Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05a749ee-934b-3556-aee8-e5f4d071278f.roa
File:                     05a749ee-934b-3556-aee8-e5f4d071278f.roa (raw, json)
Hash identifier:          XHAR0fM/47n0MHBtqZvgknRxk510J94ahg3r4vJ/Q+8=
Subject key identifier:   C1:4C:04:47:3D:C3:57:7C:A8:72:F4:C2:14:04:9C:BB:A1:F8:BD:5A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C4B7C6964910F10E75340
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05a749ee-934b-3556-aee8-e5f4d071278f.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        68.228.38.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:4b:7c:69:64:91:0f:10:e7:53:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=a822ffc2-7e79-46e1-b5ba-e66536bd0a15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b4:c4:ba:3d:79:0d:ef:14:30:14:86:20:41:
                    10:f3:be:95:9f:7a:49:b4:36:af:4f:49:5a:d0:78:
                    1d:fa:03:46:b8:27:e6:22:56:af:a7:43:f2:5f:f8:
                    8f:04:43:df:93:4d:56:2c:5a:2c:12:5e:79:61:61:
                    fb:60:c3:7b:ff:5f:65:5d:aa:49:76:c0:53:8d:0d:
                    14:b6:36:08:8e:23:ff:26:39:68:66:70:33:e9:79:
                    5c:09:58:43:a5:ac:e8:bb:96:29:bb:e4:0c:cc:d5:
                    95:34:f8:58:6a:65:bf:34:b7:96:3d:7f:5b:bc:a9:
                    31:06:33:a4:58:19:ff:21:e3:47:35:8f:fb:3e:a9:
                    87:64:38:3a:ef:a1:41:e1:4b:5c:1b:30:16:19:39:
                    d0:09:d3:cf:7e:a9:f6:12:49:57:3f:b2:34:f3:0a:
                    55:3c:89:95:8b:1c:d4:c6:e0:9d:35:fc:64:f5:23:
                    a8:b9:7f:8e:ff:75:98:80:88:2a:51:0d:d5:5e:33:
                    72:7d:a2:ad:7c:f3:3f:e7:2b:15:0d:58:b0:ac:64:
                    36:b5:6a:9f:c9:a8:4f:76:24:ab:85:3e:97:42:3b:
                    a3:31:de:3a:ea:50:9b:8b:1b:df:a1:42:d5:f9:34:
                    48:42:ae:bb:06:d7:7c:2f:55:ba:ca:27:df:e4:df:
                    21:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4C:04:47:3D:C3:57:7C:A8:72:F4:C2:14:04:9C:BB:A1:F8:BD:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05a749ee-934b-3556-aee8-e5f4d071278f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.228.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:ee:81:2b:dd:c2:0e:5f:5d:56:1f:72:0c:e0:03:14:3a:50:
         05:d2:93:66:30:67:07:95:1d:6d:24:41:35:93:bf:2c:97:7d:
         3b:6d:55:ef:a5:f9:a8:77:c5:ed:ad:ee:11:ee:8a:8b:38:06:
         cf:cc:d4:0b:47:84:88:93:81:b9:3f:a1:91:9d:41:e7:3f:bf:
         39:ff:41:1f:4a:10:a9:f8:e7:07:ed:22:36:36:6b:56:85:90:
         53:6f:9c:81:81:9a:67:3f:14:36:20:7b:87:49:88:f6:8e:a2:
         3c:9f:71:80:db:49:47:45:4b:e9:aa:2c:0d:64:39:32:ea:b4:
         41:c0:00:84:e9:40:4d:a2:6f:b3:2c:02:6b:c7:b5:af:3a:2e:
         bb:f5:a8:ee:0f:d9:94:ab:29:c8:37:a0:ae:16:83:b8:e1:14:
         b5:55:6c:99:ad:a1:ff:8a:84:76:56:4f:d0:fd:bf:85:25:9c:
         58:d8:df:cb:11:32:88:a0:d0:62:b8:86:fc:4f:45:b0:e5:79:
         37:19:cb:d1:2a:7c:6a:3e:5e:20:cf:64:fd:22:05:f4:45:3c:
         5e:c7:e7:21:67:7a:c2:d9:69:99:fb:6f:1d:88:e4:3d:54:d3:
         bc:c7:60:10:f3:1e:f2:45:17:1b:19:1c:37:2d:49:48:7e:43:
         cd:61:e1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:20:44 2025 by rpki-client