Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0168587a-91e1-3cb5-a4b3-b7c0f45cdc73.roa
File:                     0168587a-91e1-3cb5-a4b3-b7c0f45cdc73.roa (raw, json)
Hash identifier:          uev/IvRPDbM5FjWH1bq79S2yQaLepRVsMLe9NpRiCgg=
Subject key identifier:   60:DC:EE:9E:BB:8D:C8:B8:3B:16:7F:4F:0C:9D:6B:EF:2B:41:DA:07
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01979239A6689FE0897420
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0168587a-91e1-3cb5-a4b3-b7c0f45cdc73.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        70.190.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:97:92:39:a6:68:9f:e0:89:74:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=d588d079-7586-4062-b830-b2249ce1a5e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:65:a9:05:6c:5c:43:4c:c7:e5:90:6e:76:ab:
                    a0:d0:48:4c:03:06:7f:92:d6:10:06:a3:c8:98:3f:
                    e0:43:ab:a2:15:71:a0:a3:c2:dc:3e:d5:9b:7a:8d:
                    17:d0:e2:e2:47:0b:6e:7b:43:36:3e:68:b2:65:b1:
                    35:35:ec:3c:d6:be:3a:e8:d2:f9:d9:b1:30:5b:1f:
                    46:67:56:b5:bf:36:a9:7b:98:6c:3d:b8:9b:0c:cf:
                    43:77:66:e7:4b:1c:5d:db:9c:9d:a2:57:d6:35:85:
                    a9:b6:5f:66:3f:c7:d8:50:85:1d:0a:2d:dc:db:52:
                    06:d9:0d:be:fa:87:51:21:1d:50:ba:a9:79:97:7c:
                    49:84:51:2d:74:a5:a0:52:3c:5b:32:75:29:08:85:
                    f5:40:62:5a:db:72:7b:41:d1:6e:0c:02:a4:72:cc:
                    0e:ee:0a:f0:04:1b:49:9f:31:0a:31:ab:ba:81:ee:
                    7a:b5:69:93:c3:a8:09:21:a9:30:f9:56:3c:92:67:
                    20:22:08:ef:76:d2:71:8d:98:b4:94:fb:25:5f:be:
                    b5:e3:c3:5a:59:03:ad:cb:a6:96:62:a9:87:0e:7b:
                    b1:67:b4:8e:36:e8:de:92:a7:1c:f3:ea:85:05:a6:
                    1d:93:24:45:f8:7d:95:f0:52:2f:d4:0f:16:31:7b:
                    b9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DC:EE:9E:BB:8D:C8:B8:3B:16:7F:4F:0C:9D:6B:EF:2B:41:DA:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0168587a-91e1-3cb5-a4b3-b7c0f45cdc73.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.190.188.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:97:b6:27:d1:e9:f8:d6:49:e2:36:d2:6e:9a:24:36:cf:f6:
         71:27:04:a5:9d:c7:80:77:cc:b3:e2:ee:e4:c8:62:b1:7d:bb:
         3f:86:ba:41:64:9b:85:8d:2b:0e:4f:2a:00:e3:c8:de:0e:a9:
         bb:42:ff:a2:39:7d:9c:81:1b:3f:dd:ff:45:7f:18:93:ed:d2:
         34:78:6c:a8:18:a8:95:87:57:09:47:2f:74:cb:63:d6:95:7e:
         c4:a3:9c:89:cb:14:0e:e1:70:93:cb:a0:52:9e:68:b8:86:a4:
         76:3d:a9:06:f0:73:6d:53:9c:b4:72:06:81:af:88:5c:df:66:
         59:06:0e:95:db:0a:28:7e:de:bf:c6:4d:0f:da:e2:bd:7d:c3:
         ce:da:a6:43:09:da:21:6d:f5:70:1a:a9:63:b8:00:53:a3:89:
         d1:48:78:64:e4:87:b2:e6:1e:84:0d:25:4b:24:19:2a:cc:9a:
         d2:09:ff:3d:03:b2:32:5b:6f:1a:b3:9b:3a:fb:56:6a:1d:6f:
         e6:f4:05:64:1d:61:44:16:b5:dc:fc:6c:f2:93:48:e9:c2:b0:
         49:2e:26:6c:52:9c:cd:46:25:ea:ec:0d:6c:57:cf:4d:b0:e6:
         77:74:1f:1c:86:ee:4b:16:67:0c:8d:c8:3d:7f:2e:f3:77:8d:
         ca:6a:d6:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAZeSOaZon+CJdCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
ZDU4OGQwNzktNzU4Ni00MDYyLWI4MzAtYjIyNDljZTFhNWUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mWpBWxcQ0zH5ZBudqug0EhMAwZ/ktYQBqPI
mD/gQ6uiFXGgo8LcPtWbeo0X0OLiRwtue0M2PmiyZbE1New81r466NL52bEwWx9G
Z1a1vzape5hsPbibDM9Dd2bnSxxd25ydolfWNYWptl9mP8fYUIUdCi3c21IG2Q2+
+odRIR1Quql5l3xJhFEtdKWgUjxbMnUpCIX1QGJa23J7QdFuDAKkcswO7grwBBtJ
nzEKMau6ge56tWmTw6gJIakw+VY8kmcgIgjvdtJxjZi0lPslX76148NaWQOty6aW
YqmHDnuxZ7SONujekqcc8+qFBaYdkyRF+H2V8FIv1A8WMXu5vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGDc7p67jci4OxZ/Twyda+8rQdoHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDE2ODU4N2EtOTFlMS0z
Y2I1LWE0YjMtYjdjMGY0NWNkYzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr68MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWXtifR6fjWSeI20m6aJDbP9nEnBKWdx4B3zLPi7uTIYrF9uz+GukFk
m4WNKw5PKgDjyN4OqbtC/6I5fZyBGz/d/0V/GJPt0jR4bKgYqJWHVwlHL3TLY9aV
fsSjnInLFA7hcJPLoFKeaLiGpHY9qQbwc21TnLRyBoGviFzfZlkGDpXbCih+3r/G
TQ/a4r19w87apkMJ2iFt9XAaqWO4AFOjidFIeGTkh7LmHoQNJUskGSrMmtIJ/z0D
sjJbbxqzmzr7Vmodb+b0BWQdYUQWtdz8bPKTSOnCsEkuJmxSnM1GJersDWxXz02w
5nd0HxyG7ksWZwyNyD1/LvN3jcpq1ng=
-----END CERTIFICATE-----
Generated at Wed Oct 15 23:27:12 2025 by rpki-client