Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c183ae2d-80dc-3208-8cb0-89032eacfca2.roa
File:                     c183ae2d-80dc-3208-8cb0-89032eacfca2.roa (raw, json)
Hash identifier:          IahjsSrv6sKFj3U2Ke0Xag6iTVPdQSJwhmuWY5ungdM=
Subject key identifier:   D4:4D:A6:D2:25:B1:AD:C9:B8:06:83:44:7A:57:23:8D:01:8C:64:FF
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F2A00E93CA5AF9304FB6DC
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c183ae2d-80dc-3208-8cb0-89032eacfca2.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        72.192.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:a0:0e:93:ca:5a:f9:30:4f:b6:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=ee565108-7b95-44e3-bd43-c9bd7c1cbb39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:12:c9:83:c7:f8:84:3c:f4:a3:91:95:0e:6d:
                    de:35:f4:da:b7:f9:ff:e9:7a:a2:a8:bb:da:4a:ee:
                    78:ff:96:39:e4:d0:ee:d3:fd:e3:eb:12:4d:6c:d9:
                    c7:f1:56:51:64:b5:0c:e4:a9:7c:38:ac:cd:ad:93:
                    45:a5:c3:18:90:d4:85:7a:4c:2a:95:76:4e:7d:51:
                    27:58:f0:75:35:d9:fe:cf:27:91:a9:3e:f4:9d:01:
                    f7:ba:29:f5:c8:ab:a1:e4:63:06:a0:3d:a1:3b:1f:
                    4d:49:fc:fc:97:b4:32:6c:4e:2e:14:c1:14:ea:ce:
                    a3:d8:a5:a0:dc:29:6d:c3:1d:5b:d9:9d:f2:62:02:
                    2a:da:aa:26:64:83:b0:aa:98:bd:5f:32:70:8a:b6:
                    f8:d0:90:fc:6d:e5:f0:b7:3e:66:56:e8:b7:30:a5:
                    2d:87:a4:95:e3:ff:2d:e2:b4:80:37:34:d6:20:64:
                    b1:ce:85:eb:08:38:8c:f3:25:75:a0:1b:3a:a1:d1:
                    05:c4:ac:b8:00:d7:e2:e2:16:d0:7d:da:ae:8d:cf:
                    68:2b:01:06:d2:bf:64:d6:07:60:31:28:26:b2:b2:
                    c3:aa:6c:60:22:de:47:8c:18:dc:c6:a4:a5:89:b5:
                    92:75:9d:e4:fd:71:03:a9:86:3a:6b:80:17:0c:3f:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4D:A6:D2:25:B1:AD:C9:B8:06:83:44:7A:57:23:8D:01:8C:64:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c183ae2d-80dc-3208-8cb0-89032eacfca2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.192.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:df:55:bd:1a:4e:a4:47:f9:ec:b1:87:c2:cf:4b:dd:fe:4f:
         63:03:5f:ee:92:69:ba:e0:91:e1:c7:7e:49:11:75:8f:85:3f:
         68:73:1c:0f:63:be:f9:0d:16:94:96:5e:9d:ce:15:c2:78:c8:
         78:23:06:26:b8:be:d7:19:69:07:d6:db:65:9f:18:61:df:b8:
         0b:54:35:9c:50:8f:b7:bc:fd:b1:c4:eb:d2:59:35:c4:96:bb:
         c3:7f:61:55:ba:d7:ec:31:a1:c1:d1:21:26:b1:af:8d:da:48:
         ff:5f:87:e1:5c:02:66:8d:fd:6b:1d:b0:a1:a7:83:3f:0e:01:
         76:b4:26:15:b6:2d:80:0d:4a:a5:6b:87:ea:5f:d1:ae:91:a5:
         f0:b1:81:fb:81:9d:36:0a:c7:b5:40:d7:fb:8c:f4:d3:01:20:
         3d:da:e6:2a:a2:a5:1e:0a:7d:7d:a1:7e:ee:b4:03:d2:39:e2:
         d3:a7:76:d0:4b:f8:ec:eb:dd:30:06:a5:6b:ca:87:3f:f7:eb:
         0b:a9:37:93:fa:1e:e2:3e:37:6e:b0:69:db:a9:dd:f2:1e:27:
         18:6d:04:4a:0f:6e:32:bd:4e:e7:25:87:dd:1e:0e:18:71:ae:
         55:c4:b2:78:ae:2e:31:81:6f:da:68:5e:1e:3e:c7:a3:a2:c5:
         37:41:ef:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:42:13 2025 by rpki-client