Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dfdc5c3-872f-319e-b62e-2c7e9b462fc0.roa
File:                     2dfdc5c3-872f-319e-b62e-2c7e9b462fc0.roa (raw, json)
Hash identifier:          j0Yu9WpRseCPI0Fbi5pqeE72MgdHUXzUrVp6pNUxDSc=
Subject key identifier:   F6:73:4A:66:5F:5A:7A:A9:F3:48:DE:9E:B3:31:DF:C7:2A:4A:6D:15
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1C3746F76C704BC8EEF83DE0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dfdc5c3-872f-319e-b62e-2c7e9b462fc0.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        68.98.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:46:f7:6c:70:4b:c8:ee:f8:3d:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=176a1eca-34d1-4aea-a97b-2e49acd6f2fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e7:1c:09:8e:f5:8e:65:45:5f:fc:c9:a7:05:
                    16:db:df:6b:1f:be:9b:c5:a2:02:36:6e:b9:74:d4:
                    57:3f:32:29:86:0e:8f:0d:4b:7e:45:6c:f5:9c:be:
                    34:7f:76:82:cd:c7:10:14:dc:76:19:16:ab:2f:34:
                    2c:53:b4:ef:29:f4:f6:ea:26:f6:8b:1c:86:e3:61:
                    94:da:bf:fd:35:1e:dd:b9:22:7a:ad:ea:5e:fe:95:
                    76:58:88:68:b2:09:0b:00:31:98:63:d4:35:b8:ec:
                    38:08:9d:ae:cb:40:84:c6:c7:f7:bb:7b:4c:b8:ae:
                    39:6a:49:c1:7d:e1:27:fe:0d:cc:51:74:12:d4:c2:
                    67:c6:17:43:ab:7a:41:51:f0:5c:21:3f:13:07:67:
                    71:4b:dd:21:05:41:9f:6b:83:ec:fa:85:81:99:2f:
                    a0:39:ac:fe:b4:40:d8:f1:b3:91:29:66:4a:c0:26:
                    92:26:2d:ad:c7:f2:55:80:33:45:80:1a:d7:da:a5:
                    62:3d:dd:41:29:32:55:1b:db:f6:e4:53:9e:3d:03:
                    41:00:86:ab:29:86:c1:d5:dc:72:aa:95:2c:39:0e:
                    1b:0e:53:c9:ea:e3:90:61:de:2a:62:1e:56:cc:ea:
                    a1:70:c9:a6:d6:13:97:04:9a:1f:e5:d8:96:b5:49:
                    a1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:73:4A:66:5F:5A:7A:A9:F3:48:DE:9E:B3:31:DF:C7:2A:4A:6D:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dfdc5c3-872f-319e-b62e-2c7e9b462fc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.98.50.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:bd:64:f5:57:5d:33:1e:17:90:d2:b8:bb:fb:54:64:a0:5a:
         ee:7b:0a:91:a3:43:e3:15:24:77:b9:05:33:f5:93:11:1a:56:
         ea:62:c3:94:46:c2:90:9d:02:25:33:f3:1d:9c:b2:92:69:12:
         aa:03:b2:23:b8:f5:35:0a:f2:1d:f6:e0:20:f7:5a:c0:74:91:
         af:33:99:40:a5:f9:e9:8b:f3:b7:a3:e4:7f:66:47:ab:0e:20:
         a8:cb:1e:84:fc:88:46:8d:06:84:60:39:bb:63:39:45:36:e2:
         64:7d:3e:97:c6:60:c5:66:4b:26:c5:a2:50:c9:17:b6:71:b1:
         f9:98:53:c8:b3:1e:6a:b4:a7:ef:86:f6:fe:ae:26:b9:fc:8a:
         da:6c:ad:10:c2:ae:44:09:13:72:b5:f1:39:a9:3b:c3:fb:6f:
         18:87:74:de:1c:97:0c:24:ea:c2:ae:d7:ad:8c:a0:d0:cf:22:
         69:dc:66:4f:30:55:1a:e3:f6:b2:62:80:48:e3:99:64:d6:4f:
         c5:17:f0:e8:ee:22:85:29:51:6d:1f:e0:21:b7:ba:de:66:d7:
         1e:d3:b0:6e:b2:50:38:29:95:97:0c:c4:12:ff:7a:6a:b0:40:
         58:2f:d4:13:27:e0:d5:a3:1c:5f:8c:8b:1a:30:e8:5b:76:e5:
         b9:92:51:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:44:21 2025 by rpki-client