Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40448d0c-f0b0-3829-86de-399baf0f226d.roa
File:                     40448d0c-f0b0-3829-86de-399baf0f226d.roa (raw, json)
Hash identifier:          /vW/MrOuIn2WbOpPoF1rG8DKelwkU+qJKA+t8mNZLWo=
Subject key identifier:   F8:EB:19:3F:62:B1:7C:23:49:B6:91:50:FB:F0:7E:6A:40:28:29:B3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F26CBCC81DAE7429671300
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40448d0c-f0b0-3829-86de-399baf0f226d.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        68.107.116.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:6c:bc:c8:1d:ae:74:29:67:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=1921926b-75e9-40f3-9d47-6b58de346515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d8:49:03:01:2d:65:e7:9a:b4:65:3d:bd:c9:
                    4b:93:a7:b2:96:8a:2a:22:d0:6e:73:c6:69:08:95:
                    39:83:f1:71:d5:be:bb:68:1f:f9:f6:fa:64:0b:1e:
                    34:92:a9:ea:d7:64:1b:56:ed:38:24:bd:d5:b6:12:
                    1e:f1:50:98:53:e1:14:8a:4c:11:83:fa:11:82:83:
                    9c:f5:65:67:75:e0:2e:c4:2e:df:f9:58:89:41:11:
                    65:32:f9:90:11:f5:b8:0a:7b:46:ee:95:a9:07:94:
                    e1:cc:67:e9:99:4c:a7:03:7e:81:3d:79:d0:be:9b:
                    bd:fc:e2:40:23:a4:81:6e:cd:a4:27:f3:00:f2:5f:
                    16:31:4a:ff:6d:86:d6:ad:76:aa:7e:cb:7f:5e:cf:
                    e0:b0:bf:cd:d9:a6:26:79:cb:9c:83:fc:a4:b2:fa:
                    59:67:ba:62:37:61:ad:1a:fe:0e:5b:36:44:8f:41:
                    59:4f:61:69:c4:39:a2:aa:dd:12:4c:b1:70:1b:21:
                    e5:56:f2:90:47:db:6d:6e:d2:b9:b8:e3:65:ff:de:
                    4f:28:b0:41:2f:7d:1a:ee:01:8d:d7:ad:35:bb:6f:
                    ed:b1:a2:bd:ae:6c:e4:a3:52:38:5e:28:c0:2c:7f:
                    20:00:5c:ea:95:39:bd:40:93:ca:14:a4:f8:5b:b1:
                    34:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EB:19:3F:62:B1:7C:23:49:B6:91:50:FB:F0:7E:6A:40:28:29:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/40448d0c-f0b0-3829-86de-399baf0f226d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.107.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:f2:7b:5d:b0:48:c4:10:b8:58:73:0e:20:48:75:82:d7:d4:
         3d:cf:9a:b7:48:ad:f3:42:ec:b3:c7:25:eb:07:12:32:99:ce:
         81:89:aa:e1:97:53:02:2e:cf:61:4a:3b:fd:82:7c:4c:ac:18:
         18:01:2b:fe:aa:1f:ad:9e:3e:2f:b8:cb:a8:a8:61:36:f2:d7:
         71:99:05:79:6e:27:b1:6a:01:19:fb:db:76:c0:a3:26:50:c1:
         44:fa:19:fb:ac:f5:54:bd:e3:51:f5:2d:fd:a4:eb:6d:4e:d9:
         3e:fc:b0:3f:ac:4d:d8:b0:d5:30:d5:98:95:dd:5b:a2:61:77:
         ca:41:76:15:c5:c1:fb:0b:34:11:27:e2:d2:d6:aa:70:2c:92:
         3f:2d:28:34:48:39:c8:c4:98:67:37:75:69:9f:1e:b2:41:3f:
         8a:4e:13:1a:b1:41:76:32:ac:a8:bb:04:56:5e:ab:af:c3:24:
         73:3e:2a:be:38:aa:a0:26:fc:6f:dc:3a:7b:32:91:d0:91:19:
         19:c4:b0:4a:8e:8c:92:18:b1:0e:8a:9b:bb:bd:04:5e:b8:f8:
         f5:0a:29:07:6a:9c:09:25:a0:b1:bb:a2:75:72:d3:4a:fd:be:
         5c:b8:50:1e:b5:59:d6:1b:e7:8e:09:83:ac:5d:5e:68:6d:0e:
         3e:fc:53:cb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28my8yB2udClnEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk
MTkyMTkyNmItNzVlOS00MGYzLTlkNDctNmI1OGRlMzQ2NTE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdhJAwEtZeeatGU9vclLk6eylooqItBuc8Zp
CJU5g/Fx1b67aB/59vpkCx40kqnq12QbVu04JL3VthIe8VCYU+EUikwRg/oRgoOc
9WVndeAuxC7f+ViJQRFlMvmQEfW4CntG7pWpB5ThzGfpmUynA36BPXnQvpu9/OJA
I6SBbs2kJ/MA8l8WMUr/bYbWrXaqfst/Xs/gsL/N2aYmecucg/yksvpZZ7piN2Gt
Gv4OWzZEj0FZT2FpxDmiqt0STLFwGyHlVvKQR9ttbtK5uONl/95PKLBBL30a7gGN
1601u2/tsaK9rmzko1I4XijALH8gAFzqlTm9QJPKFKT4W7E0bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPjrGT9isXwjSbaRUPvwfmpAKCmzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDA0NDhkMGMtZjBiMC0z
ODI5LTg2ZGUtMzk5YmFmMGYyMjZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGt0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDye12wSMQQuFhzDiBIdYLX1D3PmrdIrfNC7LPHJesHEjKZzoGJquGX
UwIuz2FKO/2CfEysGBgBK/6qH62ePi+4y6ioYTby13GZBXluJ7FqARn723bAoyZQ
wUT6Gfus9VS941H1Lf2k621O2T78sD+sTdiw1TDVmJXdW6Jhd8pBdhXFwfsLNBEn
4tLWqnAskj8tKDRIOcjEmGc3dWmfHrJBP4pOExqxQXYyrKi7BFZeq6/DJHM+Kr44
qqAm/G/cOnsykdCRGRnEsEqOjJIYsQ6Km7u9BF64+PUKKQdqnAkloLG7onVy00r9
vly4UB61WdYb544Jg6xdXmhtDj78U8s=
-----END CERTIFICATE-----
Generated at Wed Oct 15 23:50:57 2025 by rpki-client