Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e5e2b244-9ca5-3bc8-82cc-c21428b04f03.roa
File:                     e5e2b244-9ca5-3bc8-82cc-c21428b04f03.roa (raw, json)
Hash identifier:          t5Pg0CWPOZyAZLpD0QoarP3ESyoJtor7ZAvuUHw/MFA=
Subject key identifier:   25:38:2D:2E:F0:EF:3F:21:FE:C0:6D:B5:CB:06:8C:50:A6:F4:10:E2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3990AF59E16597AA7139F700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e5e2b244-9ca5-3bc8-82cc-c21428b04f03.roa
Signing time:             Tue 17 Jun 2025 20:33:22 +0000
ROA not before:           Tue 17 Jun 2025 20:33:22 +0000
ROA not after:            Mon 15 Sep 2025 20:33:22 +0000
asID:                     22773
IP address blocks:        68.2.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:39:90:af:59:e1:65:97:aa:71:39:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 17 20:33:22 2025 GMT
            Not After : Sep 15 20:33:22 2025 GMT
        Subject: CN=b54c95fe-a95a-4340-b6aa-5a41837efa8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:c6:ae:2b:75:23:c7:7c:fe:0f:dd:12:81:
                    44:96:9b:c2:d1:c9:9b:f4:e7:fa:ef:61:39:a4:7c:
                    e2:4c:4d:cd:83:f6:a5:85:1c:e0:d5:3b:c2:d0:20:
                    ea:a1:5a:b0:8a:ea:fc:48:dc:4f:fd:e8:ee:3c:82:
                    bb:f1:a7:d3:b2:a8:92:b6:60:58:f5:d7:0b:ff:bb:
                    3c:5d:84:10:51:eb:50:86:2c:26:92:be:ff:78:ab:
                    51:12:7f:6b:fe:79:89:9b:78:bd:22:84:4f:3d:36:
                    d5:3d:c6:73:40:0a:75:af:a1:32:15:73:eb:e3:7e:
                    8c:1c:73:35:62:5a:d5:f1:95:27:c9:05:55:7f:2e:
                    7d:a4:89:71:9d:3d:e4:f5:6d:c7:71:0c:89:74:75:
                    82:b1:4b:2c:6c:ab:6d:06:b0:66:0d:5c:ba:ac:b4:
                    53:d3:4c:e4:1b:b0:ee:5f:cd:d2:38:89:19:ad:47:
                    b1:ce:62:87:67:71:c8:9e:42:ca:9c:76:2b:e3:b1:
                    7c:3a:26:40:f7:18:76:57:38:d5:84:53:58:81:25:
                    54:8a:34:03:48:ca:ee:b8:ba:1d:76:79:b4:22:8f:
                    6d:2d:9b:a4:fb:50:2c:d0:e2:92:9c:56:df:f1:cd:
                    83:f0:a2:52:9e:9b:52:f8:de:9b:dc:d9:92:bb:7f:
                    9a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:38:2D:2E:F0:EF:3F:21:FE:C0:6D:B5:CB:06:8C:50:A6:F4:10:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e5e2b244-9ca5-3bc8-82cc-c21428b04f03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.2.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:6a:39:f3:e2:72:7b:f6:4c:dd:44:9a:af:c7:d1:7a:0b:ce:
         50:1e:5e:1b:73:b2:17:48:4c:49:19:8d:71:61:bf:64:e1:1d:
         30:a7:40:90:c2:66:e7:20:f0:a5:eb:ad:81:46:e9:37:72:b8:
         3b:97:8f:17:c2:62:92:4a:30:fb:7c:6b:d2:04:47:d7:f7:5e:
         37:3d:02:ea:49:09:4f:fc:1d:59:ac:0c:25:18:54:1e:5a:47:
         4b:d5:e3:29:41:d3:41:69:2b:aa:bd:49:26:8e:47:bf:30:79:
         97:e3:66:b4:64:c1:24:9f:f4:d2:cc:10:cc:1b:37:9f:21:1c:
         40:9a:da:5c:4d:4c:c0:d7:3b:78:ee:22:11:d5:67:78:8f:e1:
         3b:f8:94:74:48:15:ae:a6:ce:7c:88:d2:62:5f:c8:57:58:56:
         1d:ed:eb:46:bf:d2:29:ff:dc:93:ed:77:02:85:60:99:24:b5:
         33:5a:c3:5a:c1:7a:9b:d3:c4:56:f7:24:6b:8c:2b:60:b6:09:
         70:19:b5:ec:56:ac:5d:97:c6:99:83:da:db:ec:b7:e7:13:78:
         08:60:e1:a2:ae:2c:fd:e8:46:5f:74:78:5b:b7:72:b6:e4:48:
         83:ff:5e:b9:28:66:b5:12:98:23:a2:da:b9:8b:2c:1d:de:12:
         0a:d2:4e:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo5kK9Z4WWXqnE59wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDYxNzIwMzMyMloXDTI1MDkxNTIwMzMyMlowLzEtMCsGA1UEAxMk
YjU0Yzk1ZmUtYTk1YS00MzQwLWI2YWEtNWE0MTgzN2VmYThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOPGrit1I8d8/g/dEoFElpvC0cmb9Of672E5
pHziTE3Ng/alhRzg1TvC0CDqoVqwiur8SNxP/ejuPIK78afTsqiStmBY9dcL/7s8
XYQQUetQhiwmkr7/eKtREn9r/nmJm3i9IoRPPTbVPcZzQAp1r6EyFXPr436MHHM1
YlrV8ZUnyQVVfy59pIlxnT3k9W3HcQyJdHWCsUssbKttBrBmDVy6rLRT00zkG7Du
X83SOIkZrUexzmKHZ3HInkLKnHYr47F8OiZA9xh2VzjVhFNYgSVUijQDSMruuLod
dnm0Io9tLZuk+1As0OKSnFbf8c2D8KJSnptS+N6b3NmSu3+awwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCU4LS7w7z8h/sBttcsGjFCm9BDiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTVlMmIyNDQtOWNhNS0z
YmM4LTgyY2MtYzIxNDI4YjA0ZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRALuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAERqOfPicnv2TN1Emq/H0XoLzlAeXhtzshdITEkZjXFhv2ThHTCnQJDC
Zucg8KXrrYFG6TdyuDuXjxfCYpJKMPt8a9IER9f3Xjc9AupJCU/8HVmsDCUYVB5a
R0vV4ylB00FpK6q9SSaOR78weZfjZrRkwSSf9NLMEMwbN58hHECa2lxNTMDXO3ju
IhHVZ3iP4Tv4lHRIFa6mznyI0mJfyFdYVh3t60a/0in/3JPtdwKFYJkktTNaw1rB
epvTxFb3JGuMK2C2CXAZtexWrF2XxpmD2tvst+cTeAhg4aKuLP3oRl90eFu3crbk
SIP/XrkoZrUSmCOi2rmLLB3eEgrSTlA=
-----END CERTIFICATE-----
Generated at Wed Jul 2 00:44:31 2025 by rpki-client