Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b7409ed8-ffcd-3061-b6f1-7d0c6379264c.roa
File:                     b7409ed8-ffcd-3061-b6f1-7d0c6379264c.roa (raw, json)
Hash identifier:          1g/Vhj+PH9ZLxu9ME8bUz5K4OlypKxG1MU7LdbETuDA=
Subject key identifier:   B7:EB:B1:D1:F6:CA:5E:7F:14:48:F2:BB:45:D1:EC:24:F6:8F:55:6B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849EBEA854E956E0164008F9E00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b7409ed8-ffcd-3061-b6f1-7d0c6379264c.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     22773
IP address blocks:        68.227.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:85:4e:95:6e:01:64:00:8f:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=ce780136-a35f-4fc4-8bbb-3fd30d10316a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:15:b1:21:f9:28:a3:41:32:f3:75:54:21:11:
                    3b:ac:dc:5f:23:c6:4c:6b:24:2a:d5:a8:1f:c5:4e:
                    a4:10:78:a6:45:03:93:2b:7c:02:e5:f8:77:ed:94:
                    50:77:31:bd:84:c7:9f:79:71:2b:3f:a9:58:95:7b:
                    19:ab:17:3a:56:08:36:35:33:8e:58:c3:1b:10:4a:
                    2c:18:14:79:3e:ca:fc:36:c2:a6:ab:80:68:97:bf:
                    d9:2f:46:49:29:67:07:07:26:66:8a:07:7b:4b:1e:
                    41:6f:83:a1:b0:83:0e:26:46:56:ed:f3:5e:f6:04:
                    37:06:6d:b0:f3:09:54:f8:5a:b8:94:56:43:ad:9a:
                    aa:3e:6f:ea:f9:5b:65:f3:e6:c4:eb:0a:07:c6:2a:
                    af:7b:7b:1f:c2:39:38:22:31:fa:27:08:5d:5f:83:
                    36:b4:a5:4f:6e:2b:2f:58:bd:51:40:14:3e:1e:f2:
                    c2:7b:10:39:eb:89:59:04:a7:89:f8:45:35:18:a6:
                    a3:aa:23:7f:fe:91:05:17:6e:f9:0a:53:f8:dc:54:
                    1d:ab:99:8e:5f:35:70:f4:36:33:42:bd:e7:76:9a:
                    51:66:ca:51:cf:6a:8e:48:f7:ef:d7:06:c9:36:5f:
                    aa:f4:f0:52:68:8d:61:9f:0b:9f:ed:cc:bc:41:d4:
                    6e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EB:B1:D1:F6:CA:5E:7F:14:48:F2:BB:45:D1:EC:24:F6:8F:55:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b7409ed8-ffcd-3061-b6f1-7d0c6379264c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.227.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:7e:b8:87:24:02:92:4b:f2:e8:86:b8:93:6a:cf:4d:72:8b:
         de:00:cc:4b:a3:44:3a:ac:3a:c6:e6:8b:aa:b3:0f:4b:1f:80:
         db:ac:cd:8b:c6:65:63:a3:33:38:9c:11:d7:54:de:2c:9e:d4:
         63:3d:ff:4a:6a:d2:0f:8c:17:7e:26:d8:87:8e:48:12:24:8b:
         74:f6:2f:6a:f7:e0:01:fa:68:7b:aa:56:32:8f:4d:2c:37:b9:
         b7:dd:8a:e4:c9:08:1c:3a:5a:cb:ae:fd:6f:c5:2b:02:d6:5c:
         8c:49:6d:13:2e:1f:33:c6:ba:b1:44:91:7d:5f:48:f8:25:75:
         9c:73:86:f9:d2:63:50:c5:26:e9:b2:8e:af:d4:bc:ba:30:80:
         7a:0d:bc:fa:19:8a:c7:ba:96:e3:d1:f2:a2:92:41:27:3e:66:
         94:ef:68:c9:8d:47:e4:f1:44:8b:20:0e:24:ed:86:d4:3c:d9:
         b4:f3:ca:ef:85:41:5a:49:e6:28:a3:b5:35:73:1d:32:11:be:
         31:a7:d7:dc:03:98:32:7a:42:ee:b0:ae:7c:c6:ae:a0:cc:e0:
         8f:2e:61:a4:93:50:3e:23:3c:48:79:5a:7e:8b:bc:75:96:14:
         72:f9:94:c2:bb:63:5e:f1:ca:bc:fa:fd:1d:a7:3f:75:cb:f4:
         42:a8:97:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6oVOlW4BZACPngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk
Y2U3ODAxMzYtYTM1Zi00ZmM0LThiYmItM2ZkMzBkMTAzMTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRWxIfkoo0Ey83VUIRE7rNxfI8ZMayQq1agf
xU6kEHimRQOTK3wC5fh37ZRQdzG9hMefeXErP6lYlXsZqxc6Vgg2NTOOWMMbEEos
GBR5Psr8NsKmq4Bol7/ZL0ZJKWcHByZmigd7Sx5Bb4OhsIMOJkZW7fNe9gQ3Bm2w
8wlU+Fq4lFZDrZqqPm/q+Vtl8+bE6woHxiqve3sfwjk4IjH6JwhdX4M2tKVPbisv
WL1RQBQ+HvLCexA564lZBKeJ+EU1GKajqiN//pEFF275ClP43FQdq5mOXzVw9DYz
Qr3ndppRZspRz2qOSPfv1wbJNl+q9PBSaI1hnwuf7cy8QdRuWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLfrsdH2yl5/FEjyu0XR7CT2j1VrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjc0MDllZDgtZmZjZC0z
MDYxLWI2ZjEtN2QwYzYzNzkyNjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROMEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1+uIckApJL8uiGuJNqz01yi94AzEujRDqsOsbmi6qzD0sfgNuszYvG
ZWOjMzicEddU3iye1GM9/0pq0g+MF34m2IeOSBIki3T2L2r34AH6aHuqVjKPTSw3
ubfdiuTJCBw6Wsuu/W/FKwLWXIxJbRMuHzPGurFEkX1fSPgldZxzhvnSY1DFJumy
jq/UvLowgHoNvPoZise6luPR8qKSQSc+ZpTvaMmNR+TxRIsgDiTthtQ82bTzyu+F
QVpJ5iijtTVzHTIRvjGn19wDmDJ6Qu6wrnzGrqDM4I8uYaSTUD4jPEh5Wn6LvHWW
FHL5lMK7Y17xyrz6/R2nP3XL9EKol04=
-----END CERTIFICATE-----
Generated at Tue Jul 1 16:45:13 2025 by rpki-client