Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d3b1140-1b21-3901-a985-840564add3d1.roa
File:                     5d3b1140-1b21-3901-a985-840564add3d1.roa (raw, json)
Hash identifier:          UrQvjsDtaGhsq+XiTX+4tB6mPaQ0k0jMAITuVxwmsjo=
Subject key identifier:   F0:C7:91:0E:AE:AC:44:1E:C6:14:4C:FB:DE:8D:CD:DE:72:F9:F5:87
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B2066EA74BCAA0F5AE7208520
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d3b1140-1b21-3901-a985-840564add3d1.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        68.96.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:ea:74:bc:aa:0f:5a:e7:20:85:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=a7aef9ad-a9c4-4546-8a20-92415eb15a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:44:ad:7d:7a:36:df:13:92:8a:a5:87:1d:df:
                    2e:96:4e:98:a9:a5:a0:3f:af:e5:9d:87:60:74:e4:
                    d7:49:06:ee:aa:74:41:53:0f:eb:df:45:70:62:90:
                    94:ff:2d:16:ec:99:cb:a1:ca:0c:d1:dc:30:f9:62:
                    2c:9f:ca:17:c1:6d:15:4d:39:42:c0:77:06:c1:08:
                    64:2f:41:aa:6a:95:94:7c:02:b0:3f:b2:ed:04:d9:
                    e6:83:b9:8e:22:c8:aa:91:11:cc:ba:81:0d:d6:fd:
                    55:72:97:8c:cb:6e:34:c0:9b:0d:d2:af:24:09:7e:
                    0e:13:ea:c2:ae:5c:8a:0e:41:a3:a7:10:d0:39:b4:
                    56:d9:b9:3d:a8:50:06:c2:3b:62:90:8b:46:b3:80:
                    42:ab:91:c7:09:9f:ee:85:b9:47:e3:7c:6f:45:cc:
                    8e:10:f1:22:ac:e2:15:1c:f9:ba:ba:5e:d5:cb:85:
                    c8:0e:63:49:57:93:d7:d1:d0:1d:01:42:9d:aa:47:
                    60:4d:5f:6d:08:ee:b3:a7:fa:8b:43:bb:30:10:73:
                    f3:9a:aa:8d:76:08:bd:f1:fb:e2:f5:2c:08:cd:2c:
                    fd:3f:c0:2a:32:c0:b5:a7:4c:a8:74:38:17:a1:32:
                    41:2a:4d:a1:07:02:3e:48:4f:95:ce:db:a3:01:7f:
                    ca:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C7:91:0E:AE:AC:44:1E:C6:14:4C:FB:DE:8D:CD:DE:72:F9:F5:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d3b1140-1b21-3901-a985-840564add3d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.96.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:cc:07:47:b8:fc:ad:aa:e5:c6:ab:20:fc:b5:f8:cb:b1:1a:
         e7:2a:39:61:8c:80:88:0c:99:7f:83:fe:5f:21:f8:0c:45:80:
         cf:ab:a6:ee:50:ee:06:6a:df:82:11:20:51:6e:12:03:3e:e7:
         92:d1:cb:51:f2:db:bc:53:17:75:2d:90:e2:e6:ce:b5:94:86:
         3e:94:2b:e3:b8:d2:98:99:d9:79:1e:15:09:91:40:7d:c4:55:
         93:2f:34:20:cd:20:10:0d:ac:79:b1:ae:ca:0b:5c:31:0a:3e:
         e3:3f:77:34:69:ca:b3:71:ef:3f:cf:1b:7e:ba:7e:30:f0:0c:
         47:57:fe:a8:ea:21:fa:11:8c:2e:60:4c:cb:a3:a1:c2:70:a3:
         ca:8c:23:25:da:3d:4b:ee:b7:67:8b:6f:16:df:d1:85:e7:22:
         19:00:fa:6d:84:84:fb:3b:51:6e:b1:ed:68:0f:ab:e6:eb:26:
         86:0c:2b:88:d8:3f:99:5d:29:68:14:13:6a:4a:99:da:3c:22:
         72:03:a4:66:03:da:c3:d5:bf:8e:37:f7:27:a8:61:4a:0e:7c:
         17:06:c3:0f:74:5f:20:cb:82:cc:e5:8a:1f:99:ba:82:14:7a:
         b1:1b:4b:df:2a:5f:9c:9b:7b:d8:79:cb:53:b0:87:cb:0f:01:
         d8:9f:c7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 02:06:44 2025 by rpki-client