Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1edfd033-753f-346f-aaa1-03907528c54c.roa
File:                     1edfd033-753f-346f-aaa1-03907528c54c.roa (raw, json)
Hash identifier:          JCCZYr2IT1YN6CJ4/45ZnUK0Qgxgs/nQNOp+lF/8Fsw=
Subject key identifier:   72:8A:41:31:CD:85:DD:7A:07:3F:D9:35:97:EB:16:A2:BC:38:87:7B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F29A36F384B72AD47CC600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1edfd033-753f-346f-aaa1-03907528c54c.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        68.225.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:9a:36:f3:84:b7:2a:d4:7c:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=c69b9775-22ad-4024-836e-b8a9742b3684
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:e5:3f:66:37:58:fc:c6:01:a1:c3:6e:e5:
                    79:f3:60:00:c8:55:33:ec:92:8a:03:cd:6e:d2:8d:
                    cd:93:b4:c2:cc:f8:b2:1e:96:43:b8:46:c4:d0:0d:
                    56:fb:11:ee:33:37:ec:31:14:f0:64:5f:c4:f2:0a:
                    2f:01:0f:cb:1d:19:80:21:bf:a1:ca:1f:1c:67:60:
                    60:6c:0a:51:dc:f8:fe:00:e4:a7:a9:08:7d:ae:d6:
                    94:28:07:4a:84:a8:bf:6b:e0:7d:c0:54:09:f8:5b:
                    16:d5:01:b3:72:32:66:6e:6f:88:be:87:de:6f:ea:
                    33:58:0e:81:36:80:38:a5:cf:d0:1e:f7:0c:3b:15:
                    33:32:c0:e9:9b:63:d2:7b:db:d5:a8:bb:a3:77:ec:
                    ab:db:7b:98:1e:7d:c1:09:dd:39:89:bc:01:bb:f1:
                    4d:26:88:2a:16:67:39:f2:ad:2a:b9:b7:ac:3b:1f:
                    d1:33:e6:70:92:37:92:40:cc:2f:02:11:ed:ad:ff:
                    6e:7d:4a:4c:69:eb:56:ae:40:fe:6d:9c:f0:66:74:
                    6c:4d:da:a9:4b:95:af:43:e8:3a:99:b8:ad:98:78:
                    e6:8c:d3:37:2c:b3:18:0d:e1:56:f9:e0:af:f2:ff:
                    30:0a:9d:96:cf:f6:31:95:a7:57:3e:2f:41:06:0b:
                    d6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8A:41:31:CD:85:DD:7A:07:3F:D9:35:97:EB:16:A2:BC:38:87:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1edfd033-753f-346f-aaa1-03907528c54c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.225.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:79:1c:1b:10:92:74:79:9a:d9:d0:71:6e:ce:8f:d0:8b:df:
         ff:2a:c4:4c:d3:8e:49:db:3e:d9:da:44:f9:7c:fd:c7:3d:d2:
         03:a1:3c:78:f1:27:a2:6d:88:8a:18:3c:7a:a8:6e:4d:54:d8:
         97:ad:5c:cf:ab:d2:2c:f4:d1:29:49:dc:6f:9a:22:9a:c5:92:
         68:c9:da:74:d6:f2:8a:d0:ec:6d:7b:90:78:fd:b0:81:bb:d7:
         4f:ae:dc:57:6a:6f:e3:f9:17:a8:67:9f:c0:41:d2:ca:1c:68:
         77:d4:07:80:54:00:18:bd:88:63:97:66:a5:ff:e2:f6:85:1e:
         e6:dc:41:b6:6a:02:c2:43:fa:6c:e6:da:f3:9a:7c:a4:40:16:
         50:4f:80:b9:f5:2a:50:77:4b:f0:5d:86:c1:52:52:a9:a5:39:
         c4:52:12:76:fa:a0:5c:f9:31:e9:f8:87:27:82:97:dd:fd:7b:
         06:a0:b0:fb:df:f0:89:05:03:33:38:56:6b:ed:c4:1d:9b:19:
         36:37:2a:d9:9f:7a:f0:2d:cb:d4:30:1e:ea:c7:db:b8:74:52:
         69:64:f3:44:6c:8c:fa:ca:1c:18:22:06:29:c6:24:94:03:76:
         dc:af:01:52:72:d1:e4:5a:88:74:c2:5d:47:79:30:72:51:f4:
         a5:68:94:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:22:09 2025 by rpki-client