Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/454a10b8-951a-3928-8ce6-84586481f699.roa
File:                     454a10b8-951a-3928-8ce6-84586481f699.roa (raw, json)
Hash identifier:          2bmwlptwwZucO/F1yMHgC3qAHDioMwXbEml9Bh2bOOs=
Subject key identifier:   8F:BF:58:E5:75:41:D2:CD:D2:39:C1:99:91:35:B3:19:8C:C5:46:3D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B20670DE67632425E5A157800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/454a10b8-951a-3928-8ce6-84586481f699.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.173.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:0d:e6:76:32:42:5e:5a:15:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=2444aff3-4d3a-451a-8d6f-6f85d4c33fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:33:56:98:14:ac:d8:5e:c2:2b:00:37:ea:a6:
                    13:fd:1a:50:25:ee:a5:57:82:ae:eb:10:f9:74:06:
                    3a:ec:07:6c:65:9b:45:0a:d8:4c:8d:9d:21:3a:16:
                    e8:14:00:ae:f0:92:e6:f7:35:e7:59:6b:3d:75:e6:
                    eb:4f:14:26:94:d5:79:68:5d:de:a0:a8:8c:5c:93:
                    ae:f1:64:b0:e1:fb:5c:ee:9f:2a:6c:99:3b:fd:06:
                    09:a7:36:3d:d4:1f:36:88:23:43:8a:dd:31:cf:c1:
                    45:bc:e1:e2:9a:f3:e7:50:35:d6:90:bb:c7:25:d2:
                    f4:b6:8f:7b:ae:03:f2:b7:e2:cf:d4:11:0f:90:8f:
                    e4:43:4b:c7:7f:ea:0e:53:5f:c4:b9:8f:1c:f2:7a:
                    59:67:8c:f8:32:41:b0:98:dd:d4:67:70:4d:20:2d:
                    d8:10:31:bc:28:16:f2:82:b7:c0:cb:cc:1d:70:7e:
                    5f:c4:e8:8d:c2:46:5b:f8:50:cd:ad:87:e4:3e:31:
                    bc:7c:30:a9:a4:0c:63:0f:d5:4e:62:bb:26:1b:6e:
                    09:6b:d8:12:97:11:20:3f:c4:00:e4:e4:49:96:aa:
                    f9:20:43:3e:71:13:88:2c:bb:63:c3:92:cc:be:2c:
                    7d:cc:6d:7c:6c:a9:3e:3a:33:7c:59:4f:9f:c0:c3:
                    7d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BF:58:E5:75:41:D2:CD:D2:39:C1:99:91:35:B3:19:8C:C5:46:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/454a10b8-951a-3928-8ce6-84586481f699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.173.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:d3:1f:5e:25:4f:b2:cf:33:a7:bc:63:61:8a:74:a6:8d:c2:
         5b:48:ad:32:c2:70:0f:19:fc:b3:a4:bf:77:a5:a9:47:1d:e1:
         9f:a5:87:62:c8:2a:73:e8:23:32:5c:b7:69:7f:c8:1a:c6:89:
         a6:34:2b:39:42:ed:23:f7:c0:8f:26:9b:c4:fe:dd:1c:69:07:
         da:e6:df:7f:d5:98:94:4d:7d:dd:f5:bb:56:9d:95:67:db:ce:
         06:40:3c:8a:89:bd:28:6d:5d:28:0a:f1:17:c2:15:49:50:ba:
         b7:c3:e0:b9:8d:cf:d9:de:b0:a9:27:fd:df:c3:8e:e8:15:e6:
         10:64:dd:95:91:bb:d5:7b:f3:95:09:06:49:47:7f:9e:a3:e3:
         9a:67:fb:63:47:e1:cc:b4:93:83:7a:84:fa:85:97:40:e4:7e:
         f5:1e:7f:1e:60:ca:3d:63:f1:85:eb:37:ff:d2:58:c7:c1:60:
         02:70:11:45:c1:c2:c9:1f:3b:3a:36:0b:e5:85:b3:e0:23:b2:
         44:d8:df:b6:21:b5:78:df:8e:94:a9:7c:65:d6:b8:87:f9:3a:
         96:e8:80:f7:c9:d3:be:27:fb:5d:4d:7e:93:0f:3e:d6:ee:4e:
         dd:cf:8e:e5:f1:0e:6a:f2:7a:aa:e0:09:53:b6:d4:1e:3c:67:
         87:24:8d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:28:24 2025 by rpki-client