Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd546845-f165-355e-88ff-a95bc0d7772b.roa
File:                     bd546845-f165-355e-88ff-a95bc0d7772b.roa (raw, json)
Hash identifier:          u2bDoh4Wjm2P49K73ipZ/ldk0h6Rj6gJ5UuW2kHtqLs=
Subject key identifier:   CF:1F:C2:ED:17:D7:D5:1D:24:54:36:7D:59:E2:2B:9C:5E:F5:0F:E1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C78876D8C68FE053340F0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd546845-f165-355e-88ff-a95bc0d7772b.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.176.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:78:87:6d:8c:68:fe:05:33:40:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=7ef76272-f080-4ad3-bc35-09dc6cd21db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:9f:72:1d:b0:9c:74:b0:1e:f4:05:ad:2f:db:
                    26:c1:25:8a:96:b2:fd:8c:75:df:31:fc:ff:07:33:
                    98:06:c3:2c:70:29:71:ba:92:19:5a:8c:db:69:88:
                    dc:9a:1a:68:04:a0:3c:a7:81:21:94:44:71:5d:31:
                    c0:e2:90:45:d3:8b:c2:5b:94:1d:85:e5:d2:93:51:
                    1a:3e:58:33:e6:b1:3d:84:dd:d5:79:3f:f0:42:6e:
                    ba:0d:b1:f4:8a:50:35:97:f1:d4:f0:f7:d9:e6:25:
                    17:48:7d:b4:b5:5f:df:46:70:7a:8a:7c:6f:96:a0:
                    5b:9f:90:42:12:d0:e3:28:64:e0:cf:9a:c4:91:d2:
                    9c:88:b7:6d:1e:72:62:cf:fe:0b:fc:fa:93:33:5b:
                    8a:c1:cf:6b:b9:7a:cb:a5:d8:a8:f3:6f:af:57:be:
                    99:2a:69:39:1c:44:e7:ec:aa:01:93:5a:6a:d4:15:
                    05:59:c6:6e:f5:1d:99:47:a2:fd:72:0c:fe:10:da:
                    25:5d:19:3a:3f:17:91:95:79:7d:11:82:27:c0:6d:
                    e4:17:85:b0:36:74:20:56:62:31:42:a2:09:a9:63:
                    b2:81:40:95:5f:29:b5:21:a5:d3:aa:30:d9:00:75:
                    92:8c:e0:e0:b2:31:4d:af:67:3a:b9:57:59:5c:eb:
                    f8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1F:C2:ED:17:D7:D5:1D:24:54:36:7D:59:E2:2B:9C:5E:F5:0F:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bd546845-f165-355e-88ff-a95bc0d7772b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.176.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:98:14:bd:7f:a0:11:3b:ed:a8:ab:58:06:a5:4d:cf:cf:0a:
         d1:f1:55:e3:f4:71:ed:b2:d1:9c:41:f4:1d:bc:b2:8b:33:c7:
         ee:35:18:e1:39:b4:f2:fd:95:09:ba:b6:eb:ad:e0:86:da:c6:
         33:b8:99:fc:a7:fb:89:7f:26:15:2c:80:90:a8:5a:ee:53:53:
         19:de:b2:16:57:01:79:00:57:a6:54:4f:dc:fc:76:c0:21:ed:
         4a:4b:51:b0:cb:fa:f9:63:9f:98:b3:1f:f0:1f:32:ab:61:e1:
         7c:49:16:21:7f:e1:49:c8:95:0f:d5:b6:d6:5c:60:8d:89:2b:
         c5:b7:e7:e4:44:fb:85:24:b0:c4:c8:bf:1d:80:74:0b:32:5f:
         18:f7:bd:4c:3c:45:2b:0d:9a:96:9e:c8:8b:90:54:78:54:19:
         a3:db:11:74:c6:1c:c2:5a:5a:e6:cf:48:72:4a:aa:8b:77:8e:
         50:a7:61:77:65:07:35:9d:19:df:b0:48:72:2e:a7:6e:e5:c8:
         47:03:2d:66:58:29:17:cc:f6:bb:57:0a:ad:45:c6:d0:6c:c7:
         42:43:f6:1d:27:db:94:5c:9c:28:6b:a1:b4:7e:eb:5e:91:e0:
         4c:9b:50:b2:7e:e6:5b:71:d6:75:7c:51:55:23:85:62:65:c0:
         59:d6:d6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:21:52 2025 by rpki-client