Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bb7c471-594e-365d-89a0-91b381d16392.roa
File:                     0bb7c471-594e-365d-89a0-91b381d16392.roa (raw, json)
Hash identifier:          J4Azbfe+gKXu33VFnDNvtdceyGsNJCP1hdkr0yBral8=
Subject key identifier:   78:87:ED:00:C9:04:10:FB:3C:3F:75:3C:CD:FA:30:88:85:AB:45:E4
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F26966FF7A7BA6767ADF00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bb7c471-594e-365d-89a0-91b381d16392.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        72.200.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:69:66:ff:7a:7b:a6:76:7a:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=ebf48b5b-1ec6-4d3e-b266-83f56a634ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d9:e0:ed:76:72:e0:bf:2c:da:17:a3:a4:ce:
                    de:84:e7:3c:b3:a5:9f:06:ff:44:5c:16:b6:45:5b:
                    f4:15:80:28:d9:27:bd:c4:d4:8b:c0:c9:da:57:b9:
                    26:14:de:b0:93:ef:8a:35:4e:ad:88:f4:2f:70:0d:
                    e2:ce:07:80:18:8a:5b:27:fe:50:05:ff:cf:20:c2:
                    15:ef:2e:eb:94:54:2c:38:1b:9b:c5:0f:7d:c3:26:
                    80:1b:ac:95:e6:42:90:04:79:57:a4:26:15:2a:a6:
                    56:9d:57:99:9e:89:5c:92:cf:ef:8e:cb:30:bd:56:
                    50:a7:fe:80:2e:6e:36:be:c4:de:7c:78:80:72:21:
                    80:9a:12:96:c8:6f:46:5b:6d:f0:a0:9b:08:3b:d4:
                    f2:04:6d:c8:fb:88:e7:05:04:9f:a0:7f:9a:8c:08:
                    cd:2a:b4:28:2a:ef:c2:53:fb:f3:ff:41:67:b5:94:
                    d4:8f:19:28:ec:62:00:80:92:87:56:62:87:66:31:
                    c2:f9:a7:36:af:49:f5:8d:52:8b:c1:41:5f:68:40:
                    48:84:a3:32:74:ff:8b:de:64:01:38:70:da:19:58:
                    a0:95:f9:e4:80:ba:26:94:3e:60:1d:77:77:ad:33:
                    7c:3d:29:e0:69:cd:0d:cb:6a:e1:a4:20:48:50:20:
                    7c:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:87:ED:00:C9:04:10:FB:3C:3F:75:3C:CD:FA:30:88:85:AB:45:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bb7c471-594e-365d-89a0-91b381d16392.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.200.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:2d:51:21:b4:9f:2f:bd:d0:4f:5a:e7:8b:a2:19:ca:5b:0b:
         70:c9:72:23:74:3f:3d:6c:d6:a2:c9:5f:78:eb:30:05:ab:2d:
         84:bc:77:a4:5b:49:73:ea:3c:3e:87:05:5a:73:89:48:67:ea:
         e5:e5:b3:9a:96:18:f5:29:82:8e:8a:92:79:cc:40:65:71:08:
         eb:c1:97:f7:40:12:3a:91:f3:78:fd:af:c3:64:1b:6b:a3:ad:
         f6:2e:6f:77:19:69:52:52:69:8f:ec:3d:e7:3f:d7:3d:e0:fa:
         10:76:b1:f4:2b:6d:28:db:e1:fc:f7:75:4f:2a:83:3f:87:07:
         b9:aa:0b:b5:0e:08:a7:c6:0e:c0:fa:d3:54:fc:09:c6:59:fb:
         aa:62:e9:9a:f2:94:a4:18:4c:04:d2:f4:4f:98:2b:24:dc:dd:
         25:b5:71:19:32:fa:11:1e:96:02:53:91:43:d8:59:e9:90:d3:
         76:15:6b:18:ca:63:eb:98:20:87:a7:98:bf:fd:a6:9d:cf:ee:
         65:35:ed:3e:2c:05:c5:24:3e:ec:9a:48:b2:60:e5:85:65:b4:
         9a:e6:96:e3:f0:9a:90:f0:3e:9f:9a:f1:ef:d5:bf:6b:fe:ef:
         4d:a2:6c:5b:0c:47:78:20:e7:ba:fb:32:ea:4d:12:b6:f5:33:
         d9:e1:4c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:55:29 2025 by rpki-client