Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c0be1d8d-0bba-3211-8ffc-7c36b7640fa2.roa
File:                     c0be1d8d-0bba-3211-8ffc-7c36b7640fa2.roa (raw, json)
Hash identifier:          yok6nCoKVq3tlOr3aHbXx6apyyDltF2XmLpkaltQcdY=
Subject key identifier:   BF:48:49:57:67:C1:B8:10:1B:61:31:6E:83:C0:25:3D:37:BE:6E:7E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B2066ECFFCF39251AF7838DC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c0be1d8d-0bba-3211-8ffc-7c36b7640fa2.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        68.104.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:66:ec:ff:cf:39:25:1a:f7:83:8d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=4494b0e0-e25e-41b8-af2e-384f62107372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:37:7a:4c:10:25:63:bd:de:57:dd:c2:e5:
                    de:7d:df:67:0a:9f:6b:bd:4d:d8:71:b3:ea:66:58:
                    9d:7d:bf:6e:b4:7a:7e:72:a5:d7:07:5f:e9:bf:5b:
                    de:07:5d:d3:28:00:30:d2:7e:89:b4:7e:a8:fd:50:
                    d4:16:a7:7d:2f:da:3f:bf:ec:78:f9:8b:71:3a:f8:
                    2e:c8:e4:1c:20:cd:5f:83:1b:44:01:ee:9e:66:af:
                    1c:e9:d4:f2:82:d7:92:3d:b0:82:4c:10:24:75:ab:
                    7f:eb:cf:a0:b5:c1:c4:91:59:f0:92:81:79:19:85:
                    d9:6f:99:75:3d:2a:0c:9b:27:30:5a:5b:cd:ac:a8:
                    da:f2:bd:59:10:b5:7d:23:46:26:be:c5:b7:9d:22:
                    ac:36:52:e5:db:c3:75:cb:53:dc:b5:8f:ff:f5:ae:
                    07:32:75:61:97:27:4a:fc:4e:68:ec:84:0a:24:3a:
                    d7:c7:28:75:1b:f2:a2:1a:25:ac:c5:15:d8:7e:81:
                    78:1a:71:51:e3:46:4e:1e:45:f3:e9:39:26:7d:c1:
                    77:35:ff:70:51:fd:3d:0c:fc:b1:f4:a9:ed:15:fa:
                    5b:d2:47:fd:56:a9:56:ad:56:80:76:de:24:b8:0e:
                    12:fc:88:6c:ed:ef:49:08:1e:66:e9:25:f7:47:51:
                    f3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:48:49:57:67:C1:B8:10:1B:61:31:6E:83:C0:25:3D:37:BE:6E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c0be1d8d-0bba-3211-8ffc-7c36b7640fa2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.104.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:df:e0:98:4e:2b:04:36:cd:bf:d5:9f:78:27:52:cf:5a:e7:
         9e:d3:da:a1:ab:b1:0f:d2:e4:d3:9e:56:09:ae:ae:c0:12:38:
         96:1a:b0:06:bc:a3:72:a8:d0:e3:af:9d:20:58:53:dc:bf:5e:
         74:50:3c:cb:25:83:6c:b6:1a:4c:98:21:b1:ab:b6:f8:81:3a:
         90:c1:68:ce:91:66:f9:87:31:9f:ae:f7:00:dd:4b:d8:4e:fe:
         bc:bf:ca:36:72:e1:65:c9:41:5e:53:57:81:9d:19:7a:62:aa:
         bc:24:99:5a:86:3d:53:1d:4f:35:8c:9d:48:bd:33:f7:3f:af:
         0a:a8:1d:07:00:8c:bd:31:c1:07:56:e1:49:22:0f:6d:99:94:
         9d:bc:49:cf:99:53:76:0c:64:43:0f:67:43:23:ea:fb:65:fb:
         bf:61:84:f8:a9:63:13:56:bf:35:a4:ae:4d:d6:4f:d4:15:cc:
         34:56:1c:9b:20:a1:b4:fb:4a:ce:44:93:bd:2c:00:50:23:57:
         c6:cb:66:14:2e:78:46:79:b1:96:ed:cc:7c:15:75:1a:f3:24:
         9c:52:5a:70:59:49:06:4b:51:d6:5e:fe:2b:4c:74:e0:1b:93:
         d2:c2:b2:21:ef:e6:38:d9:95:29:73:1f:b8:7c:20:c0:0b:77:
         48:f5:76:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 01:54:20 2025 by rpki-client