Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f27dc085-c1cb-3448-a3c3-3d9524a09c12.roa
File:                     f27dc085-c1cb-3448-a3c3-3d9524a09c12.roa (raw, json)
Hash identifier:          WtAU8FOrGDdwSaUEjMyK2Q9BU+QXNp+OOil7OCH3F3Y=
Subject key identifier:   C4:0B:4E:F1:9D:A0:56:56:B2:29:6C:5F:BA:0A:BD:35:7D:CB:A4:61
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DD5D133D20E4C7DECC4A840
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f27dc085-c1cb-3448-a3c3-3d9524a09c12.roa
Signing time:             Thu 19 Jun 2025 09:15:53 +0000
ROA not before:           Thu 19 Jun 2025 09:15:53 +0000
ROA not after:            Wed 17 Sep 2025 09:15:53 +0000
asID:                     22773
IP address blocks:        68.106.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:d5:d1:33:d2:0e:4c:7d:ec:c4:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 09:15:53 2025 GMT
            Not After : Sep 17 09:15:53 2025 GMT
        Subject: CN=d695d808-4586-436a-a93f-a2daee8d06af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:65:9c:e8:b2:83:97:29:14:dd:e3:40:b9:f3:
                    89:3c:5b:18:5b:fa:55:46:99:5d:d5:37:33:09:ac:
                    d8:44:c3:8f:91:50:d5:1f:51:f8:75:c0:6c:1f:19:
                    7e:7a:14:a0:4f:c7:4d:85:ee:11:b0:86:1c:dd:9b:
                    bc:28:c4:d8:d9:c4:e2:d7:11:cd:73:4f:bf:5c:9b:
                    03:a0:e1:84:44:38:92:e6:34:23:ef:e0:82:5b:65:
                    4b:6f:b2:5a:bb:9f:85:44:88:2b:b6:82:ee:c2:d5:
                    12:19:de:98:b1:b6:49:3e:c0:bc:10:69:8e:ce:af:
                    c3:8e:c3:d8:26:6e:19:01:af:e3:07:f3:ff:f5:a5:
                    88:b5:e6:d9:ba:df:bf:df:1e:00:f6:1e:24:6d:f0:
                    65:c7:8f:35:30:4a:b1:6a:78:07:ba:7e:f2:3e:fd:
                    17:10:77:bf:b0:85:39:2e:cc:6e:3f:95:e9:58:5b:
                    3f:9b:b0:b6:9f:1f:4f:c3:79:62:5a:d5:31:ac:bc:
                    1e:dd:ce:08:22:d0:35:d1:14:c7:fc:44:aa:6c:d2:
                    9a:dc:2c:c6:c9:51:a4:1f:f5:77:d3:c0:59:ba:44:
                    06:da:c8:2e:b9:46:ba:ac:bc:9d:1f:82:f0:18:92:
                    66:18:cb:93:71:7b:61:bb:a3:38:ea:f9:ca:e0:bc:
                    3d:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0B:4E:F1:9D:A0:56:56:B2:29:6C:5F:BA:0A:BD:35:7D:CB:A4:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f27dc085-c1cb-3448-a3c3-3d9524a09c12.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.106.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:5d:ff:23:df:fe:78:f6:de:d0:82:d2:11:c3:0b:61:43:2c:
         1e:89:7a:88:74:df:1e:5b:02:a9:d6:1a:28:7a:54:66:ed:2e:
         98:4c:bc:1b:f4:87:d9:d5:87:97:b9:42:35:4d:ae:bc:b9:e3:
         35:32:ec:a8:fa:12:ed:00:51:a0:5a:80:d1:53:72:e0:53:47:
         95:c7:8b:36:09:0f:6e:53:c1:fb:96:47:14:1a:fa:92:70:c1:
         3e:85:1e:1e:8f:ce:2e:a6:8f:33:a9:40:56:57:0e:ab:b0:71:
         5a:b6:cf:f9:f3:0e:a1:39:18:b1:0a:2b:d3:c4:73:52:72:dd:
         46:a0:c3:58:4a:52:f1:d7:af:0a:59:5e:fc:92:eb:2c:86:41:
         c1:92:21:48:18:45:b3:c6:ae:8f:a9:70:fa:e5:53:95:f1:c3:
         5e:5a:e8:dd:b6:e3:95:6d:97:c3:50:29:bd:49:a7:8f:cb:09:
         2c:cb:87:c9:86:62:83:cc:01:f9:37:90:56:f1:3f:aa:88:89:
         2c:8e:57:2f:d2:62:ca:3a:3a:7e:85:66:6c:5e:0f:79:ea:1d:
         1c:fe:94:09:bb:bc:6f:cc:da:a6:0d:18:c1:25:3f:bb:d2:d0:
         c1:30:52:35:03:19:12:9b:08:ed:99:78:84:d6:d6:35:71:5e:
         9a:18:5a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:06:00 2025 by rpki-client