Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a090612c-62d6-3781-8117-940d0704dd4b.roa
File:                     a090612c-62d6-3781-8117-940d0704dd4b.roa (raw, json)
Hash identifier:          5NTzvBq1UI4yRX4cCUAuuQEKvyGU+gj2Z949e2Yajcc=
Subject key identifier:   7F:BC:D5:C6:37:8F:87:40:6F:CF:79:99:5D:CF:ED:EC:A4:B8:E3:80
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B206735886151EB4583B0E820
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a090612c-62d6-3781-8117-940d0704dd4b.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        174.68.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:35:88:61:51:eb:45:83:b0:e8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=a25473f7-cd8c-4911-8df3-3401db453a2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:82:87:8c:76:a8:a4:44:af:9d:8d:15:fd:23:
                    2b:0e:fc:d5:19:4a:a0:90:bb:ef:b6:5a:90:48:3f:
                    cf:fd:7b:23:52:ab:96:a6:a4:28:00:ec:83:30:4c:
                    8d:b2:99:61:ec:94:2c:fa:78:52:52:99:b5:a4:ea:
                    1d:67:4f:58:fe:4d:91:52:d2:a2:fb:fc:cb:43:be:
                    ae:02:65:1f:e7:3a:2a:a9:3d:bb:9c:4f:9d:d5:06:
                    fc:f6:9c:b6:5f:f5:d0:00:7a:7a:f5:9a:f9:dc:db:
                    45:f4:7c:c4:c0:3d:23:8e:ee:ef:f2:ca:bd:ac:75:
                    c8:c3:1b:d7:cc:05:10:6e:43:5f:8b:8c:4b:5a:70:
                    d7:72:52:7f:29:a7:47:0d:c4:a4:82:07:3e:74:45:
                    da:de:36:90:01:54:84:5b:af:e7:7a:27:6f:d3:93:
                    4a:1e:e1:51:36:4e:cf:a9:a7:8b:fb:0c:7e:d7:8c:
                    d7:94:17:f8:4a:8a:96:2d:6e:2d:25:f3:4d:74:95:
                    77:2c:50:36:2e:47:cd:a3:6d:f5:9b:76:0b:60:71:
                    e3:45:2f:00:df:0b:45:ea:36:cc:d9:46:8b:d2:0d:
                    20:77:f4:37:b0:e9:2a:34:2b:0c:af:74:3e:de:46:
                    ef:90:54:25:85:02:68:a3:2a:53:6a:7a:d4:10:9c:
                    70:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BC:D5:C6:37:8F:87:40:6F:CF:79:99:5D:CF:ED:EC:A4:B8:E3:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a090612c-62d6-3781-8117-940d0704dd4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.68.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:85:70:ce:fe:53:01:79:73:f2:12:7c:49:6c:be:68:e7:5b:
         8e:53:16:94:e4:1d:29:6f:81:36:3e:3e:b6:28:9d:86:ff:fe:
         13:fb:5e:7b:ef:17:d5:0e:73:35:a5:7b:f3:d7:5d:5e:2c:b1:
         b3:6b:e5:45:f2:07:e9:fa:6c:c9:f3:4f:29:f9:22:13:e7:5e:
         5d:bb:c3:4b:9b:f7:83:a6:7a:f7:4a:ee:26:2f:25:9d:58:26:
         89:47:f7:10:69:e4:ca:0b:91:8b:2f:73:43:e5:b9:54:3d:a2:
         d5:81:e1:ce:27:16:55:55:68:13:ce:4c:92:9a:79:b0:bf:88:
         18:00:e0:11:b7:cb:6a:00:5a:7e:75:2a:5b:dc:08:50:60:aa:
         a7:78:11:8b:c9:ea:8d:c9:8a:a1:cb:e1:ca:d2:b2:2f:ec:d5:
         7f:cf:5e:63:ea:89:ba:db:63:8f:ce:d8:a9:3c:2d:82:33:4e:
         b3:db:c3:95:f2:68:3b:90:81:9a:9f:66:71:bb:de:e9:8a:62:
         55:bf:fc:b1:d2:0b:22:67:46:91:aa:50:1a:91:b1:4e:c5:29:
         2a:87:05:e1:30:36:97:eb:1c:bd:86:f2:7d:d9:06:1d:07:9b:
         23:bd:1a:df:5e:1a:39:cd:81:a7:9b:2a:34:c1:3a:b9:a5:93:
         8f:60:8d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:28:35 2025 by rpki-client