Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/532286bb-83f9-3ab2-856c-d4b63b5ceb3a.roa
File:                     532286bb-83f9-3ab2-856c-d4b63b5ceb3a.roa (raw, json)
Hash identifier:          SNV30QS08q/SYtaK7ZpiUGsojPYe+rlndVv09WWELTk=
Subject key identifier:   4A:6D:88:FB:B3:11:84:26:60:68:B8:81:F1:29:1C:52:CA:54:33:9A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1C37448BD8D631723A334400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/532286bb-83f9-3ab2-856c-d4b63b5ceb3a.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        68.3.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:44:8b:d8:d6:31:72:3a:33:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=48079a4a-447e-4185-9378-2e774b6a2b62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:3a:69:81:12:7e:f1:67:21:ed:bb:c3:9c:19:
                    b3:7b:62:6d:7d:bd:26:f0:e5:47:0f:c4:b6:d9:2d:
                    78:8a:14:c8:f0:16:c7:89:d2:f9:ce:1b:53:58:c2:
                    81:7d:23:a1:0c:b7:d4:11:78:c9:80:ba:0f:29:2d:
                    a1:92:8b:bf:98:4a:5e:18:08:48:6d:6f:37:6e:54:
                    af:0a:1d:6b:df:bb:d0:d7:89:42:1e:38:7b:e2:25:
                    94:96:15:ce:2e:d9:14:90:54:da:5f:dd:27:3c:4f:
                    eb:12:d2:31:50:f8:56:6e:bb:7c:0a:12:1f:23:a5:
                    99:9c:51:82:58:11:e1:89:66:cd:e7:1b:0e:e8:99:
                    eb:06:56:70:48:1d:33:f7:07:79:b5:3d:6c:15:2c:
                    c1:9f:99:9b:ad:8d:f1:4d:f2:e5:dd:7d:cf:ee:54:
                    37:ab:cc:4b:98:3f:11:8f:aa:b3:40:a2:87:67:25:
                    08:95:31:9f:d0:ea:c0:d4:24:bb:ed:c8:20:85:bc:
                    4e:14:e8:af:2d:aa:b1:29:41:17:2d:27:90:81:e5:
                    29:f5:52:ea:c1:fd:f3:c5:e7:4a:76:75:40:44:fa:
                    16:d6:11:ef:a5:d3:0e:85:c5:d3:75:25:e5:24:55:
                    3c:38:38:7a:cc:5b:8c:b4:5a:05:43:4f:fa:d1:fa:
                    c6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6D:88:FB:B3:11:84:26:60:68:B8:81:F1:29:1C:52:CA:54:33:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/532286bb-83f9-3ab2-856c-d4b63b5ceb3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.3.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:74:c4:c0:3b:75:70:fd:d4:aa:99:0e:26:62:79:ed:ea:a5:
         eb:33:4c:56:2f:98:c1:a2:d3:22:ed:50:4c:d3:ea:bf:92:3c:
         28:b0:c9:fb:18:0d:98:0b:2d:b7:65:a4:07:91:23:b5:52:ab:
         56:e7:c5:3c:31:d5:59:af:81:ed:0c:27:63:52:3c:04:f2:78:
         fa:c6:4d:f7:b2:64:da:a7:62:b9:6d:5c:71:43:c8:83:fb:3c:
         01:7b:ed:48:2a:6d:7a:2a:93:62:c2:ba:4e:b5:81:b0:cd:89:
         b7:04:fc:f6:4b:f5:0c:c9:3a:05:e1:d6:7e:53:62:8a:d4:f4:
         c2:f5:d1:68:21:f0:32:d9:42:79:2c:a6:44:15:cc:fb:e4:c4:
         0e:30:e3:13:e8:68:57:91:6d:73:a1:b4:af:ce:ca:2f:de:00:
         a6:bf:be:c3:4f:bd:95:7c:d5:03:31:ed:91:10:f7:e2:52:90:
         c1:26:5f:e3:ee:29:6a:e4:72:52:24:7b:0b:e8:d6:09:7b:bb:
         a4:41:12:8f:8f:a8:f6:00:56:c7:d5:6a:d1:3a:39:f9:d2:17:
         cb:83:0a:08:49:dd:7f:cb:ed:e2:e1:02:10:9c:14:41:25:13:
         04:33:31:d2:cd:cf:89:81:6b:3a:a8:72:7a:e2:61:f6:da:07:
         71:e5:d1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:25:06 2025 by rpki-client