Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e98eb86f-a1ab-37d3-8269-bdd3a71b4e34.roa
File:                     e98eb86f-a1ab-37d3-8269-bdd3a71b4e34.roa (raw, json)
Hash identifier:          OO4gHePyr3OhYSkIvptVgHSVLq9tYxaK6kSob93fRMY=
Subject key identifier:   95:73:3D:3E:B3:B5:24:E8:7C:DB:2E:13:19:63:BB:CE:35:C7:68:84
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F233020B8AA8DF7A294E80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e98eb86f-a1ab-37d3-8269-bdd3a71b4e34.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        174.65.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:33:02:0b:8a:a8:df:7a:29:4e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=9d4b3fc0-7fcc-4661-b730-ca1e3b5647fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2f:d0:8c:e6:20:68:dc:f5:f4:05:fa:1c:30:
                    9f:d5:a5:02:8a:fa:f2:f0:26:be:83:45:80:1e:87:
                    bb:b6:52:31:76:e3:8a:40:39:7b:47:58:34:eb:32:
                    8f:88:c7:f5:0f:bb:3e:4c:cf:f2:75:75:bf:b4:5f:
                    f8:a3:83:5b:0e:d8:e8:00:21:25:7e:49:fb:e1:b9:
                    89:4e:12:4d:9e:03:26:93:66:e1:43:95:6f:f4:61:
                    f7:ee:78:38:99:07:de:7b:f9:ba:21:fd:dd:03:75:
                    90:9b:79:0d:f8:cc:68:dc:f5:6a:bc:34:60:a2:32:
                    63:95:c4:fc:23:1b:ac:41:6f:37:96:4c:1e:27:e5:
                    ac:a8:f3:6c:8a:d5:4e:0f:c8:fe:cf:7d:a0:2d:a9:
                    0d:7e:b0:c3:d2:ee:98:1f:70:03:d0:01:b7:03:de:
                    ef:27:79:ce:e4:0c:b0:c1:56:0f:4d:1e:bd:28:72:
                    ad:37:36:aa:25:73:77:2e:29:c8:73:17:4e:56:e4:
                    05:f1:23:77:b1:13:fe:2c:10:69:27:ea:d3:87:59:
                    74:33:24:41:ff:9a:74:93:f7:28:c1:b5:89:22:10:
                    88:5b:cd:49:32:e7:a8:ed:be:0d:64:c6:79:7f:56:
                    b1:88:10:4c:b8:ef:70:91:ec:bd:4c:e8:54:45:87:
                    19:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:73:3D:3E:B3:B5:24:E8:7C:DB:2E:13:19:63:BB:CE:35:C7:68:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e98eb86f-a1ab-37d3-8269-bdd3a71b4e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.65.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:6b:de:30:f0:e7:27:5e:f3:1b:95:e8:77:57:34:2e:4b:e0:
         85:fd:b2:fa:3a:4e:dc:7d:4a:ca:50:1c:20:84:f5:b6:e8:ba:
         bf:5c:bc:4c:26:66:b6:94:a6:f5:48:e3:f3:f8:62:32:70:94:
         67:be:30:12:37:e6:7d:24:a2:53:39:3c:56:f5:d9:39:65:33:
         68:63:d0:04:5a:e7:04:88:08:41:ae:1c:94:9d:55:90:31:7f:
         91:3c:17:8d:ab:7b:8a:a7:17:a4:40:f1:2b:d5:f1:f0:da:5c:
         07:85:c9:a4:3c:94:b8:5e:c9:df:02:12:d6:94:c2:ae:2c:7e:
         17:d1:60:0a:80:34:db:29:0d:dc:d1:24:cd:f3:24:fe:d1:0d:
         eb:ab:01:3b:e9:a5:87:ac:53:c0:d7:ce:71:65:76:70:51:9b:
         64:53:d2:bd:7d:3d:49:a5:8c:cb:f9:45:26:f5:9a:6d:06:4e:
         d4:b3:8e:80:6d:0d:14:64:f2:c5:cd:c9:5c:b7:2f:5b:90:a1:
         86:9e:9b:e3:34:05:0b:1f:42:74:8c:14:a9:39:78:21:e5:ce:
         54:32:f1:16:e7:ef:16:de:9c:85:02:ce:7c:20:f4:c2:df:86:
         f8:0d:5f:82:43:b7:16:6c:52:87:c1:55:c7:ff:de:13:e3:97:
         cf:67:77:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt28jMCC4qo33opToAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MTAwOTEzMDAzOFoXDTI2MDEwNzE0MDAzOFowLzEtMCsGA1UEAxMk
OWQ0YjNmYzAtN2ZjYy00NjYxLWI3MzAtY2ExZTNiNTY0N2ZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli/QjOYgaNz19AX6HDCf1aUCivry8Ca+g0WA
Hoe7tlIxduOKQDl7R1g06zKPiMf1D7s+TM/ydXW/tF/4o4NbDtjoACElfkn74bmJ
ThJNngMmk2bhQ5Vv9GH37ng4mQfee/m6If3dA3WQm3kN+Mxo3PVqvDRgojJjlcT8
IxusQW83lkweJ+WsqPNsitVOD8j+z32gLakNfrDD0u6YH3AD0AG3A97vJ3nO5Ayw
wVYPTR69KHKtNzaqJXN3LinIcxdOVuQF8SN3sRP+LBBpJ+rTh1l0MyRB/5p0k/co
wbWJIhCIW81JMueo7b4NZMZ5f1axiBBMuO9wkey9TOhURYcZnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVzPT6ztSTofNsuExlju841x2iEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTk4ZWI4NmYtYTFhYi0z
N2QzLTgyNjktYmRkM2E3MWI0ZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkF4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHVr3jDw5yde8xuV6HdXNC5L4IX9svo6Ttx9SspQHCCE9bbour9cvEwm
ZraUpvVI4/P4YjJwlGe+MBI35n0kolM5PFb12TllM2hj0ARa5wSICEGuHJSdVZAx
f5E8F42re4qnF6RA8SvV8fDaXAeFyaQ8lLheyd8CEtaUwq4sfhfRYAqANNspDdzR
JM3zJP7RDeurATvppYesU8DXznFldnBRm2RT0r19PUmljMv5RSb1mm0GTtSzjoBt
DRRk8sXNyVy3L1uQoYaem+M0BQsfQnSMFKk5eCHlzlQy8Rbn7xbenIUCznwg9MLf
hvgNX4JDtxZsUofBVcf/3hPjl89nd+Q=
-----END CERTIFICATE-----
Generated at Wed Oct 15 23:36:25 2025 by rpki-client