Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/72d82502-a6ff-3e39-818f-6e20c9effe76.roa
File:                     72d82502-a6ff-3e39-818f-6e20c9effe76.roa (raw, json)
Hash identifier:          nqkvA75P8yGYsarwD7vqTKe2ZqSU2sHWZ605UeVdAu8=
Subject key identifier:   E8:A3:02:E1:95:74:A4:F7:81:68:D7:0C:39:A6:7C:04:C0:AA:EC:DD
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F20F047DC5AFFAA865AC00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/72d82502-a6ff-3e39-818f-6e20c9effe76.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        70.177.224.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:0f:04:7d:c5:af:fa:a8:65:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=c02633e0-4130-4437-be2e-d2b020ba9ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:66:52:21:da:c7:bc:bd:a0:1b:0d:5e:97:78:
                    4c:c5:27:1b:f1:a8:86:7b:c0:af:fd:22:bd:3e:89:
                    49:a9:79:2e:e7:e0:23:4b:ff:19:dc:3e:e6:e6:8f:
                    b4:e7:a2:f6:44:f9:84:d3:ae:73:3f:c8:71:ca:bc:
                    ca:8c:10:d7:9e:2e:03:fa:78:d4:67:54:0c:a6:66:
                    3a:26:1b:a1:8e:2b:9f:77:ac:a7:29:21:24:c1:30:
                    c0:7b:fa:35:3b:47:a9:0d:9a:07:b7:05:8b:05:43:
                    b7:9e:c3:23:22:3b:4e:1b:4f:af:f3:14:ae:37:d4:
                    79:c8:65:8c:7a:75:2f:68:df:08:f7:d9:9f:65:95:
                    44:b1:bb:cb:c4:27:e9:25:da:5d:10:e7:d9:af:01:
                    d3:f0:8c:c3:10:fc:01:4a:a4:5f:e4:c6:ae:ca:69:
                    4b:05:83:03:c3:75:35:88:0f:8d:61:0c:80:19:da:
                    a3:17:5b:e0:02:2c:e4:62:eb:b5:58:3a:16:41:22:
                    c7:1c:62:7f:a5:37:6c:a8:7b:e0:e6:1e:3b:0b:52:
                    8a:cb:b2:67:f2:e4:ef:94:22:d0:bd:e4:f0:49:07:
                    6b:c0:36:c7:2c:1b:d8:0e:28:0e:d8:6d:a2:93:1c:
                    ee:30:13:3b:cf:ae:fc:69:df:13:e6:27:d4:b9:93:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:A3:02:E1:95:74:A4:F7:81:68:D7:0C:39:A6:7C:04:C0:AA:EC:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/72d82502-a6ff-3e39-818f-6e20c9effe76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.177.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:3a:1b:ac:41:0b:23:3d:71:ae:35:15:57:7d:d3:0c:42:c2:
         14:63:98:8b:c0:a2:4c:79:4b:e4:2e:a9:14:72:70:d0:5b:12:
         61:a1:8c:41:24:df:6b:82:93:21:02:e9:4c:81:82:7c:2d:d3:
         16:5c:1d:1e:58:e0:ed:1b:b0:b7:8b:e8:32:b7:61:7c:a0:2a:
         8a:76:2b:e0:2e:82:fd:c7:90:83:63:63:11:60:77:4e:f9:5f:
         6f:d0:33:c2:75:d6:f9:74:25:d6:e0:dd:ad:93:0e:16:b0:a4:
         51:bd:07:09:57:56:b5:53:a5:23:20:9f:2f:cb:43:fe:e9:eb:
         65:89:ab:97:94:b1:54:33:65:4c:93:ea:98:54:b2:72:4a:01:
         bd:7e:19:91:2a:56:19:32:06:84:a2:dc:c8:28:3c:43:a0:3e:
         44:22:89:76:37:25:c5:b3:49:39:43:9c:62:64:7a:ee:4b:5d:
         45:62:f9:13:e0:93:16:69:19:d7:82:1b:08:42:57:b4:f4:88:
         a3:77:04:b4:44:2e:f6:2b:ba:46:bd:1f:cb:7a:9d:2f:6f:89:
         2a:e1:e8:91:92:1d:6c:4c:da:5d:46:c8:c7:ee:ba:76:6d:39:
         e6:78:9c:98:9f:bf:f0:37:40:f0:3d:74:05:42:4d:f5:4b:f8:
         53:8d:b0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 01:34:39 2025 by rpki-client