Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d90ffbd1-ab50-339f-8bbb-5d8cbc2c49ac.roa
File:                     d90ffbd1-ab50-339f-8bbb-5d8cbc2c49ac.roa (raw, json)
Hash identifier:          r3y9igwo6dvkivjEJfeZ2hrLtt0Bg5OtZg+XxtAz70o=
Subject key identifier:   68:C6:0E:3E:DF:54:D0:F7:28:0C:31:D5:3D:1F:AF:72:BD:9E:99:F5
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A40AA363FA415B8F5F1910800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d90ffbd1-ab50-339f-8bbb-5d8cbc2c49ac.roa
Signing time:             Fri 20 Jun 2025 09:35:27 +0000
ROA not before:           Fri 20 Jun 2025 09:35:27 +0000
ROA not after:            Thu 18 Sep 2025 09:35:27 +0000
asID:                     22773
IP address blocks:        174.68.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:40:aa:36:3f:a4:15:b8:f5:f1:91:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 20 09:35:27 2025 GMT
            Not After : Sep 18 09:35:27 2025 GMT
        Subject: CN=677b8637-748d-458c-9314-9162e3e5371c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:bc:73:17:85:4f:a5:8b:d5:b8:e8:51:d3:6b:
                    c4:9c:fc:2e:df:c1:ee:94:5c:00:a3:39:de:4a:c0:
                    2d:82:04:24:43:a0:b5:30:7c:00:61:49:f6:d2:19:
                    87:ad:ea:f9:c0:73:9d:5b:e0:82:14:ca:6b:19:f0:
                    2f:2b:b1:01:90:32:da:cc:87:dc:9c:73:67:e2:03:
                    13:b9:3c:a5:bb:06:96:d9:4f:ba:d7:da:7e:54:dd:
                    51:f8:12:80:18:2d:03:7b:b4:83:9b:08:2d:f6:ce:
                    be:27:8c:24:77:5a:d8:85:94:73:27:a2:ac:c2:a9:
                    80:8d:3b:47:d2:5a:77:97:e6:28:dd:9d:85:bf:40:
                    a9:78:da:c3:1e:99:78:cc:8a:9b:b1:eb:e0:a0:d6:
                    cd:65:cf:6f:36:f1:e8:47:bf:6e:f5:aa:08:b1:e8:
                    40:9a:94:97:0c:15:2a:ef:16:b7:3a:3c:55:f9:8f:
                    d5:b5:11:8d:5c:87:2a:e1:7d:3d:05:86:b9:6b:35:
                    da:85:ad:75:2a:32:b7:b7:3e:86:bf:34:a5:79:a1:
                    d6:0f:cf:98:6b:01:6a:76:d6:00:fc:a6:e2:5e:e2:
                    49:c3:4d:99:8c:21:d7:eb:30:a8:af:a6:82:eb:0e:
                    b6:10:f3:4b:09:03:ba:5c:44:9f:4a:fe:7d:b4:d5:
                    b8:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C6:0E:3E:DF:54:D0:F7:28:0C:31:D5:3D:1F:AF:72:BD:9E:99:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d90ffbd1-ab50-339f-8bbb-5d8cbc2c49ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.68.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:da:e2:04:a7:c6:bd:61:a8:f4:5f:5e:2c:87:fd:a1:33:1f:
         99:11:83:48:b9:f1:f3:f8:9e:b9:3d:0e:39:d3:cb:c6:33:ef:
         52:16:43:be:65:55:19:19:df:2d:4d:81:e8:46:12:27:3d:a3:
         c7:7d:59:50:76:11:7f:02:83:c0:a3:5b:67:c8:ac:cf:bc:d5:
         b2:43:bc:28:6f:0a:60:22:ed:f8:c0:26:30:dd:52:67:15:cb:
         0a:3a:99:3d:9c:6c:4f:51:2b:6c:f8:8d:eb:ce:de:1a:96:29:
         fd:88:8a:21:00:05:97:48:89:0c:23:eb:1e:08:8c:9d:38:00:
         5e:75:82:9c:25:0b:fa:fe:46:84:5c:99:5f:7e:69:27:01:34:
         f2:94:26:7b:fc:b1:55:34:8e:19:5a:5e:6b:4e:54:21:30:30:
         67:97:62:93:23:9d:0c:21:92:4e:6e:6d:54:4b:08:00:c3:44:
         18:d7:77:76:1c:4e:6e:ce:99:51:dd:a6:71:b0:bc:0f:5c:e1:
         de:bb:06:2a:54:d4:a4:81:10:1f:25:b6:47:7a:22:15:ec:b9:
         e1:d8:98:f3:56:7d:8a:5c:92:67:d5:49:e3:c1:4d:c5:ee:45:
         6e:d9:6c:08:a1:ff:b0:0e:a0:40:26:c8:4b:15:26:e6:24:55:
         63:da:98:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 06:10:29 2025 by rpki-client