Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b2645ba6-61c5-3e88-a417-8f5bad2c755e.roa
File:                     b2645ba6-61c5-3e88-a417-8f5bad2c755e.roa (raw, json)
Hash identifier:          DUvxP6CKTm9n9J2HxwGmwYUWd3Z2rj//+6cQw4cncOc=
Subject key identifier:   53:A5:CC:61:FD:28:51:43:9B:C8:83:C2:03:99:29:47:B5:66:6C:D8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B25FC344012B4798D4492BAA0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b2645ba6-61c5-3e88-a417-8f5bad2c755e.roa
Signing time:             Wed 10 Sep 2025 13:00:41 +0000
ROA not before:           Wed 10 Sep 2025 13:00:41 +0000
ROA not after:            Tue 09 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        184.177.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:25:fc:34:40:12:b4:79:8d:44:92:ba:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 10 13:00:41 2025 GMT
            Not After : Dec  9 14:00:41 2025 GMT
        Subject: CN=f33a06e3-37b3-429d-abb7-7ee349e6d633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:04:e1:64:94:42:2e:29:fb:2c:c2:f9:a9:3b:
                    78:95:bd:e7:ad:f3:ce:8a:3c:23:d6:09:17:ee:62:
                    9c:e1:72:6c:58:bb:70:c5:06:b8:aa:8d:04:ba:e3:
                    d7:3b:23:2c:cd:b9:64:c1:5c:fa:05:1c:b4:5b:6e:
                    cf:90:38:22:73:7c:0f:cb:52:6f:c2:76:0e:bc:eb:
                    73:0e:27:39:f4:d7:ac:8e:98:68:2d:0e:23:a7:74:
                    34:fd:5a:50:12:6f:1d:9e:2c:92:bb:54:7b:d7:2e:
                    dd:fb:bc:19:b2:dc:2c:17:ac:b7:72:3a:9e:be:63:
                    95:31:16:4c:07:db:51:88:df:3a:7b:57:8b:23:eb:
                    47:0b:96:72:6d:2f:2b:04:2d:90:5d:54:a8:7d:c5:
                    f4:f4:65:e1:af:7f:25:88:29:d2:73:c3:d8:9a:a0:
                    1f:3e:2e:f2:09:07:4f:70:60:d5:ce:0c:04:4d:b7:
                    f0:79:fd:f0:4e:f7:58:af:fc:3f:50:49:76:45:a3:
                    83:4e:e0:b7:61:1d:68:89:07:65:31:0f:e2:c3:43:
                    6e:8c:bd:65:74:5c:5d:a8:f5:18:44:54:12:be:f1:
                    52:ee:c6:2a:d5:80:eb:f9:0b:54:7e:25:a7:88:a5:
                    ab:6d:08:2b:30:ee:7a:6b:bc:38:dd:af:9b:57:8b:
                    71:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A5:CC:61:FD:28:51:43:9B:C8:83:C2:03:99:29:47:B5:66:6C:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b2645ba6-61c5-3e88-a417-8f5bad2c755e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.177.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:d9:a0:bb:aa:88:e3:42:27:bb:81:53:01:33:f8:fb:d8:96:
         96:9c:02:78:a1:e3:3f:28:6a:e5:a0:06:a8:b0:8a:79:cd:35:
         e0:70:06:15:89:1b:b5:2b:62:37:e6:54:04:f5:2c:ab:bb:e8:
         39:64:6e:f2:1c:c8:9f:65:d0:da:2e:35:4e:2c:66:8f:c9:2f:
         12:7d:16:82:bf:a6:06:e9:8a:b3:34:9f:ec:67:bd:db:d1:0a:
         c5:4d:ae:9f:cc:b0:62:cb:30:1d:8e:d6:7b:2f:0e:f4:67:b5:
         9d:f6:7d:95:bd:3b:a1:1b:c0:c6:a0:db:16:d9:fc:ea:ff:a4:
         5f:4e:ff:d2:76:2c:6e:8e:0c:1a:1f:6c:e6:c5:1b:72:12:0a:
         69:7a:4b:31:ed:2c:1d:02:96:e5:4c:8c:73:72:8b:c2:4f:7d:
         07:cc:38:c4:59:60:40:bc:6a:31:3e:e7:40:81:27:1b:00:8e:
         7c:80:ed:ce:bf:53:b3:6a:a2:5c:4a:ec:c0:3f:05:f3:82:b6:
         70:50:7c:5c:b5:d7:81:82:cf:2f:e0:35:d3:6e:ca:43:76:b0:
         b9:5a:1a:2a:23:7e:ae:ef:67:50:46:17:68:4c:7c:69:8c:9b:
         b4:dc:24:d5:ae:1f:b1:4a:2c:17:7d:7e:a5:7b:ec:17:41:b0:
         84:83:f1:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:22:42 2025 by rpki-client