Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dde972bd-5966-3ab6-ac6b-0dc49806892b.roa
File:                     dde972bd-5966-3ab6-ac6b-0dc49806892b.roa (raw, json)
Hash identifier:          yD6zrE0l81t3WhFqTG+rUGI8tEdHCbQdDVp+iaZGEB8=
Subject key identifier:   4A:4A:50:B9:2D:D4:F9:B9:E3:AB:EB:FC:52:95:42:DE:F9:2A:84:A0
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F2815657810A412B160680
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dde972bd-5966-3ab6-ac6b-0dc49806892b.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        174.66.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:81:56:57:81:0a:41:2b:16:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=fee88c3c-b943-4eb1-af56-5216f7617822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5a:59:65:62:68:67:a2:6b:dc:47:f6:b2:f5:
                    45:0c:37:53:d3:72:41:c5:32:a3:1d:28:66:52:4a:
                    17:00:ae:76:71:2e:50:52:01:31:df:f4:52:bb:1b:
                    cb:60:2b:24:1e:42:52:c4:3c:85:6f:f6:eb:f9:85:
                    6a:8b:a0:2c:b4:3a:df:43:59:b4:fa:6e:c1:0a:2a:
                    d6:68:ef:27:2c:b1:f8:49:22:cb:51:c7:d2:f5:df:
                    3a:ff:d8:56:e9:f7:a0:fb:7b:b4:fd:92:29:12:62:
                    1a:86:20:a8:1f:19:6f:5d:68:48:25:22:3a:0d:bb:
                    95:6f:63:c0:13:39:8e:cb:10:e2:36:1a:3b:83:ba:
                    2f:f7:9a:55:4e:e2:5f:8d:53:08:96:4a:b4:de:ff:
                    c3:eb:33:94:93:60:ec:1b:e5:cb:ae:53:2b:c8:a0:
                    5a:65:33:ad:43:68:15:0b:92:d5:cb:9d:87:be:71:
                    57:8e:36:55:ae:f9:9a:8e:fe:e8:bb:b9:8c:56:7c:
                    3d:aa:61:15:57:cc:ca:23:77:83:65:38:ed:d8:92:
                    99:d9:0e:b5:c5:64:84:df:ea:16:be:e8:1d:12:4b:
                    f2:c9:5b:ce:60:29:f3:c8:0c:41:9b:da:f9:b8:ab:
                    fa:18:84:b1:36:0d:c9:89:e7:5d:22:b5:88:fb:6c:
                    4f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4A:50:B9:2D:D4:F9:B9:E3:AB:EB:FC:52:95:42:DE:F9:2A:84:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dde972bd-5966-3ab6-ac6b-0dc49806892b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.66.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:cd:1a:3f:9f:93:7b:b7:24:46:65:c2:c7:f2:2e:ce:27:38:
         14:b7:6b:f5:3d:85:84:40:57:bf:45:e8:5e:c3:ef:0e:e5:f6:
         50:cc:6c:df:23:d5:f5:71:50:47:66:0e:91:81:92:fb:cf:80:
         17:b5:a6:94:56:bf:bb:49:fe:14:d1:95:da:36:a0:bc:6e:d5:
         e4:a1:e3:5b:22:6f:23:b1:ba:78:5b:ff:0f:7c:05:5d:6d:aa:
         62:4f:ef:e8:58:6a:15:df:fd:23:65:ab:ad:18:bb:23:0f:6d:
         a7:3c:11:84:3d:04:b2:b0:89:0b:01:1d:a5:18:8d:c7:a5:99:
         cb:23:52:aa:af:cb:b1:ad:98:61:fc:f9:90:c9:01:d3:1b:a3:
         9d:bf:c0:db:e4:95:d6:bb:2c:e3:8c:12:07:c4:56:9f:89:24:
         f5:b7:73:13:95:6e:42:47:c9:93:c4:5f:69:66:14:ab:5f:58:
         fd:31:94:77:48:e0:3d:3e:5e:3b:ec:c9:02:44:3b:c3:47:d2:
         6a:f1:ad:94:f2:cc:49:ff:7a:dd:42:6b:5c:1c:48:81:31:3f:
         45:2d:ea:90:bb:72:4f:9a:5e:91:89:07:fa:a5:5c:6e:4d:b1:
         20:18:4f:ec:f3:75:ad:fc:e2:a6:9a:ff:b6:14:53:a3:18:1d:
         ee:c8:f3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:29:44 2025 by rpki-client