Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25c47e6c-7b67-35d0-9488-e9d789589819.roa
File:                     25c47e6c-7b67-35d0-9488-e9d789589819.roa (raw, json)
Hash identifier:          SdYmArpu0LrFGr6k3xxIapwEGaNO/WbpLGjLLem2fvs=
Subject key identifier:   AC:35:AC:5E:D4:20:20:A2:AC:B5:C8:44:92:FD:D1:76:D3:BC:03:6B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F22099883747462B61F9C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25c47e6c-7b67-35d0-9488-e9d789589819.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        72.199.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:20:99:88:37:47:46:2b:61:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=9e1cd3af-0e7e-474b-a75b-98863c3149e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:02:e4:9f:24:05:d7:ee:27:75:4c:40:09:12:
                    41:38:77:c3:b1:ab:35:04:1f:92:ef:2b:7e:f5:19:
                    6f:3e:1a:8b:01:00:d5:2e:16:0b:ba:a4:80:48:f5:
                    de:03:2a:a3:af:0a:10:02:bc:1e:d1:23:e5:c3:6e:
                    2c:b9:60:4f:da:e0:5f:81:3d:c9:7f:1a:30:cd:b2:
                    5f:0e:59:ae:73:f7:1b:ce:9d:95:d2:bb:9e:94:f2:
                    da:9d:f8:96:74:04:82:64:f1:29:36:62:db:51:7b:
                    90:f1:d9:a2:d5:e3:72:68:e9:69:f7:fa:f2:29:cc:
                    7a:68:2d:d5:a0:e9:e2:57:39:df:2d:c0:c3:cf:4a:
                    9e:ce:55:97:13:e8:ec:4c:25:f5:a4:b1:cc:bc:4e:
                    ed:8d:9a:25:09:8b:c7:29:ae:f8:1f:ca:49:a4:89:
                    3a:4c:da:0c:e4:1d:15:4c:ce:49:27:22:54:fd:3b:
                    42:be:3b:db:b5:e5:80:5b:6a:e6:e1:05:0c:a0:60:
                    36:c5:55:ea:a0:4d:ed:8f:10:50:9b:41:39:79:50:
                    ce:0a:cd:5e:1b:c5:7d:67:29:ff:7b:45:8f:95:97:
                    06:97:b4:72:fa:a4:22:a9:26:55:c8:56:31:f3:fb:
                    f0:97:1c:c1:cb:de:5f:8a:b8:5e:ee:58:76:03:88:
                    17:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:35:AC:5E:D4:20:20:A2:AC:B5:C8:44:92:FD:D1:76:D3:BC:03:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25c47e6c-7b67-35d0-9488-e9d789589819.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.199.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:3e:2f:eb:95:8f:60:92:0d:6f:85:3e:13:45:c6:4e:56:0e:
         ba:c6:b3:7c:3d:a7:9d:16:1c:a7:ff:b1:73:51:aa:d8:39:ae:
         a3:c5:e9:a4:c0:1a:c3:da:dc:c7:f1:b8:70:70:4f:01:f3:da:
         1e:2b:fd:f7:1f:56:1c:bf:39:5b:de:fa:ef:03:ba:51:e1:31:
         bd:3f:58:4b:9f:6a:77:89:01:c8:bb:5e:0d:b0:74:70:20:57:
         24:88:3a:de:ae:4c:72:3e:38:a9:07:dc:51:af:84:cd:cd:73:
         a8:44:37:27:ed:00:a5:d5:da:7b:72:49:00:f7:83:b8:b1:7a:
         7a:41:14:e2:c3:fe:ed:11:d5:fd:63:49:d8:77:a8:96:88:3e:
         af:c9:70:92:9f:a1:ae:81:6f:23:6e:49:e0:42:f5:63:88:4a:
         c8:93:cc:c8:31:96:4c:b4:31:98:0d:e7:65:ec:37:1c:76:3f:
         b2:73:8a:82:3c:8e:56:cc:5e:f4:56:51:9f:11:9e:a1:9d:a3:
         db:6e:c5:bf:e9:21:66:72:e0:13:85:4f:f1:16:0d:5c:c9:6a:
         c3:6f:f5:f3:80:3f:3f:33:0d:31:e6:02:d2:1b:af:d7:fc:62:
         b7:79:76:a9:f8:2a:2d:71:cc:ea:58:84:cd:3d:3c:66:f0:0f:
         18:51:11:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:27:14 2025 by rpki-client