Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1377f3ba-ed54-3ba4-9b4f-8e631b168744.roa
File:                     1377f3ba-ed54-3ba4-9b4f-8e631b168744.roa (raw, json)
Hash identifier:          H2xFat3mWnigwNlN0F78/YBIa+8rIVepMmrzmUzrUUE=
Subject key identifier:   E1:B9:A4:3B:D2:8F:E9:CD:3F:31:22:1D:1B:32:A9:66:9D:78:22:58
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E775448988A8BDA143BEBC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1377f3ba-ed54-3ba4-9b4f-8e631b168744.roa
Signing time:             Thu 19 Jun 2025 14:41:19 +0000
ROA not before:           Thu 19 Jun 2025 14:41:19 +0000
ROA not after:            Wed 17 Sep 2025 14:41:19 +0000
asID:                     22773
IP address blocks:        72.217.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:77:54:48:98:8a:8b:da:14:3b:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:41:19 2025 GMT
            Not After : Sep 17 14:41:19 2025 GMT
        Subject: CN=4e798b72-b085-4a82-a9f4-ae8b61262087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e6:74:1a:85:ad:b3:db:66:61:7b:8d:ea:b7:
                    c7:fb:2d:5c:2d:53:a9:44:fb:60:60:d7:f9:e3:cb:
                    e5:5d:0a:15:04:ee:6f:77:b4:1d:cb:f6:c6:ea:15:
                    97:d5:93:90:67:d1:92:5f:eb:00:cc:54:c7:9f:aa:
                    b6:60:da:ac:81:31:49:dc:e1:36:f6:4c:69:a6:2d:
                    4c:77:65:8f:c4:f7:1a:8c:5e:aa:8d:b3:df:99:b4:
                    2c:d8:dc:7a:30:7d:b9:05:b6:eb:e7:5b:fc:36:a3:
                    bc:3c:ec:bf:0a:fa:38:ed:8f:b0:b8:af:da:f3:1c:
                    e3:09:45:9f:b9:fe:91:57:f4:aa:a6:6d:ed:99:0f:
                    5c:84:ab:6d:cd:8d:8b:ef:0a:4e:11:5b:f0:c1:a1:
                    c7:95:52:51:cc:fc:69:65:45:b5:94:3a:ca:5f:3c:
                    bc:8c:6e:ea:72:fa:99:86:0f:9f:11:0d:b9:04:18:
                    13:01:31:20:84:89:e7:4e:e1:f8:67:3a:5e:7b:5c:
                    31:f5:ce:39:76:c5:fd:55:da:70:41:58:9e:86:1b:
                    7d:c6:7b:7b:d3:1e:2a:0f:1a:40:da:34:48:45:e7:
                    5d:7d:d2:7e:0b:8f:ca:7f:0a:82:20:48:40:cd:aa:
                    9f:89:a6:bf:6f:8a:f3:8a:da:4b:79:a4:42:d6:25:
                    69:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B9:A4:3B:D2:8F:E9:CD:3F:31:22:1D:1B:32:A9:66:9D:78:22:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1377f3ba-ed54-3ba4-9b4f-8e631b168744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.217.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:e6:df:af:58:3f:bd:e1:52:b7:2f:4f:b5:2a:db:3c:63:ad:
         62:d8:95:8d:69:8f:3a:92:e7:e3:ce:5c:ae:fe:c6:52:db:1d:
         94:c3:63:e0:3e:b8:5d:ba:fe:ba:d6:04:4a:d1:a5:35:15:a3:
         d0:7f:16:7a:f2:35:39:4f:c9:44:af:a8:95:32:bb:49:55:44:
         81:5c:3a:27:51:8e:b3:63:4d:da:9d:97:19:5c:40:d9:73:4e:
         26:7a:e4:dd:ec:31:db:1c:c7:71:fa:eb:0f:2a:20:d3:1d:5f:
         1c:a5:c5:88:20:90:6d:d5:40:eb:64:69:c2:af:4b:61:0b:05:
         ea:24:e4:af:c5:1f:12:f2:39:fc:83:c0:7a:89:0e:f9:50:30:
         7a:96:3a:40:44:a6:0c:3a:1f:cb:27:05:c2:81:f5:10:b9:56:
         66:7a:5d:36:d4:49:bc:17:71:1a:75:0f:c4:1d:0e:25:1b:e7:
         fc:a9:b7:92:e0:18:43:19:6c:a9:6a:03:71:c1:9b:f9:97:93:
         e5:25:33:8d:34:cd:41:51:35:36:40:87:3a:c8:b5:c1:57:47:
         f2:67:aa:44:ff:1d:b0:fe:b1:3d:44:c9:cd:4c:c1:f4:99:5d:
         36:e8:0d:e3:53:9c:be:3d:40:46:d1:48:4f:f4:3c:46:d7:08:
         8e:1e:c2:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+d1RImIqL2hQ768AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDYxOTE0NDExOVoXDTI1MDkxNzE0NDExOVowLzEtMCsGA1UEAxMk
NGU3OThiNzItYjA4NS00YTgyLWE5ZjQtYWU4YjYxMjYyMDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+Z0GoWts9tmYXuN6rfH+y1cLVOpRPtgYNf5
48vlXQoVBO5vd7Qdy/bG6hWX1ZOQZ9GSX+sAzFTHn6q2YNqsgTFJ3OE29kxppi1M
d2WPxPcajF6qjbPfmbQs2Nx6MH25Bbbr51v8NqO8POy/Cvo47Y+wuK/a8xzjCUWf
uf6RV/Sqpm3tmQ9chKttzY2L7wpOEVvwwaHHlVJRzPxpZUW1lDrKXzy8jG7qcvqZ
hg+fEQ25BBgTATEghInnTuH4Zzpee1wx9c45dsX9VdpwQViehht9xnt70x4qDxpA
2jRIReddfdJ+C4/KfwqCIEhAzaqfiaa/b4rzitpLeaRC1iVpVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOG5pDvSj+nNPzEiHRsyqWadeCJYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTM3N2YzYmEtZWQ1NC0z
YmE0LTliNGYtOGU2MzFiMTY4NzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASNlVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACbm369YP73hUrcvT7Uq2zxjrWLYlY1pjzqS5+POXK7+xlLbHZTDY+A+
uF26/rrWBErRpTUVo9B/FnryNTlPyUSvqJUyu0lVRIFcOidRjrNjTdqdlxlcQNlz
TiZ65N3sMdscx3H66w8qINMdXxylxYggkG3VQOtkacKvS2ELBeok5K/FHxLyOfyD
wHqJDvlQMHqWOkBEpgw6H8snBcKB9RC5VmZ6XTbUSbwXcRp1D8QdDiUb5/ypt5Lg
GEMZbKlqA3HBm/mXk+UlM400zUFRNTZAhzrItcFXR/JnqkT/HbD+sT1Eyc1MwfSZ
XTboDeNTnL49QEbRSE/0PEbXCI4ewkM=
-----END CERTIFICATE-----
Generated at Wed Jul 2 07:07:32 2025 by rpki-client