Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b902b56-950c-3581-bb73-b28e8ef58da2.roa
File:                     2b902b56-950c-3581-bb73-b28e8ef58da2.roa (raw, json)
Hash identifier:          M3Wu16dzi61ptIdZ7uwTI+ek1dCJSCOXvtlsG1COJ/Y=
Subject key identifier:   18:63:26:0A:B2:C4:0B:F0:33:1D:88:37:0A:B3:8B:55:B8:B2:F0:9A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B2066E52F738AB2CC1DB1FD40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b902b56-950c-3581-bb73-b28e8ef58da2.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        24.253.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:e5:2f:73:8a:b2:cc:1d:b1:fd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=793fb674-c763-47bb-a44a-260ccd93adf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:77:aa:86:8c:7c:6a:da:01:77:8f:fe:ab:07:
                    9d:76:cb:af:e3:56:9f:8e:41:c6:66:2e:cd:3d:7b:
                    f3:9a:8a:bc:a6:56:fb:dc:7d:a8:bd:e6:26:1a:50:
                    f0:64:a2:75:f7:b2:b5:e5:3e:98:70:d7:bb:03:0f:
                    c1:95:f3:ff:f4:0b:06:6b:8a:6f:7a:5d:d3:31:34:
                    cf:f6:fe:25:49:58:85:a2:c5:43:0a:74:31:d4:ed:
                    4b:2c:a2:58:80:60:e1:fa:6f:2a:c5:b9:57:36:c0:
                    e1:57:ba:dc:2d:fc:d9:75:35:92:3a:a5:b2:60:76:
                    0a:92:7d:ac:42:3e:1e:9e:8a:64:68:2f:6a:31:b5:
                    f0:35:55:60:a7:24:d6:a9:13:bb:6b:ea:a3:a2:d3:
                    5e:1f:c9:ec:fc:2f:1d:d6:1e:ed:4f:c9:b2:32:21:
                    d5:ef:e9:86:c6:93:b6:5b:84:df:f3:2f:1d:76:58:
                    1b:f7:61:d3:d4:b4:d0:d5:7b:41:de:bd:a5:6d:a5:
                    0c:8f:6b:56:03:f0:53:be:49:05:8d:5e:37:78:b0:
                    63:be:87:b3:a6:84:a4:69:04:5a:61:00:c5:c3:62:
                    bc:1f:b1:f3:76:68:2e:cc:90:01:2b:08:14:55:70:
                    f5:48:69:45:04:5d:30:34:95:d3:1b:35:ab:bd:58:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:63:26:0A:B2:C4:0B:F0:33:1D:88:37:0A:B3:8B:55:B8:B2:F0:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b902b56-950c-3581-bb73-b28e8ef58da2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.253.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:45:1f:80:e7:57:81:93:bf:bc:e2:24:ac:e6:7b:8e:dc:0a:
         65:ff:79:18:d6:97:d5:39:a0:5c:44:a1:44:32:8f:cb:2f:dd:
         85:3e:fd:7e:0b:43:c3:8f:9f:79:b3:07:81:d1:2a:4a:e5:e1:
         71:2e:b7:79:38:93:57:d7:00:27:6e:2c:55:f1:38:98:48:58:
         f5:43:a9:82:3a:83:dd:86:c2:58:b3:67:16:35:9a:d0:08:39:
         ab:0e:ec:97:9f:46:8e:6b:75:01:15:af:78:97:2e:b7:c4:ba:
         e7:eb:c4:9d:90:64:9d:01:1d:15:40:31:00:d9:72:89:82:1c:
         41:a2:c0:49:72:cd:b7:f5:d2:5c:25:fa:72:d8:5c:f4:5a:b4:
         29:1a:f4:89:fa:c4:74:44:77:ae:96:a2:6b:e3:a6:c2:3d:9c:
         e0:56:83:b5:ba:e0:51:fa:da:36:66:a8:00:2b:96:4e:9c:18:
         cc:53:60:48:6b:26:85:6f:6c:e6:4c:a6:0f:d8:0a:10:bb:e1:
         b8:ad:17:20:81:7a:64:14:d3:66:52:9a:47:c6:61:aa:25:61:
         f4:27:84:65:ec:08:9a:68:8e:ee:f0:98:ac:78:f3:70:c3:38:
         e6:ba:f1:f4:13:fe:17:42:95:50:eb:60:e5:61:60:59:fe:a5:
         db:b8:1d:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZuUvc4qyzB2x/UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk
NzkzZmI2NzQtYzc2My00N2JiLWE0NGEtMjYwY2NkOTNhZGYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3eqhox8atoBd4/+qweddsuv41afjkHGZi7N
PXvzmoq8plb73H2oveYmGlDwZKJ197K15T6YcNe7Aw/BlfP/9AsGa4pvel3TMTTP
9v4lSViFosVDCnQx1O1LLKJYgGDh+m8qxblXNsDhV7rcLfzZdTWSOqWyYHYKkn2s
Qj4enopkaC9qMbXwNVVgpyTWqRO7a+qjotNeH8ns/C8d1h7tT8myMiHV7+mGxpO2
W4Tf8y8ddlgb92HT1LTQ1XtB3r2lbaUMj2tWA/BTvkkFjV43eLBjvoezpoSkaQRa
YQDFw2K8H7HzdmguzJABKwgUVXD1SGlFBF0wNJXTGzWrvVj3mwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBhjJgqyxAvwMx2INwqzi1W4svCaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMmI5MDJiNTYtOTUwYy0z
NTgxLWJiNzMtYjI4ZThlZjU4ZGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAGP1IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZFH4DnV4GTv7ziJKzme47cCmX/eRjWl9U5oFxEoUQyj8sv3YU+/X4L
Q8OPn3mzB4HRKkrl4XEut3k4k1fXACduLFXxOJhIWPVDqYI6g92GwlizZxY1mtAI
OasO7JefRo5rdQEVr3iXLrfEuufrxJ2QZJ0BHRVAMQDZcomCHEGiwElyzbf10lwl
+nLYXPRatCka9In6xHREd66WomvjpsI9nOBWg7W64FH62jZmqAArlk6cGMxTYEhr
JoVvbOZMpg/YChC74bitFyCBemQU02ZSmkfGYaolYfQnhGXsCJpoju7wmKx483DD
OOa68fQT/hdClVDrYOVhYFn+pdu4HfU=
-----END CERTIFICATE-----
Generated at Thu Oct 16 02:01:36 2025 by rpki-client