Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c53e87d3-676d-3439-a277-6f58f207d6c8.roa
File:                     c53e87d3-676d-3439-a277-6f58f207d6c8.roa (raw, json)
Hash identifier:          ziK42XFHOsB89tuFLA4YcHxQqB5T4P8+ODLV6RFCfok=
Subject key identifier:   C4:2B:5A:CA:D6:F8:3A:62:E2:03:D4:57:EA:5A:C2:27:0C:17:BF:63
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F232B2557512B6EE6A9100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c53e87d3-676d-3439-a277-6f58f207d6c8.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        68.7.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:32:b2:55:75:12:b6:ee:6a:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=7326665e-d4a7-4d00-ae35-d68025bb7f32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2f:96:06:18:f7:91:8d:1c:4a:1d:4b:d5:05:
                    b7:d3:22:39:3c:9f:21:bd:1e:59:46:3a:4a:cd:29:
                    fe:c2:03:5d:68:d7:b9:a6:d3:73:8d:b5:4f:10:9a:
                    2f:8a:e2:7a:fa:16:60:b5:ac:de:cc:a4:51:21:e3:
                    94:6a:67:81:64:72:87:b5:63:76:1d:90:59:3b:f2:
                    b2:6a:43:e9:0f:d0:c3:1a:a8:88:57:55:62:5e:c1:
                    61:bd:e6:7d:85:d0:ab:fc:23:b4:56:3f:b9:e2:83:
                    ec:93:b7:01:91:0e:2d:de:f4:ce:ee:e8:a5:5a:e6:
                    47:ad:59:29:eb:59:1a:9c:75:ce:99:e4:e3:00:00:
                    15:f6:19:b4:4e:9f:85:71:43:04:b9:20:83:98:d6:
                    95:21:1f:6a:24:bd:f6:17:95:26:d2:f0:0b:de:94:
                    7c:e6:0f:12:46:07:4a:58:30:e0:89:9c:19:52:f8:
                    4b:3c:a3:18:47:d7:c3:c6:6b:bb:c1:f0:f2:e7:c0:
                    79:94:e0:d2:4a:81:16:f0:ec:63:94:86:d7:3e:08:
                    95:72:ae:31:d2:a5:ed:d5:bb:8e:47:07:70:76:e0:
                    56:6e:0f:db:65:42:5e:39:eb:d6:95:5e:c2:00:0f:
                    08:b9:ab:bd:65:1d:bf:56:c9:cf:c2:c6:93:9d:02:
                    10:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2B:5A:CA:D6:F8:3A:62:E2:03:D4:57:EA:5A:C2:27:0C:17:BF:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c53e87d3-676d-3439-a277-6f58f207d6c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.7.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:67:34:5c:87:b8:53:77:69:69:e0:19:2b:07:8a:cd:5d:ab:
         52:d3:d8:73:59:c5:79:c4:1f:69:1b:1e:0a:e2:58:ed:ca:cc:
         82:b0:c9:f1:93:c8:9a:8d:ae:0f:b7:a3:19:01:95:49:fe:3a:
         9b:37:43:fc:74:c2:94:34:f0:07:b8:da:5c:4a:11:48:4f:e9:
         c1:74:5c:bd:65:19:dc:ee:39:12:1c:64:77:0d:60:b2:1d:76:
         bc:17:b1:73:77:f6:56:80:27:32:bd:d7:0f:b7:62:f5:bf:49:
         d9:0e:a0:02:83:51:17:61:a3:de:68:a1:9e:b1:29:9a:bd:c8:
         26:2d:83:bf:6b:f6:dd:d6:e4:ee:3f:8d:c1:7c:c0:9c:d1:b3:
         d8:f5:33:bb:08:fd:2a:2b:d0:bd:e4:e2:f8:95:ed:7f:08:54:
         2a:82:88:b4:b1:80:60:e4:2a:58:b5:b8:0c:37:c3:41:a7:ac:
         0e:84:5d:bd:8a:71:6a:af:2e:1d:45:78:77:1b:1c:59:52:e4:
         eb:b3:e4:f3:51:2f:05:64:ec:b7:f4:e7:e3:28:31:98:f6:30:
         fe:31:74:94:6c:24:93:69:e4:72:da:ca:73:50:e8:ad:ce:dd:
         50:7c:8a:7e:30:a6:25:b0:8e:34:4f:97:72:21:7a:e5:45:55:
         40:ce:80:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:26:57 2025 by rpki-client