Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/53b13c0b-3bf9-301e-bf7a-a1397fb8617d.roa
File:                     53b13c0b-3bf9-301e-bf7a-a1397fb8617d.roa (raw, json)
Hash identifier:          4Zbtd4ietiQUyugIAmOSvttuEtHVc7LYjsNSnM9Fekc=
Subject key identifier:   D4:3E:F2:46:95:95:9C:F3:1F:51:5B:30:DF:E4:33:71:A4:E5:A6:94
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9CB6260D8B7AA85EE2F940
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/53b13c0b-3bf9-301e-bf7a-a1397fb8617d.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        184.190.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:b6:26:0d:8b:7a:a8:5e:e2:f9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=f160ee4e-f8ce-4781-8018-a3b9f83d639c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:e5:3b:25:0e:39:e2:16:96:53:0f:f8:d3:
                    17:74:c4:5a:0b:39:d3:da:65:69:f8:62:58:35:8f:
                    c0:6d:f4:05:7f:6f:77:a6:94:14:7f:20:11:ce:7c:
                    f7:35:4e:8e:f5:11:d3:4b:fa:d9:cb:77:4d:8c:d7:
                    fe:dc:d4:ca:e1:25:ba:60:91:33:42:41:28:af:23:
                    80:ef:9a:60:0f:f2:1d:3e:8f:6b:ad:de:68:dc:8a:
                    3d:6a:8c:cb:db:31:61:94:f2:66:8c:5d:6d:14:65:
                    86:99:e4:74:b0:d3:3f:4a:41:6e:09:34:31:e0:36:
                    3f:eb:91:73:19:1b:6d:f2:ca:5f:c0:73:80:dc:68:
                    d1:be:09:da:25:7a:df:b2:41:00:3d:5c:9b:77:a3:
                    f8:c1:c1:1f:bd:b7:44:11:7c:84:f3:43:d1:ad:8a:
                    cc:c7:fa:ce:4e:72:6b:da:74:69:10:26:9f:27:35:
                    45:0f:59:0b:67:71:a8:9b:24:6b:40:4a:1e:e9:8d:
                    f2:22:b6:e4:59:f4:b2:3b:b8:05:10:14:03:ec:8e:
                    e3:86:86:88:1b:72:90:56:3b:9b:8a:5c:c5:fc:23:
                    03:5a:76:d6:f6:a6:47:56:50:b8:87:31:a0:65:83:
                    aa:ef:02:ba:9f:90:b0:0e:75:a7:c0:68:fd:6b:b8:
                    e9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:3E:F2:46:95:95:9C:F3:1F:51:5B:30:DF:E4:33:71:A4:E5:A6:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/53b13c0b-3bf9-301e-bf7a-a1397fb8617d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.190.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:cd:18:62:70:2a:3b:26:be:7e:06:8c:ac:28:3c:39:97:f5:
         8b:d9:ce:a0:cd:f7:f3:4d:5f:67:4d:57:52:a9:a5:97:4f:4a:
         bd:96:de:f5:cc:a7:25:29:d7:69:22:ed:c3:ef:c9:41:98:28:
         44:c0:32:0f:cf:7c:53:fc:c3:d2:08:ae:fc:98:cb:4e:92:17:
         ae:30:c3:10:73:d4:28:b9:0b:99:a6:2c:d3:7b:78:7f:02:3a:
         20:e1:d2:d2:17:37:b9:3a:14:b2:71:51:6a:1e:7b:53:09:be:
         06:02:6a:fa:62:35:17:42:f3:79:cd:e0:7b:55:8d:ac:b8:2f:
         db:cd:72:92:e0:1c:7d:eb:69:aa:28:a8:67:b3:3e:c7:e7:16:
         a2:58:45:7a:d5:14:9c:a1:59:77:a7:05:aa:d5:35:bc:0c:cf:
         0d:bc:f7:27:a1:85:eb:bf:5e:1f:ba:3e:aa:87:69:80:46:ab:
         4b:d5:ea:ec:e1:15:ea:85:54:a0:66:0e:c9:39:fc:53:c7:a5:
         a6:6a:b2:5f:4d:52:45:d5:29:20:33:5c:b9:34:45:55:f5:d0:
         87:63:3c:9e:7d:e0:db:9c:84:a5:26:57:3f:e0:ef:8f:37:6e:
         5e:8b:e1:dc:6c:6e:e3:a5:49:3b:9d:a9:3a:d8:4f:f0:86:95:
         28:98:a2:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 01:57:32 2025 by rpki-client