Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6dbc843a-9e8d-34dd-b8b4-d29779b01c06.roa
File:                     6dbc843a-9e8d-34dd-b8b4-d29779b01c06.roa (raw, json)
Hash identifier:          bCDVZyuZKm9E9y60Ea7eATTVPivxWsRG4Fo/7BFrtHA=
Subject key identifier:   28:58:33:A2:86:6D:BF:6B:40:AD:5A:4B:6E:8F:D2:30:0E:13:F5:27
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B2066F0FA6A12153890803240
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6dbc843a-9e8d-34dd-b8b4-d29779b01c06.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        68.104.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:f0:fa:6a:12:15:38:90:80:32:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=91213884-fd68-41a9-b073-29deff06f726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:c4:09:2e:56:73:da:36:43:59:f0:20:2a:
                    bd:53:17:fb:d7:89:48:06:a6:b9:c7:28:6e:3a:b9:
                    f9:e4:c4:8a:13:8e:c5:82:7b:bc:56:b4:f6:4c:45:
                    26:b4:9c:e2:1c:db:a7:09:f5:60:29:ad:97:22:f7:
                    30:39:34:4d:c0:c4:e5:74:0f:4a:c1:ab:1a:75:a1:
                    37:6b:5f:bc:bb:64:82:e4:72:ae:a2:4e:1f:97:b5:
                    33:d9:8d:6d:3b:2d:50:25:8d:4f:d8:53:be:a0:de:
                    21:80:a4:7a:44:95:3a:47:3e:ff:95:80:57:1c:c7:
                    54:71:74:3e:37:fa:0d:26:9c:4d:78:b4:2a:3a:cb:
                    01:96:83:4f:7b:0a:e7:da:3a:21:43:a4:74:59:a7:
                    7c:09:c7:d9:20:9d:fb:ec:68:ad:fe:9f:18:89:f2:
                    c4:82:68:7d:59:bb:c1:de:13:05:6a:40:ea:a7:54:
                    16:d7:73:4c:2e:45:71:8c:cf:50:5a:74:1d:a7:81:
                    92:1c:30:77:83:f6:c8:de:8a:25:7d:b2:12:cc:31:
                    86:f0:51:8c:08:a3:ca:e7:f1:25:69:85:38:44:f4:
                    d1:8c:dc:4d:1a:53:cd:23:a1:84:3c:cc:e0:b7:87:
                    f1:cd:6e:e5:11:49:7b:0b:8c:a9:ce:1d:cb:77:51:
                    2c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:58:33:A2:86:6D:BF:6B:40:AD:5A:4B:6E:8F:D2:30:0E:13:F5:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6dbc843a-9e8d-34dd-b8b4-d29779b01c06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.104.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:93:70:7e:64:ad:f4:c2:84:37:56:6e:e9:9d:41:60:15:6f:
         78:44:a8:ab:e2:32:fc:97:f3:a2:24:3a:fe:31:b1:c8:a3:51:
         66:52:a3:e7:86:de:6d:0e:b0:13:d4:86:b4:18:bb:d5:91:cc:
         c5:2e:16:0b:b1:b7:a0:c5:46:59:b4:87:db:77:03:35:fd:14:
         e9:c2:48:66:ac:56:31:fb:5c:e0:3e:38:80:74:9a:81:dd:43:
         ee:6d:d8:8c:59:c0:e1:53:b3:da:4f:fd:d0:b5:36:c2:6d:d1:
         db:e8:6a:96:61:c3:9b:fa:0a:aa:09:7e:75:22:f1:0f:0d:e5:
         1b:c9:66:c2:13:8d:dc:54:fb:93:e3:0c:b4:4f:c8:27:7f:f5:
         f0:01:b6:5f:cf:c7:0d:b7:60:4c:e8:9f:c6:17:16:c5:18:5e:
         9d:e6:ad:06:37:9b:2d:8c:89:f1:4b:08:ee:09:6f:1c:5d:1b:
         8d:b4:31:34:78:97:76:3c:3c:ae:b8:de:a1:72:ff:91:c1:2c:
         17:26:a7:0a:b8:74:95:e8:e8:ae:15:b0:e3:f8:0c:68:89:f5:
         ce:7c:ac:35:d2:e1:1d:14:5d:5f:e0:30:3f:92:c6:b1:13:fa:
         4f:24:81:e1:3f:12:c7:db:49:ad:cc:bc:42:d8:04:15:29:15:
         f3:cc:c3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:19:58 2025 by rpki-client