Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18e4f579-e16d-3e56-a682-899c131af92a.roa
File:                     18e4f579-e16d-3e56-a682-899c131af92a.roa (raw, json)
Hash identifier:          J6PQX7NTPSeqObQPTSFT4uPQsmDxoGXRBvHA3/YRVGI=
Subject key identifier:   1D:5E:37:A9:30:8C:FF:C1:F7:B1:43:9C:62:38:8D:A0:CB:9F:3F:A1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9CA7B7A8600D1BB4D47580
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18e4f579-e16d-3e56-a682-899c131af92a.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        174.73.252.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:a7:b7:a8:60:0d:1b:b4:d4:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=236cfae2-77ae-4632-ac72-968b6ba45b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c9:2c:46:0f:90:02:63:b3:b0:4e:44:d5:50:
                    f8:e0:b2:06:86:61:45:67:40:aa:01:fb:1e:b5:8c:
                    2b:77:1e:ed:51:08:a0:23:df:ab:84:b7:01:f1:87:
                    78:aa:b5:20:4d:3f:1b:a5:10:6d:dd:c7:b1:2c:06:
                    7f:d2:37:a5:65:8b:0f:f6:7e:de:67:12:46:f3:8a:
                    a1:c7:e7:b1:c2:84:26:2c:8d:7d:84:6b:e0:7c:79:
                    9a:f5:2c:42:53:5c:f5:f0:79:82:7f:74:18:84:7c:
                    b1:da:01:7c:34:45:6f:7e:28:bd:cc:be:77:9c:ca:
                    01:86:86:d9:55:e9:35:c2:7b:94:f5:6a:3b:c6:72:
                    85:2c:a3:63:e7:70:1f:66:14:48:72:f5:df:29:e4:
                    e1:67:8b:35:d7:24:da:35:d8:55:a2:ff:96:35:33:
                    a6:a9:cd:c7:3b:59:eb:ab:50:ea:48:7a:08:bf:f5:
                    e5:9e:36:4a:21:00:39:9a:ec:1e:d1:79:b4:b2:dc:
                    04:52:31:ad:86:f7:c5:c2:a6:8f:4f:f7:22:11:c5:
                    13:00:3c:b8:14:a1:25:e0:cf:7e:ab:bc:d4:23:f0:
                    43:82:4c:bd:3e:6d:ea:4d:03:ea:bc:ff:20:d7:c2:
                    48:71:64:29:54:83:88:da:8f:d0:b3:f6:e5:35:8f:
                    69:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:5E:37:A9:30:8C:FF:C1:F7:B1:43:9C:62:38:8D:A0:CB:9F:3F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/18e4f579-e16d-3e56-a682-899c131af92a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.73.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:bd:71:08:44:5b:b2:3a:5b:4a:2a:af:b0:f2:b5:98:31:1f:
         ea:be:55:ed:dd:07:12:fa:74:e1:24:d0:f3:28:60:b9:60:24:
         be:c8:a7:d9:e2:0e:21:52:32:49:7f:87:a2:ab:8e:54:aa:a0:
         61:1f:dd:2f:30:64:89:79:10:22:ce:43:25:6c:63:2a:78:e9:
         b8:b9:2b:a6:cf:06:f6:d0:3c:f8:26:78:a6:97:e9:d5:b8:8e:
         94:8a:7f:ac:4b:10:1a:ea:76:f6:fa:70:01:1a:88:0d:80:07:
         c8:e0:62:a5:3a:fb:88:64:ba:43:35:b5:fe:00:de:b2:6a:61:
         d7:60:46:f3:58:ae:8b:b3:54:8c:1a:b7:c6:13:72:cd:64:51:
         38:48:e8:37:ec:88:d4:2a:41:73:bd:5a:89:5e:8f:7f:49:9e:
         2f:47:ec:33:15:f8:44:f9:51:9e:3b:5e:04:92:87:c3:e0:61:
         3f:9d:19:cc:ce:40:36:05:0f:b0:1a:01:9b:ea:c1:d2:86:a8:
         bc:11:33:5f:20:3e:45:7a:bf:bf:36:9f:57:08:c8:09:a7:45:
         ab:e4:47:98:55:2d:eb:3e:2d:88:e0:64:1a:73:44:67:ad:fc:
         0f:44:18:cb:f8:e2:d4:c9:b8:65:15:37:20:ea:6f:86:82:3a:
         3b:b3:fc:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:22:16 2025 by rpki-client