Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66038514-7efc-3260-a5bd-b619944744ba.roa
File:                     66038514-7efc-3260-a5bd-b619944744ba.roa (raw, json)
Hash identifier:          QP9BEkvCZWnBk15UuqOnLQ6dJ5bEsqwZawyrcy2y9K8=
Subject key identifier:   12:4C:83:F9:6A:A7:31:39:93:9B:0C:DA:9C:A8:7D:D8:F7:17:5F:5E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01B823C66C8F721E6C4600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66038514-7efc-3260-a5bd-b619944744ba.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        72.211.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:b8:23:c6:6c:8f:72:1e:6c:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=8114f535-3314-44c1-98d5-3a99f8f2b511
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f5:27:df:9d:85:da:9d:77:dd:15:be:f8:33:
                    4c:27:f6:33:dc:e1:57:e6:e3:ce:3f:16:3e:f2:47:
                    a7:5a:43:73:1c:81:b0:e6:43:52:e7:bf:cd:69:47:
                    9e:5d:d1:6f:19:9a:1f:85:98:4c:f1:35:fb:a1:c9:
                    7c:66:86:bb:ba:99:73:6e:ea:9e:83:6e:e1:4a:26:
                    48:1d:f2:76:3b:3f:94:07:0b:f6:a4:f6:e2:4e:48:
                    4d:58:2a:90:a8:d9:cf:67:15:a0:b3:1d:95:46:26:
                    58:95:52:32:58:fd:95:c5:94:93:20:96:78:38:38:
                    2e:6d:e7:75:a0:08:d9:fc:1f:f6:b1:ed:97:d5:cc:
                    87:0e:bf:42:7c:ab:2d:6c:45:1d:6d:56:10:48:88:
                    19:f7:08:af:c1:ef:5a:33:2b:59:ce:5c:be:07:0f:
                    fa:fa:77:fd:2f:ec:8a:9f:63:56:0f:71:5b:90:f6:
                    58:23:7d:22:a9:38:ee:15:24:b2:ae:28:ae:2e:6b:
                    4f:46:84:b4:bc:79:9d:32:56:af:d2:c5:be:c3:e5:
                    2a:6a:18:20:64:14:17:6c:33:e1:39:b8:f7:c6:d4:
                    b3:e4:9d:b8:90:74:36:e4:26:43:c3:70:e2:4d:f4:
                    db:ae:b7:88:fc:06:cd:a2:c7:9d:df:9f:ec:ca:84:
                    60:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4C:83:F9:6A:A7:31:39:93:9B:0C:DA:9C:A8:7D:D8:F7:17:5F:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66038514-7efc-3260-a5bd-b619944744ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.211.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:dc:7f:f1:c0:3f:04:23:ff:14:9a:9e:40:90:25:96:cd:ba:
         2f:29:b0:f8:07:59:ef:9e:db:f1:70:4f:7b:0d:95:a4:77:b1:
         14:5a:aa:02:4a:47:3c:7e:5c:0d:9f:8b:83:02:ed:e8:ae:6e:
         fc:bf:8a:75:1e:44:c6:9b:8a:44:22:75:b8:97:bc:0f:10:fd:
         6e:9e:85:2e:e8:f8:e3:c3:c1:00:ef:ec:85:34:27:11:b4:27:
         d0:c4:41:26:c5:b3:a5:ea:a6:91:28:8f:bd:3b:03:07:f3:b2:
         f9:e8:99:df:dd:3f:06:39:da:cf:aa:aa:d2:b4:8c:14:4d:17:
         c7:0d:0e:a0:7b:21:0e:7d:d3:c7:39:92:b4:10:b2:be:22:99:
         cd:5f:e5:1c:86:5c:f0:68:6f:8b:fe:3f:b1:0a:1e:33:4b:f6:
         7d:6a:34:a4:ff:e0:aa:a0:9a:84:1e:4e:9a:5c:08:0e:97:43:
         81:8e:0d:a8:ae:a6:d9:4b:69:1d:ba:2f:a5:f8:6c:5a:58:b4:
         fb:4d:94:35:58:dc:2d:93:d3:89:87:15:67:d2:3e:17:9e:40:
         40:9b:30:da:63:c9:18:a5:8c:ae:7e:73:d2:45:67:30:00:9e:
         93:7e:c2:15:9f:cc:4b:6f:55:fe:fc:0b:bb:fd:60:73:39:e8:
         c1:24:d8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:39:07 2025 by rpki-client