Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c43a0f46-2250-3ea4-b1de-fe9b4e315b5d.roa
File:                     c43a0f46-2250-3ea4-b1de-fe9b4e315b5d.roa (raw, json)
Hash identifier:          vLDBNRdiL5qeJCxnqKEpUrlrKh5rAbc2bv9EH+FuKiA=
Subject key identifier:   8B:E5:26:0A:7B:7B:1B:D6:77:AD:1F:3F:5D:CE:B7:67:C1:6F:7D:2D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F2248EB6FE0EF1CFFC9D00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c43a0f46-2250-3ea4-b1de-fe9b4e315b5d.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        72.199.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:24:8e:b6:fe:0e:f1:cf:fc:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=068c6cf4-805a-4774-9211-536a760af655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1c:9b:a4:df:bb:a6:cf:71:fd:b7:24:33:a1:
                    49:7c:bf:30:29:e5:f2:1f:6f:c5:93:a5:92:b1:44:
                    de:2b:0b:00:51:77:74:0b:e5:c9:8d:69:25:77:41:
                    ee:b9:14:bd:07:18:70:94:09:2f:40:aa:f6:d0:3b:
                    dc:6b:c7:c9:e3:87:e6:bd:5d:a7:d5:a6:a3:65:7a:
                    7f:f1:ab:74:77:f7:6a:1a:ec:56:d4:7d:14:2d:0e:
                    7f:7e:29:cd:dd:68:f7:cf:37:56:3b:18:1c:5e:bc:
                    ed:ed:c6:65:5b:97:d8:2c:4a:b0:ab:64:43:38:d0:
                    25:51:7c:86:b4:cb:a2:b8:ab:78:b4:0a:1b:dd:b6:
                    d2:50:40:98:f5:0e:c6:3c:20:3d:a9:ee:2f:b9:4b:
                    a4:22:94:33:c5:99:0f:c4:cc:7e:c3:67:33:3a:b8:
                    37:13:74:09:75:b5:32:e9:fd:74:02:23:3b:1d:fe:
                    f4:97:7d:3b:99:51:ca:80:06:5a:fb:b8:ec:dc:21:
                    3a:d9:ba:aa:e8:b4:56:1f:82:a3:eb:f3:c9:5b:ac:
                    b1:eb:76:9a:ed:65:ca:1a:85:0c:1d:54:1b:96:f6:
                    93:d5:ef:40:17:0a:54:11:36:ef:5a:b4:2e:42:3f:
                    2a:88:a2:5a:21:22:35:49:52:af:b1:47:d9:9f:5e:
                    43:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E5:26:0A:7B:7B:1B:D6:77:AD:1F:3F:5D:CE:B7:67:C1:6F:7D:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c43a0f46-2250-3ea4-b1de-fe9b4e315b5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.199.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:69:dc:67:61:b5:bb:6a:8e:d2:14:0f:08:bf:36:dc:59:10:
         6f:be:3f:cf:13:61:fb:2c:b4:90:0c:45:95:14:5a:a6:a4:4d:
         2e:2c:6d:a2:d0:63:c7:af:3f:87:a4:de:0f:00:89:67:48:0c:
         aa:bc:96:93:5f:ae:f8:cd:04:52:98:d8:68:23:39:d1:a7:76:
         5e:57:6c:72:5c:0c:d3:46:27:a3:ba:c2:21:16:be:c9:52:37:
         c5:8b:97:d6:b5:21:a8:ab:02:99:8e:26:44:69:2a:19:e7:f3:
         d1:1c:62:9d:8f:4f:30:9f:e8:2e:99:f5:9a:83:12:24:3e:d1:
         9f:51:b2:67:8b:1e:b9:2c:ee:8c:5f:82:30:c5:90:09:0c:ff:
         90:85:f9:3b:8d:57:78:09:7e:90:c0:39:a3:57:55:58:44:5c:
         21:79:e2:29:60:6d:a7:36:77:b7:14:7d:32:91:14:1f:49:0d:
         1e:ff:5d:80:cb:08:31:ab:ff:2f:3d:22:c6:5d:a6:92:72:e7:
         fa:5c:d7:77:88:74:77:6c:a5:ec:77:ba:14:12:8f:f8:bb:cc:
         51:d1:23:23:81:fb:f7:14:88:e6:4f:fe:86:ef:bd:c1:55:50:
         28:79:19:1e:5e:fc:c4:c3:1d:96:f4:79:fb:24:2c:df:42:da:
         1a:e0:9e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:36:16 2025 by rpki-client