Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42c0671b-bc9e-3ce6-9c31-feddd24cf6ef.roa
File:                     42c0671b-bc9e-3ce6-9c31-feddd24cf6ef.roa (raw, json)
Hash identifier:          16X3Sivdg6svE9yg4AMpS9lebM6lkLvFjlXSG95+rgE=
Subject key identifier:   7C:05:7C:7B:89:59:7B:35:B1:AE:7B:05:AA:72:10:AA:8F:12:09:57
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C6DA140D66DDBDDB63940
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42c0671b-bc9e-3ce6-9c31-feddd24cf6ef.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.172.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:6d:a1:40:d6:6d:db:dd:b6:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=981616d8-ac39-4cab-9975-54fe34ebf570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ea:e9:74:3b:65:60:bc:4c:82:76:d6:ee:ed:
                    27:c0:82:d0:2d:7c:06:3d:0e:2a:3d:2c:b6:45:5b:
                    f7:fa:18:3d:9f:24:7f:19:a3:1d:0f:28:ef:81:a1:
                    a5:1d:33:77:fe:2d:a1:14:fc:c6:ad:3b:17:cb:93:
                    ab:22:11:9f:68:b0:b5:f8:79:75:83:48:e6:0e:75:
                    e7:4e:64:c5:0b:ca:05:b5:41:96:df:4c:d8:bc:51:
                    63:b3:36:e9:16:e6:8f:d5:a8:b0:67:09:1d:36:0e:
                    17:75:e5:13:3e:3b:83:92:a6:5c:d3:be:10:fd:11:
                    a0:ef:55:47:e2:10:af:66:d1:1d:d3:7a:0f:b6:8a:
                    37:1f:e4:d7:94:44:33:fd:e9:59:59:57:23:ef:d3:
                    d6:c2:c7:6c:cf:2b:ea:fa:d8:b2:03:65:31:da:c5:
                    c0:a3:51:c4:e9:b5:f8:2a:d4:e1:75:03:b9:53:e4:
                    d4:f3:e6:b3:77:7b:85:b9:d7:5f:3a:eb:b7:2b:62:
                    aa:41:6a:a2:0e:6a:27:77:4d:e8:72:aa:08:6f:34:
                    7c:e3:6b:6f:16:07:0a:61:64:7e:e4:ce:4a:35:a1:
                    70:59:75:74:2f:0c:6d:86:dd:f3:76:f0:77:05:66:
                    53:87:45:b3:d6:2f:2a:6f:c7:fb:33:72:4b:2f:7a:
                    aa:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:05:7C:7B:89:59:7B:35:B1:AE:7B:05:AA:72:10:AA:8F:12:09:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42c0671b-bc9e-3ce6-9c31-feddd24cf6ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.172.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:a3:a0:93:ad:eb:de:c9:eb:80:93:b7:4b:a0:40:70:20:45:
         6d:63:e1:36:e4:b4:af:0c:25:fa:0e:06:23:a8:db:cf:f5:0b:
         10:7d:6a:c1:52:37:b6:3b:2b:b6:92:9c:c6:32:6f:f3:07:64:
         f3:0d:30:70:95:a7:a0:0f:5e:9e:ff:a3:8f:45:35:12:7a:19:
         a1:4d:c9:1d:23:5b:10:00:1e:e4:d9:1a:60:f9:b9:39:83:8f:
         87:eb:fd:f5:61:91:98:cd:cb:58:f0:b1:cc:a9:6d:a4:4b:86:
         ec:30:56:19:f1:b4:b9:83:f5:f5:cc:85:e6:f0:14:03:5a:33:
         cb:2b:89:71:90:f2:c2:3c:67:7a:56:6d:a0:96:15:70:bc:f6:
         9a:ab:0f:fb:e1:71:44:b4:4e:f9:8f:76:a8:75:d1:b5:8c:e6:
         bf:bf:da:ce:7a:d8:de:5e:e2:07:50:0f:df:12:52:86:48:2b:
         87:55:09:dc:86:cb:f7:ce:95:a4:69:c4:db:c8:e0:b4:ba:8f:
         21:9a:af:88:e7:26:ef:f7:9e:55:42:db:ec:58:dc:31:ee:19:
         e5:de:c9:7f:ce:db:39:7a:98:58:63:43:da:64:c2:8a:7e:e9:
         52:04:26:6c:28:99:5b:d8:f7:7e:f4:78:e7:59:51:25:b7:68:
         27:87:04:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:44:19 2025 by rpki-client