69:4d:3f:af:88:35:84:b4:b6:53:cc:01:d5:
                    4f:03:c0:40:ac:af:b2:de:7c:4b:b5:01:e6:50:af:
                    5b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EC:D7:9E:08:F1:C6:D8:EE:B4:41:37:DC:A7:69:AE:F9:5C:0A:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/833b1350-ceda-39ec-b9f3-73443e10fcd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.9.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:a1:9b:a6:b5:b7:3f:50:8c:1f:8f:09:d1:22:e2:60:55:e7:
         98:e5:e0:46:ca:10:79:e9:33:31:89:8b:07:6a:d2:13:36:24:
         4e:e6:fc:96:0c:27:29:b9:74:4c:e2:4c:ab:ff:4e:20:5c:ad:
         d3:d6:c9:86:f4:7b:f2:93:f2:60:06:81:e2:ef:f9:33:ff:88:
         f5:11:2c:6d:51:ac:0e:e1:9d:66:b1:1b:75:5b:81:fc:d7:20:
         ef:bc:13:59:cb:e5:68:5d:9c:48:63:31:43:3f:66:3c:d8:50:
         d1:d2:10:87:dd:74:bf:56:38:2e:85:a0:e7:ff:7c:9f:83:4a:
         b4:dc:6c:c9:e3:71:ec:98:7a:25:f9:13:70:44:e7:a9:4c:30:
         71:33:a9:b1:59:18:c5:00:c2:77:16:12:2e:1f:4c:24:ad:6b:
         c6:a0:3c:04:85:e3:e0:af:1c:6f:e6:04:b7:da:c8:71:af:42:
         6e:b6:d4:98:18:19:67:74:0e:c8:c3:bf:67:3a:78:fc:fb:45:
         b2:5d:13:35:2d:d6:ad:8e:97:11:8e:69:6b:15:65:71:0c:2f:
         01:b5:d4:15:6e:37:e8:22:5d:bf:dd:cb:6f:23:66:10:8e:63:
         88:2a:c5:2c:58:d9:39:be:30:66:2f:9a:3f:2e:31:4a:88:b1:
         c1:27:a3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:10:09 2025 by rpki-client