Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cc09c6b8-bfd1-3096-9f2d-79b9dbdadc25.roa
File:                     cc09c6b8-bfd1-3096-9f2d-79b9dbdadc25.roa (raw, json)
Hash identifier:          JQyqsp181WmVtn35jIkM8l38g8U6qLqkzG8RRavbRb4=
Subject key identifier:   97:AA:43:9D:32:8A:84:1A:D5:C0:0B:05:D9:53:3A:F1:52:63:D7:E6
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C731BA8CE51BC456CFA00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cc09c6b8-bfd1-3096-9f2d-79b9dbdadc25.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.176.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:73:1b:a8:ce:51:bc:45:6c:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=6a1afc33-b267-49d0-80d9-30b730932c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:55:5d:0a:94:63:d6:ee:a5:cd:dc:7f:78:cc:
                    c5:44:55:93:88:8b:08:da:a1:99:3f:07:d5:e0:b0:
                    19:d2:82:9c:76:cd:90:e5:03:52:d5:de:1b:61:75:
                    84:48:b6:3e:01:0a:c0:5a:41:e1:d4:30:00:59:e3:
                    23:bf:7e:cd:f6:53:a1:84:f9:98:d7:2f:7a:24:c6:
                    9f:01:e4:87:08:49:05:77:2d:c0:49:51:d5:4d:51:
                    f1:95:b0:23:46:cc:c7:d7:f8:fa:a3:22:96:78:b6:
                    07:f9:e4:db:c9:d1:7e:d0:24:da:fa:4b:b3:65:b9:
                    bf:c6:a0:c2:3e:f8:6f:81:df:e5:ca:84:f5:8a:f7:
                    b5:ed:55:b1:72:5a:32:47:ba:29:74:0a:8b:3a:dc:
                    ef:4a:80:09:3b:ee:23:44:97:4f:e9:a0:b3:0c:62:
                    89:91:ea:2b:e8:54:af:98:a4:0b:eb:f9:37:89:ac:
                    3f:e5:87:95:a0:9c:c0:7f:f4:9e:28:e2:d0:2c:b6:
                    53:01:c0:d5:bf:4a:69:e0:b3:69:80:8f:29:fb:e2:
                    cd:9e:ab:55:ce:2a:9a:1f:07:20:f1:97:c1:39:e6:
                    48:84:ef:f8:b7:1b:18:fc:9d:e2:f0:13:b0:a9:66:
                    77:46:5b:63:23:39:07:0b:11:6b:1c:89:9e:e8:e8:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:AA:43:9D:32:8A:84:1A:D5:C0:0B:05:D9:53:3A:F1:52:63:D7:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/cc09c6b8-bfd1-3096-9f2d-79b9dbdadc25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.176.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f3:69:10:c8:1a:c6:c0:8a:99:29:17:c8:8d:dd:76:c6:0d:
         ff:a0:d8:21:62:ae:ff:4c:c7:0f:69:d1:8d:bd:4d:fb:42:3b:
         df:80:5f:c5:dd:f7:d0:52:b7:f1:44:9e:18:f5:93:89:17:7c:
         32:a9:a5:16:75:31:45:ae:0d:3c:59:b9:c8:5b:2a:c6:71:b0:
         ac:c7:ef:3c:1d:6b:22:4c:e0:b0:dd:7e:2c:d7:2e:07:48:77:
         72:6e:2e:bb:28:a3:e0:3b:9b:14:59:98:1f:f4:42:e2:d3:21:
         10:e6:29:3f:a0:04:c7:f7:13:4d:84:b1:cd:f7:48:73:09:76:
         89:48:0b:83:74:dc:6c:57:8c:04:77:ff:c4:e0:6a:3e:34:79:
         e5:11:c8:0e:50:b3:da:65:ac:48:8f:de:5f:68:1c:2e:22:74:
         5e:eb:dc:be:72:64:62:4c:cd:35:fb:4b:1f:1d:36:5e:d5:c9:
         bb:dc:ee:04:4b:59:ec:2d:91:30:41:02:88:6d:83:98:18:a4:
         e3:fa:77:23:dc:e8:03:6a:7d:28:7c:ae:4a:29:05:2c:80:be:
         9b:0e:3d:43:3a:c2:57:e9:c2:9f:cd:97:69:71:e5:d6:2a:02:
         36:96:21:a1:9a:6e:bc:ca:64:27:d0:96:14:df:fa:6d:48:42:
         ac:26:85:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:35:30 2025 by rpki-client