Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e1c3ab86-5e1a-37c9-9c66-e69f86e6960c.roa
File:                     e1c3ab86-5e1a-37c9-9c66-e69f86e6960c.roa (raw, json)
Hash identifier:          HbFEks8tzWV2FonvdUSYHTotJWJ04qSgVTGBIi4M/PU=
Subject key identifier:   26:FF:59:76:D1:DD:7D:5C:C6:60:B2:A5:2D:58:D1:29:9C:98:B6:11
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01BEF6F591D07545243F00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e1c3ab86-5e1a-37c9-9c66-e69f86e6960c.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        72.216.130.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:be:f6:f5:91:d0:75:45:24:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=9aa1f2bd-de32-4296-9bee-0650f851091f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:b3:2a:80:43:99:28:be:93:0a:36:ee:c1:
                    8f:cc:12:9c:c4:91:05:9b:26:3e:40:37:ad:f1:ea:
                    99:22:98:fc:5f:29:ef:98:4e:06:7f:3b:d4:fd:77:
                    23:0e:ab:1f:1e:31:87:5a:eb:38:95:fe:74:35:4a:
                    c5:af:42:06:1a:07:ed:b7:1e:bd:a0:e9:7e:a1:73:
                    04:1d:35:0a:4d:77:d2:3f:11:c4:36:48:bf:1a:fa:
                    9a:74:75:a8:f1:44:83:dd:72:0f:ea:75:ba:45:23:
                    ac:d4:81:fa:0d:42:13:20:db:3e:14:48:8f:0c:b0:
                    b2:66:53:71:0c:06:f3:9b:54:fa:67:ac:2c:94:b6:
                    f9:04:1d:82:97:de:f2:7a:66:36:07:2c:42:38:0d:
                    0d:df:88:95:e2:6e:4d:b3:63:4d:02:6d:2e:a8:11:
                    6b:60:a8:d6:fe:72:f9:72:a6:0f:c9:c6:a8:eb:e3:
                    36:9c:dc:4a:b2:c2:e1:2d:28:a8:5e:45:34:0c:f8:
                    09:7b:c5:7e:d3:8a:f2:c4:90:08:af:45:1e:76:55:
                    22:e7:14:29:ec:2f:e0:50:25:f7:c4:fc:1f:f2:7f:
                    de:bd:84:26:81:da:a8:11:1f:6b:1b:9e:e3:4e:02:
                    6f:97:84:3e:a6:21:a1:75:33:2a:49:cc:30:a0:e3:
                    4c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:FF:59:76:D1:DD:7D:5C:C6:60:B2:A5:2D:58:D1:29:9C:98:B6:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e1c3ab86-5e1a-37c9-9c66-e69f86e6960c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.216.130.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:ae:c2:58:9d:b8:11:ce:3c:aa:b2:6c:48:dd:22:5d:41:27:
         f5:f1:65:64:b9:fb:3c:83:c6:fe:f4:27:b8:5b:6c:2f:be:64:
         70:df:4f:51:6e:5d:97:9e:f4:47:cb:5e:3a:22:47:cb:76:8b:
         05:19:bf:3d:77:90:a2:da:ce:65:15:9e:cf:24:81:93:51:8f:
         83:7e:11:bc:84:4c:73:49:d5:36:4e:e2:a8:37:db:79:00:9b:
         99:46:20:cf:74:af:13:35:48:c2:d2:9f:ec:26:bd:1a:e1:11:
         e8:42:dd:2c:4d:75:c2:df:9a:7b:69:91:bf:2e:ae:c5:72:9e:
         fd:69:dc:fe:3e:57:fb:61:44:3c:48:5c:fd:d0:32:43:9e:36:
         b4:5b:39:84:77:aa:d2:6c:76:51:f8:2a:f6:ce:a0:cf:f9:37:
         61:59:6d:72:a7:76:f4:3f:12:cc:12:6e:0e:de:91:78:8a:70:
         44:fe:da:66:82:8e:24:e2:11:82:8f:4e:76:14:1d:e2:b2:58:
         69:58:6f:95:f3:8b:60:48:ea:83:d7:82:48:56:b3:e8:4e:2c:
         69:b7:90:80:93:70:01:a0:8b:b6:f4:af:c8:7b:12:df:0b:79:
         46:92:1f:2d:d4:8d:f4:f2:63:ab:5f:fb:04:13:b2:8d:90:8c:
         66:0e:a7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:34:58 2025 by rpki-client