Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a677ff22-719c-3629-8153-2e5b89ec05fa.roa
File:                     a677ff22-719c-3629-8153-2e5b89ec05fa.roa (raw, json)
Hash identifier:          nbGkEfV9Xu16X7ewFRLCDsmr0a2ZXGbGNVGNrFw58sg=
Subject key identifier:   5E:62:CF:1E:5F:C3:DB:78:F0:90:01:BD:D3:F8:43:6B:31:39:C1:03
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A40AA594C8233EB9A674F9F00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a677ff22-719c-3629-8153-2e5b89ec05fa.roa
Signing time:             Fri 20 Jun 2025 09:35:44 +0000
ROA not before:           Fri 20 Jun 2025 09:35:44 +0000
ROA not after:            Thu 18 Sep 2025 09:35:44 +0000
asID:                     22773
IP address blocks:        174.72.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:40:aa:59:4c:82:33:eb:9a:67:4f:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 20 09:35:44 2025 GMT
            Not After : Sep 18 09:35:44 2025 GMT
        Subject: CN=e9976547-abea-4ff9-8c0f-beb0c40cd270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:01:91:45:6d:4f:f2:0c:f7:54:4c:33:ad:02:
                    78:12:7b:55:0b:48:20:ac:c7:0c:19:0d:8a:0a:01:
                    63:ba:60:ac:73:6f:7a:03:be:85:4d:33:29:0d:db:
                    e0:da:41:fc:73:16:ca:9a:e4:6d:d7:06:b0:23:6f:
                    59:73:e7:ab:c8:3a:5f:2c:9e:8f:70:4c:62:d5:ac:
                    fb:83:69:42:94:5e:99:69:41:8a:22:3e:d9:2e:7e:
                    be:4c:15:66:08:ca:be:57:80:43:2f:3d:a0:27:91:
                    d1:7b:13:79:35:93:16:53:47:c9:75:a9:40:5a:e0:
                    00:a7:8f:45:24:2e:92:d2:fd:5f:cd:07:e5:0b:26:
                    54:1d:34:6b:15:a7:94:4c:90:60:c3:54:2f:b9:74:
                    30:3d:05:19:20:e8:21:5e:13:b1:84:6a:2d:e7:3b:
                    97:18:d5:7a:b6:9d:70:9a:f2:ca:72:e3:7b:a6:02:
                    6a:5d:ed:0a:59:f9:32:45:d5:a2:fd:fd:23:a6:fe:
                    c1:83:ae:0d:83:26:a8:be:a0:4e:0b:62:c5:07:27:
                    55:b4:c8:d5:40:91:e5:a6:2d:1f:b0:7a:a0:0b:13:
                    cf:0f:93:5b:27:a2:b6:76:f2:6b:97:3f:22:3d:40:
                    44:5a:56:52:53:f2:1d:c0:fe:14:6c:36:c2:34:78:
                    93:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:62:CF:1E:5F:C3:DB:78:F0:90:01:BD:D3:F8:43:6B:31:39:C1:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a677ff22-719c-3629-8153-2e5b89ec05fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.72.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a8:53:9a:99:aa:78:1e:2c:80:d6:0c:79:f8:53:b1:6b:af:
         05:60:d4:15:ff:53:6d:87:f6:c9:f3:ed:f5:6e:ea:80:e1:ac:
         a7:a7:ef:32:33:d9:bb:14:71:cd:79:b8:c1:60:ba:47:d4:9d:
         a8:e1:0e:f7:84:ac:aa:3d:36:95:32:5a:96:24:d3:8f:54:8e:
         5c:a0:89:21:5f:fc:b4:95:06:0c:00:29:ee:67:7c:2e:f0:b2:
         d7:f6:66:7f:47:25:04:26:12:50:e1:2c:10:49:a8:7b:d9:87:
         16:3e:6d:8d:cb:3f:72:ee:ee:5f:c2:aa:de:2d:cc:bb:d5:a9:
         ab:74:9b:fb:48:5a:3e:6d:02:38:24:23:45:62:b0:bc:bb:f4:
         ca:9d:66:2f:3c:b6:2d:48:32:0e:bd:56:ae:9f:04:bd:54:00:
         28:12:db:91:3f:e4:a5:a9:a5:7f:44:fa:f6:29:4f:af:b8:d0:
         e6:30:4f:be:fe:01:6c:6d:be:9f:73:2e:49:a7:4f:59:1e:fe:
         8a:fd:14:43:1a:ac:76:9d:fd:23:33:ae:6c:98:c9:c8:0c:f6:
         1e:4f:de:c5:9f:79:27:d0:64:1e:55:61:ed:8f:f5:3e:22:ee:
         1b:4c:98:95:b0:65:6c:33:42:d5:a5:40:76:56:28:ed:10:7e:
         98:7f:2a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:15:53 2025 by rpki-client