Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b756613e-7683-3979-b4d7-4e00819d14a9.roa
File:                     b756613e-7683-3979-b4d7-4e00819d14a9.roa (raw, json)
Hash identifier:          4fGqpoTkBdGGVLazwFQu8ToAL40WaMyFHyQPn4Hj6TI=
Subject key identifier:   05:9F:6C:8F:9E:86:5A:9E:B3:28:F9:F3:4C:B8:66:3D:EF:4C:EE:C0
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1C3742BC4D6E5FC09364B860
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b756613e-7683-3979-b4d7-4e00819d14a9.roa
Signing time:             Sun 07 Sep 2025 01:00:33 +0000
ROA not before:           Sun 07 Sep 2025 01:00:33 +0000
ROA not after:            Sat 06 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        68.3.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1c:37:42:bc:4d:6e:5f:c0:93:64:b8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 01:00:33 2025 GMT
            Not After : Dec  6 02:00:33 2025 GMT
        Subject: CN=8ab7b23e-8f75-431d-b486-cf3479a9c17e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b3:af:06:9e:f4:70:4c:a0:a2:0d:2e:21:bf:
                    dc:66:0b:93:b2:9c:c1:08:c4:6a:4c:8d:6e:03:18:
                    08:ea:13:94:55:d8:84:b4:e4:f9:e4:27:1a:1e:e5:
                    35:97:f8:95:23:fd:e2:5c:79:69:9f:a1:11:bb:b7:
                    f6:98:5a:f5:ac:79:ae:16:4a:86:df:80:11:6a:11:
                    30:8c:cb:27:2d:76:e4:87:fb:25:e2:f8:ce:f9:ab:
                    d6:c3:92:65:3e:e2:f5:a8:60:1e:4b:3f:ce:0a:5e:
                    29:d0:71:d0:8c:12:fe:88:f5:3d:9c:8b:ee:69:dc:
                    b2:f1:78:d7:55:b6:de:d4:16:f3:8f:2c:37:51:4e:
                    42:1c:0b:a2:7e:97:f3:64:13:54:d7:77:87:6c:90:
                    e9:02:c7:c5:5b:16:59:c4:97:69:5d:31:d1:f2:93:
                    79:cf:27:92:79:c0:72:7d:64:15:4e:72:ff:f4:15:
                    bb:06:87:68:61:2e:a5:fc:4b:67:e7:80:0f:49:8f:
                    bc:97:8d:b3:1d:72:8a:97:34:0c:cc:c9:0a:b2:74:
                    91:06:8f:1d:ea:8d:a7:64:37:84:8c:c0:65:8f:dd:
                    81:ec:0e:86:8a:79:34:0d:0c:dc:11:e6:32:f1:7e:
                    96:8e:c4:2b:8f:b8:c9:7a:24:36:79:a8:46:a1:73:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9F:6C:8F:9E:86:5A:9E:B3:28:F9:F3:4C:B8:66:3D:EF:4C:EE:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b756613e-7683-3979-b4d7-4e00819d14a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.3.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:41:60:e7:76:54:7c:d3:8a:a8:c6:77:a4:bc:06:8b:25:c9:
         96:ca:a2:9d:10:07:e3:39:73:41:c7:24:20:01:85:3e:21:39:
         38:db:b2:22:a2:ef:f7:ba:5a:a9:3f:28:f6:1c:7a:e4:10:42:
         bf:8b:ab:83:38:86:41:5b:af:86:84:db:e7:f7:4d:41:43:cc:
         04:63:ba:d1:a2:85:2f:9f:98:ee:9a:76:9c:1c:49:5b:26:5d:
         0c:bf:46:49:00:a4:9c:e3:5c:ac:38:fa:86:e7:5b:b5:cd:bc:
         af:88:42:d3:de:20:e4:e6:d9:1e:6e:5f:26:29:5b:37:1c:80:
         71:fb:6c:7d:67:ac:4e:63:04:e4:ce:6a:18:a8:e4:73:32:e4:
         46:c0:4d:17:05:82:c2:e5:24:2c:1e:a7:0e:42:90:95:20:48:
         a2:82:f3:df:f0:aa:e8:f4:d3:3f:40:07:c9:94:1b:f1:e8:8d:
         fa:d3:da:99:31:4a:7d:f2:3f:44:5c:da:29:54:6f:2a:0d:45:
         90:67:23:8d:3d:1a:33:78:ba:d3:af:61:0c:31:74:68:67:8a:
         1d:84:79:ed:fd:d9:29:c1:c3:72:d6:ef:b5:b8:03:b9:76:11:
         04:ec:5a:94:57:4f:92:1f:3a:10:ed:30:88:7c:0e:11:5c:c9:
         30:66:3d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:47:59 2025 by rpki-client