Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9524855f-fd5a-3606-b604-1ffa39c8275c.roa
File:                     9524855f-fd5a-3606-b604-1ffa39c8275c.roa (raw, json)
Hash identifier:          U78zoW81rBVYIYkNWbhVUDRUL+I8WVZ6rCf0aqdSrW8=
Subject key identifier:   F9:F4:04:4F:A4:C1:50:98:FB:A1:B4:41:1E:71:81:A2:88:DA:D0:F6
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DD6F60A750DCC251BD94FC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9524855f-fd5a-3606-b604-1ffa39c8275c.roa
Signing time:             Thu 19 Jun 2025 09:18:11 +0000
ROA not before:           Thu 19 Jun 2025 09:18:11 +0000
ROA not after:            Wed 17 Sep 2025 09:18:11 +0000
asID:                     22773
IP address blocks:        68.231.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:d6:f6:0a:75:0d:cc:25:1b:d9:4f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 09:18:11 2025 GMT
            Not After : Sep 17 09:18:11 2025 GMT
        Subject: CN=fa06f99c-c45d-467b-933d-32fbcc55fced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6d:41:c8:a4:18:c9:ce:b5:6f:ad:9d:f8:ef:
                    92:56:0d:b4:69:a4:13:f9:88:a3:28:92:23:a0:e3:
                    b6:5d:c0:5f:36:28:7b:c4:c6:76:97:bb:57:86:19:
                    74:2d:9e:bb:41:98:7f:0b:01:ee:02:4e:3c:76:50:
                    6e:7d:cb:47:8f:81:f2:dc:4c:f5:0d:25:85:23:9f:
                    19:a7:80:f1:dc:70:e3:28:4a:79:fd:6a:fc:c6:2f:
                    4d:67:4a:ff:cd:c8:23:19:23:6a:57:0b:c2:89:72:
                    82:62:c1:ae:6e:1f:51:0b:c8:c5:24:6d:0a:09:24:
                    df:ac:67:dc:bd:6e:6f:ad:a5:e7:9b:2a:86:4e:7f:
                    e3:de:be:fe:6f:da:c3:75:cc:8f:85:e5:cb:a5:eb:
                    06:58:14:cd:87:8b:f1:19:6b:f5:bb:62:d8:41:86:
                    64:09:e4:b4:49:92:4c:34:ec:ee:5a:7d:d3:ab:74:
                    a8:7b:48:5d:93:8c:18:f8:9e:c6:7a:8b:0c:2e:f1:
                    f4:3a:86:6d:7e:5d:f8:66:23:d1:80:02:6d:9f:c6:
                    eb:ac:a8:90:e7:06:98:36:ec:39:25:3a:a2:1c:4c:
                    d1:41:34:61:e1:8a:e0:4e:dc:c4:15:85:96:89:d0:
                    8f:3e:95:28:99:d6:0a:90:d1:9f:34:5a:3a:68:08:
                    8c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F4:04:4F:A4:C1:50:98:FB:A1:B4:41:1E:71:81:A2:88:DA:D0:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9524855f-fd5a-3606-b604-1ffa39c8275c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.231.80.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:86:4a:56:99:1c:94:39:1e:85:8e:15:71:07:d6:cd:21:ee:
         b1:8d:d7:ab:b1:0b:55:90:af:2c:eb:9e:56:e4:d9:7e:16:e8:
         e9:73:58:44:11:5d:65:ae:ad:f7:c8:56:95:21:0f:cb:23:df:
         a1:d7:b1:c5:d8:fa:f9:d7:5a:b9:ae:f2:23:a6:b8:66:cd:4b:
         99:4c:08:bb:50:b7:0a:cc:fd:d4:4c:ed:18:5a:01:59:34:88:
         2b:f0:a5:30:75:ed:58:76:b6:f2:0a:41:0d:c3:e5:6d:66:9e:
         dd:cb:20:e1:92:4c:82:8f:2b:fc:4e:c6:c6:74:b6:28:93:14:
         6d:da:29:0c:47:7e:cd:2a:80:b1:ba:cf:c2:cb:88:c9:ab:cc:
         14:35:e7:46:fa:16:70:f3:3a:ac:39:9a:8a:92:2d:46:4c:1a:
         fd:31:b2:4e:cc:06:e0:fe:7b:19:0c:66:3d:e1:e8:43:03:6e:
         2b:83:33:93:82:b0:00:4a:81:c8:48:90:e9:1e:18:51:a6:4a:
         7d:53:dc:85:5f:72:06:94:ac:9a:24:d6:49:6a:e3:cb:e3:f6:
         86:20:24:f1:85:4b:f7:b7:f5:1f:a8:08:86:bc:0c:85:9f:07:
         32:af:1d:07:84:21:73:d1:e9:65:94:34:c4:2e:e9:8f:84:6c:
         59:a0:13:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91vYKdQ3MJRvZT8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDYxOTA5MTgxMVoXDTI1MDkxNzA5MTgxMVowLzEtMCsGA1UEAxMk
ZmEwNmY5OWMtYzQ1ZC00NjdiLTkzM2QtMzJmYmNjNTVmY2VkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW1ByKQYyc61b62d+O+SVg20aaQT+YijKJIj
oOO2XcBfNih7xMZ2l7tXhhl0LZ67QZh/CwHuAk48dlBufctHj4Hy3Ez1DSWFI58Z
p4Dx3HDjKEp5/Wr8xi9NZ0r/zcgjGSNqVwvCiXKCYsGubh9RC8jFJG0KCSTfrGfc
vW5vraXnmyqGTn/j3r7+b9rDdcyPheXLpesGWBTNh4vxGWv1u2LYQYZkCeS0SZJM
NOzuWn3Tq3Soe0hdk4wY+J7GeosMLvH0OoZtfl34ZiPRgAJtn8brrKiQ5waYNuw5
JTqiHEzRQTRh4YrgTtzEFYWWidCPPpUomdYKkNGfNFo6aAiMrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPn0BE+kwVCY+6G0QR5xgaKI2tD2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOTUyNDg1NWYtZmQ1YS0z
NjA2LWI2MDQtMWZmYTM5YzgyNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROdQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEOGSlaZHJQ5HoWOFXEH1s0h7rGN16uxC1WQryzrnlbk2X4W6OlzWEQR
XWWurffIVpUhD8sj36HXscXY+vnXWrmu8iOmuGbNS5lMCLtQtwrM/dRM7RhaAVk0
iCvwpTB17Vh2tvIKQQ3D5W1mnt3LIOGSTIKPK/xOxsZ0tiiTFG3aKQxHfs0qgLG6
z8LLiMmrzBQ150b6FnDzOqw5moqSLUZMGv0xsk7MBuD+exkMZj3h6EMDbiuDM5OC
sABKgchIkOkeGFGmSn1T3IVfcgaUrJok1klq48vj9oYgJPGFS/e39R+oCIa8DIWf
BzKvHQeEIXPR6WWUNMQu6Y+EbFmgE0k=
-----END CERTIFICATE-----
Generated at Tue Jul 1 00:36:50 2025 by rpki-client