Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d5f77f9-9969-32fa-9e39-40a38c375c6a.roa
File:                     6d5f77f9-9969-32fa-9e39-40a38c375c6a.roa (raw, json)
Hash identifier:          5MOYW6cfkT6E/xhSg66KSTZIBCDD0bNyKTDSNMniSU0=
Subject key identifier:   7F:0E:33:03:EF:68:50:B5:C4:AF:AE:02:1D:52:A6:25:FD:45:25:21
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01A17F9AB6C8C5E260CDC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d5f77f9-9969-32fa-9e39-40a38c375c6a.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        72.201.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:a1:7f:9a:b6:c8:c5:e2:60:cd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=fd62b6ee-f618-416e-b25b-30b429d6b71b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2d:b8:9c:63:dd:44:9d:d3:ca:f2:fa:2a:8f:
                    9a:76:23:4b:c3:f4:14:03:3f:58:91:59:0c:a3:10:
                    bf:fd:69:90:cb:1e:52:5f:9d:3e:00:9e:fd:19:14:
                    0b:ac:14:db:b3:81:48:e5:51:d0:62:00:9d:4d:08:
                    8a:b6:73:b5:d8:67:e1:0a:7f:92:41:87:68:0d:b2:
                    bc:a0:0a:aa:a1:6f:ae:51:47:2a:32:34:d2:9b:65:
                    28:80:25:f1:90:7f:b8:82:c2:00:8f:42:1b:81:fa:
                    b7:bf:e9:59:2d:c8:ef:ce:86:b2:76:b9:d4:e1:e6:
                    cf:e2:66:03:b9:fc:20:39:58:59:af:4b:e2:3f:82:
                    15:df:42:2b:14:b4:f9:86:91:2b:5b:21:b3:ea:77:
                    5f:be:79:16:25:29:c6:5e:26:69:b3:49:71:80:9c:
                    49:4f:ec:07:9b:1b:96:5f:fe:3c:01:ff:72:55:ee:
                    49:d3:c5:b3:2c:ea:16:ae:7e:dd:af:42:98:97:7c:
                    98:1d:a1:c1:fa:97:83:42:68:42:8b:7b:59:8f:ca:
                    12:a7:56:7f:c7:d7:e8:c0:f5:ed:b1:7f:06:45:38:
                    29:c8:80:84:8d:bc:af:a6:96:62:fb:4c:99:b9:6b:
                    c7:ae:b7:25:ee:95:3a:d3:9b:ba:30:27:bd:ff:d6:
                    c8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0E:33:03:EF:68:50:B5:C4:AF:AE:02:1D:52:A6:25:FD:45:25:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6d5f77f9-9969-32fa-9e39-40a38c375c6a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.201.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:aa:49:4f:67:75:b3:d1:9f:18:88:11:10:33:86:c4:7e:01:
         cf:63:b5:61:c4:c8:43:64:ca:30:a0:a7:86:f1:78:9d:00:31:
         55:6c:f4:af:df:cf:98:c8:01:d3:3f:5c:c3:72:50:12:86:b6:
         86:bb:88:9e:c3:7c:af:c9:ab:06:45:0c:20:e4:26:45:a2:2a:
         da:6d:56:0a:78:d3:0c:7b:6a:59:0d:ae:e0:e0:17:47:20:25:
         7b:81:5e:f5:fe:0e:c5:e8:47:2c:b1:05:af:76:bb:d6:e0:b8:
         eb:a8:97:05:ea:5d:6b:3d:19:78:66:da:a7:30:45:5d:0d:0c:
         8e:b6:5c:58:59:14:90:85:79:42:b0:b9:eb:ea:24:6a:e9:34:
         b5:db:64:2b:e0:85:05:e4:1d:e4:66:2a:15:e6:19:24:08:2e:
         03:ac:fa:d5:cb:49:58:54:87:36:c4:08:c8:04:89:12:c1:01:
         a8:b9:d9:6f:59:67:95:66:63:db:72:14:28:76:76:4f:57:71:
         78:f5:7b:07:57:7a:53:83:51:7c:9e:3a:86:d9:62:82:08:ec:
         29:e0:4c:dc:e6:0c:ae:69:97:f3:39:d0:23:00:68:05:5b:d8:
         38:e5:d4:f6:c8:3c:41:fe:6f:65:ad:6d:c2:21:87:5f:4a:10:
         f8:60:5b:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAaF/mrbIxeJgzcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
ZmQ2MmI2ZWUtZjYxOC00MTZlLWIyNWItMzBiNDI5ZDZiNzFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi24nGPdRJ3TyvL6Ko+adiNLw/QUAz9YkVkM
oxC//WmQyx5SX50+AJ79GRQLrBTbs4FI5VHQYgCdTQiKtnO12GfhCn+SQYdoDbK8
oAqqoW+uUUcqMjTSm2UogCXxkH+4gsIAj0Ibgfq3v+lZLcjvzoaydrnU4ebP4mYD
ufwgOVhZr0viP4IV30IrFLT5hpErWyGz6ndfvnkWJSnGXiZps0lxgJxJT+wHmxuW
X/48Af9yVe5J08WzLOoWrn7dr0KYl3yYHaHB+peDQmhCi3tZj8oSp1Z/x9fowPXt
sX8GRTgpyICEjbyvppZi+0yZuWvHrrcl7pU605u6MCe9/9bI7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH8OMwPvaFC1xK+uAh1SpiX9RSUhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNmQ1Zjc3ZjktOTk2OS0z
MmZhLTllMzktNDBhMzhjMzc1YzZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMmQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGKqSU9ndbPRnxiIERAzhsR+Ac9jtWHEyENkyjCgp4bxeJ0AMVVs9K/f
z5jIAdM/XMNyUBKGtoa7iJ7DfK/JqwZFDCDkJkWiKtptVgp40wx7alkNruDgF0cg
JXuBXvX+DsXoRyyxBa92u9bguOuolwXqXWs9GXhm2qcwRV0NDI62XFhZFJCFeUKw
uevqJGrpNLXbZCvghQXkHeRmKhXmGSQILgOs+tXLSVhUhzbECMgEiRLBAai52W9Z
Z5VmY9tyFCh2dk9XcXj1ewdXelODUXyeOobZYoII7CngTNzmDK5pl/M50CMAaAVb
2Djl1PbIPEH+b2WtbcIhh19KEPhgW+Y=
-----END CERTIFICATE-----
Generated at Thu Oct 16 01:30:43 2025 by rpki-client