Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1dec56d2-9042-37e5-8c54-bb89c4959a50.roa
File:                     1dec56d2-9042-37e5-8c54-bb89c4959a50.roa (raw, json)
Hash identifier:          vSyJdtgdwgcT4ZofCpn6RYAYzWpwU3syKnrku0b7DIA=
Subject key identifier:   18:43:0A:7F:63:9B:3D:98:2F:E6:5C:DE:1F:42:C6:8D:B3:4F:6F:96
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F20D84A65F9D44970DFDC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1dec56d2-9042-37e5-8c54-bb89c4959a50.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        68.110.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:0d:84:a6:5f:9d:44:97:0d:fd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=99388e98-f0bb-4444-8a55-bf0bd5fde642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:41:fe:0a:8f:fa:ab:95:75:a1:d1:77:d6:e7:
                    8b:46:2d:09:ba:3b:00:24:53:be:24:44:c9:d3:8d:
                    53:a8:c5:e7:94:32:90:05:e9:d5:55:d8:c7:20:62:
                    9e:d8:4d:26:30:f5:76:0a:49:19:6b:ae:bf:72:c9:
                    cf:71:10:b4:55:9d:27:24:6e:7e:ca:d7:96:b7:a8:
                    2e:a5:1a:76:b8:55:33:43:3f:52:57:02:0f:a3:be:
                    f2:70:63:c9:6b:4f:53:d8:d9:7f:4c:35:aa:9d:3f:
                    18:d6:e5:d1:9f:65:50:c3:76:5f:b2:3d:da:bd:9a:
                    44:f6:c3:18:95:4a:bc:a5:6b:02:18:1b:b3:53:60:
                    be:00:4f:dc:d9:0a:f3:da:9d:ee:66:ea:96:4f:60:
                    8f:54:7a:51:85:55:5f:a1:c1:0d:98:f6:af:4a:58:
                    4e:2a:47:3e:3d:8e:d1:94:28:34:49:a6:09:68:19:
                    e1:c9:66:5d:0a:96:e6:25:83:1b:75:2f:9b:bb:d2:
                    49:e0:36:10:c1:39:35:d4:f4:68:61:4b:ce:3c:aa:
                    fa:69:b2:b3:ae:dd:23:3f:98:90:01:45:0d:30:c3:
                    cd:f7:3b:70:2d:e0:8c:87:a8:28:5a:64:c8:6c:9a:
                    da:79:42:26:fd:26:33:7a:5d:7f:a9:21:8c:ac:06:
                    70:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:43:0A:7F:63:9B:3D:98:2F:E6:5C:DE:1F:42:C6:8D:B3:4F:6F:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1dec56d2-9042-37e5-8c54-bb89c4959a50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.110.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:53:d5:e4:83:2c:29:b0:1e:ca:66:ca:f2:75:d6:ec:2e:71:
         a3:5a:60:8b:47:3a:18:65:bd:f7:71:63:b9:5a:3e:96:8c:0f:
         76:a4:58:0d:86:1d:ac:39:c3:a9:be:12:b0:8f:32:b3:47:d2:
         8b:09:69:53:4d:43:fa:00:4e:63:31:48:a7:f4:eb:a2:81:d1:
         c3:e3:d2:81:28:1f:ee:32:26:64:e5:85:bd:5e:f6:17:54:92:
         c3:39:59:b8:b9:7f:dc:09:e5:f9:f1:e5:00:07:b0:cb:dd:25:
         8a:eb:76:91:55:3c:b6:71:79:55:c8:6d:24:58:53:da:30:16:
         65:84:dc:ef:ad:1a:9f:a2:c1:74:5c:1a:89:d7:d9:c2:29:d7:
         c6:4b:3e:35:ea:23:06:09:a5:c2:b2:b3:ac:bc:97:7e:c6:ee:
         4c:ac:6d:81:23:98:b8:a1:42:97:e3:96:08:22:95:e3:23:ad:
         e6:e2:cd:5b:c7:fc:b7:ec:99:c3:bd:10:05:c1:6a:0d:57:68:
         21:33:c5:56:72:85:b2:46:bd:62:8c:2a:b7:56:8e:38:ea:57:
         e7:88:b0:22:ab:e9:4c:b4:ac:f0:89:65:51:1b:8b:ce:e4:3e:
         97:f4:91:c0:df:5d:ec:32:b8:34:d1:65:45:9b:a5:22:84:98:
         e7:74:ce:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 02:01:39 2025 by rpki-client