Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d6010c4-9718-327a-ad61-70feafa61309.roa
File:                     8d6010c4-9718-327a-ad61-70feafa61309.roa (raw, json)
Hash identifier:          jM8ZgZVRA7JA1tpNCXeuskBOjiNPZWSIwc4xWtRo0/Y=
Subject key identifier:   DD:DA:23:D7:18:99:68:67:41:57:31:F6:4E:7C:A8:0C:24:72:08:E1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B206720770C898568B49C5080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d6010c4-9718-327a-ad61-70feafa61309.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        72.193.108.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:20:77:0c:89:85:68:b4:9c:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=df05c496-5955-4945-8174-b28f19f47011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:26:0e:e2:7f:fe:2e:28:e0:b6:c0:a6:f3:28:
                    3c:93:eb:dd:3c:fc:1e:33:cb:ca:4a:c7:f4:f4:c0:
                    44:95:93:7c:8d:66:16:ec:2d:34:fe:d1:5a:95:31:
                    1f:ba:7e:96:83:49:21:9e:8d:0e:ac:fe:ba:b6:0c:
                    7c:96:03:ba:c6:a5:88:9f:81:16:42:64:22:c4:82:
                    5f:74:53:df:74:a2:8f:c7:43:c5:52:da:82:dd:ef:
                    64:57:cb:67:6e:58:cf:6d:55:67:0b:77:3e:73:04:
                    f5:4b:61:a8:63:41:cb:f4:73:bc:71:08:71:63:a2:
                    04:36:67:0f:5b:a7:5d:ab:79:a4:16:89:b5:34:e0:
                    db:a8:50:11:82:4b:4a:1b:fe:45:52:84:26:fc:b2:
                    bc:11:fc:f3:5f:59:e6:89:d6:c9:82:b4:32:5b:3c:
                    8a:9d:da:3f:a5:09:4f:88:b2:27:00:a7:be:67:3d:
                    a1:ad:7c:64:35:39:98:72:9a:6a:2b:4d:b9:a6:0c:
                    a4:a0:13:0c:1a:e0:54:18:ae:5f:4d:b3:8c:34:55:
                    9b:03:cb:f0:43:13:e1:93:83:d1:7d:47:f8:06:08:
                    90:a3:3d:65:5f:93:28:ad:50:55:a6:04:9f:f6:a6:
                    bd:61:40:5d:25:49:cf:25:5c:86:d1:e1:9a:0c:3d:
                    20:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:DA:23:D7:18:99:68:67:41:57:31:F6:4E:7C:A8:0C:24:72:08:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8d6010c4-9718-327a-ad61-70feafa61309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.193.108.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:63:00:8f:bb:68:a1:9e:4f:4e:12:1f:81:0b:8b:61:db:ac:
         b8:91:cd:d6:62:d3:76:da:dd:0a:39:c5:7a:a9:28:f2:e1:7f:
         1f:6d:38:78:e6:68:a7:cb:47:5b:e5:1a:6e:da:ce:21:8b:0f:
         23:ca:3b:c5:17:b7:b0:20:30:5b:94:d1:f3:08:ed:18:45:e6:
         7d:95:19:e3:a2:78:ec:d0:e6:60:85:88:ca:7d:6d:5f:65:4f:
         2e:f2:54:6f:fd:0a:08:bf:63:8d:b5:5e:d0:b0:a9:9b:e0:23:
         22:57:84:72:c7:03:fb:63:ff:96:65:e3:e4:eb:a8:11:fe:c4:
         07:32:d8:3a:d7:1d:e6:d0:57:02:72:6c:5b:d1:1b:23:a1:1a:
         d1:1b:1a:38:ed:7a:6e:2b:3b:0a:ef:75:62:ea:e1:02:9e:ad:
         0f:e5:a3:ff:95:48:33:bd:70:ee:c3:59:d0:14:0a:52:6b:26:
         8a:35:a4:2c:9c:1d:10:e7:8a:7d:8e:ca:3c:1b:aa:15:55:d3:
         82:56:7a:07:6a:9d:90:68:39:c1:24:09:0b:34:67:ad:40:1e:
         ee:99:b9:d9:2d:8a:d5:b3:ae:f9:b5:a9:6e:83:bc:3c:1e:24:
         f4:99:c5:97:df:ba:68:48:0c:bc:5f:ea:0f:0d:26:e7:be:d2:
         34:ba:9d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:26:23 2025 by rpki-client