Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9cd65b8b-8d89-3e73-8951-f9b6564e6fb6.roa
File:                     9cd65b8b-8d89-3e73-8951-f9b6564e6fb6.roa (raw, json)
Hash identifier:          skqgMGlhHNZINdKy48dgMZw/EpyRsaiycpROM4VFtHE=
Subject key identifier:   9A:BD:5F:7A:83:04:B4:63:B7:63:D9:9A:F6:B2:7E:9B:A1:FB:22:E7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9CAC75EE6A68D51EC5F480
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9cd65b8b-8d89-3e73-8951-f9b6564e6fb6.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        184.176.88.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:ac:75:ee:6a:68:d5:1e:c5:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=1af022ca-1858-456a-a42b-b6bce809eccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:25:b1:e4:75:33:36:98:90:97:67:c3:13:79:
                    22:f9:5c:1e:5e:12:4d:7c:06:39:3d:d8:07:e8:da:
                    65:2a:94:c4:57:4b:5e:4c:85:d6:bc:4d:f9:21:f7:
                    97:4d:ef:e4:50:f5:74:67:80:72:0d:91:68:2d:b9:
                    ee:e1:8e:24:35:91:ad:b7:65:e4:39:79:ce:c1:8f:
                    30:dd:e8:06:7e:e9:19:f5:d7:50:2c:f1:b3:5b:44:
                    03:f5:8c:7a:93:cb:1d:5d:e7:78:5e:40:3d:47:d5:
                    bc:24:63:e8:ed:37:1c:c0:15:f3:be:73:c1:96:0f:
                    0e:7b:98:bf:fd:4c:66:96:05:70:52:3e:b0:10:91:
                    ab:88:03:5c:2d:db:5d:e0:b1:0c:95:09:98:1f:a1:
                    7d:32:6f:c4:b5:7f:be:4c:12:98:56:70:99:7f:a1:
                    db:5d:20:06:ac:ff:b1:b5:e3:81:5f:a3:c8:bd:0c:
                    a9:1b:b5:8b:33:ce:2d:17:2a:cd:d0:e2:4c:20:dd:
                    fa:5f:69:9a:54:29:af:64:06:ec:22:7d:d7:ea:2d:
                    58:00:3f:d2:50:09:f2:23:d3:df:b2:7a:e6:c4:52:
                    6a:b9:d8:f6:0a:d9:00:1d:4d:af:d9:61:8f:93:72:
                    08:90:48:f8:fb:34:d2:5e:48:33:cf:1f:18:f1:b4:
                    13:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:BD:5F:7A:83:04:B4:63:B7:63:D9:9A:F6:B2:7E:9B:A1:FB:22:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9cd65b8b-8d89-3e73-8951-f9b6564e6fb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.176.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a6:82:dd:8e:a9:ff:15:8f:ce:bc:65:f6:7d:b2:74:0f:1e:
         73:7f:01:de:73:0a:3b:21:3f:50:bd:06:1e:7f:93:4d:92:ef:
         de:22:78:da:a1:b8:a5:09:52:22:04:80:a7:46:ea:2e:d6:6d:
         55:18:c4:6d:85:bd:6d:96:33:99:de:0f:68:23:19:6d:33:6d:
         b6:7f:c4:7a:dc:37:d2:82:cf:2e:ce:46:1b:0d:10:40:40:10:
         5b:1c:b2:22:a1:f3:8b:0c:97:5d:b5:2f:f8:d4:49:41:96:74:
         c3:05:b4:30:1d:b6:08:9d:0a:4c:4f:ef:44:68:ba:e9:8b:70:
         ec:b8:85:42:b4:a2:7d:d7:d5:cf:79:36:04:11:a5:4e:f0:bb:
         6f:a2:64:5f:05:59:fe:88:fa:45:b6:83:a4:03:b1:98:22:ed:
         28:40:56:ef:51:9b:76:d9:98:3b:fe:39:14:02:4c:1e:22:ac:
         f8:c9:43:74:c7:39:dc:25:63:f4:5e:3c:80:b2:70:d7:1b:2f:
         c8:24:4c:01:c9:c2:56:38:39:e4:2e:3c:6d:df:5a:5e:44:27:
         bf:a9:45:19:a4:8f:f5:2e:21:73:bc:3a:8b:76:3a:41:75:c1:
         30:89:60:03:32:24:1b:1e:ff:24:40:90:3d:1e:b8:6d:e1:36:
         46:59:48:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:27:12 2025 by rpki-client