Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18769d4b-4df2-373e-8f67-f7ce2d1cc510.roa
File:                     18769d4b-4df2-373e-8f67-f7ce2d1cc510.roa (raw, json)
Hash identifier:          o+cgIdyLtqR2Xp2cX5eXu2MKrCDiq8AODTxVJRBgYko=
Subject key identifier:   41:72:B8:55:C2:01:7E:7E:F4:4D:68:20:41:69:26:ED:16:F8:E5:30
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F27B01738060FD2F483E00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18769d4b-4df2-373e-8f67-f7ce2d1cc510.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        68.111.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:7b:01:73:80:60:fd:2f:48:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=dbb6800d-4b21-40c6-baa0-eb9bce8e046b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a4:22:3a:6c:54:77:45:f2:02:0e:07:e4:13:
                    59:81:b1:12:97:84:63:83:08:4e:f5:c1:f5:cc:75:
                    89:cd:71:01:dc:19:fc:5f:d9:5d:ef:6f:e8:ef:1e:
                    aa:3a:3a:5e:7f:23:35:d3:7e:77:08:d1:e8:15:05:
                    68:6d:8c:ef:9c:93:e1:81:18:7e:03:27:cb:43:1b:
                    26:ba:d7:7c:2d:ca:09:14:14:10:bc:b8:9c:2a:0c:
                    6c:cd:fa:98:c7:6d:c1:c7:e4:eb:06:60:02:95:78:
                    3e:72:74:c8:61:2d:65:46:a9:e8:48:0a:6d:61:f6:
                    94:a7:35:da:92:f9:58:96:65:b9:cd:55:58:74:40:
                    d2:15:14:1b:3f:0d:86:d1:bb:14:aa:74:73:90:26:
                    41:e5:68:af:ff:bc:d4:ab:60:b6:42:7b:d6:91:0e:
                    a3:24:23:ea:98:66:e2:ab:ad:c1:d1:0e:b1:3c:c9:
                    37:c2:16:2e:36:fa:e1:aa:dc:00:01:26:10:75:47:
                    e6:14:b5:d9:74:a0:d2:fe:4e:0c:22:aa:e6:82:27:
                    c5:73:fb:cf:f8:73:ec:e2:80:2b:a3:db:13:0e:c7:
                    02:bb:d4:09:3a:35:3b:c1:df:44:33:dc:c1:ca:4d:
                    30:e0:51:6b:f4:d9:03:4e:5b:22:1f:4d:33:95:36:
                    36:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:72:B8:55:C2:01:7E:7E:F4:4D:68:20:41:69:26:ED:16:F8:E5:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18769d4b-4df2-373e-8f67-f7ce2d1cc510.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.111.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:bb:cb:15:37:d1:35:a8:f0:24:d1:dc:e0:d2:9a:cb:7c:1f:
         6b:d1:bc:a8:83:ea:6a:80:bb:04:90:49:37:a7:d6:dc:d2:1b:
         a2:99:57:50:0f:52:e6:ea:56:7b:a5:56:7e:49:74:30:d2:21:
         fe:43:0b:18:97:2b:50:e3:d8:1b:1b:98:f2:c3:78:9c:57:7c:
         65:e4:82:16:70:a7:ec:9b:c5:6d:31:60:3d:77:ac:a0:63:8b:
         6e:3d:a4:f7:7a:82:ad:8a:70:43:c9:29:b1:3b:68:1b:09:c8:
         0a:bc:b4:ef:fb:9e:41:83:3c:42:cb:40:0f:b3:8f:b7:a5:d4:
         d4:f0:19:4d:d3:69:b4:c6:31:9a:7f:55:59:fa:b4:2e:8e:4e:
         fb:d4:4f:93:54:47:85:f5:9b:02:dd:02:b3:5d:9c:f0:13:10:
         f0:84:85:09:4b:27:2c:c0:49:77:d2:72:4f:16:12:77:55:e2:
         eb:c2:2a:48:28:ec:81:cb:4c:80:0c:e7:7b:ec:31:fb:96:6d:
         53:f7:16:23:c2:7f:69:4a:6f:36:3a:4d:00:f2:4c:1d:51:3f:
         ec:cb:2d:4a:10:b8:b5:f0:e5:d8:53:45:55:26:57:2d:76:1c:
         22:78:64:ed:6f:79:a8:90:d2:ba:56:d7:ac:41:35:42:5c:c2:
         d0:0d:84:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:21:52 2025 by rpki-client