Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9e69df7-cb58-30d1-9eb2-3405f49d40eb.roa
File:                     e9e69df7-cb58-30d1-9eb2-3405f49d40eb.roa (raw, json)
Hash identifier:          ErJfWbYDm5Vd1XkHiRv09C+dHB/OvdBI07yyC5dSijE=
Subject key identifier:   F5:B5:1B:26:DC:04:40:A2:0C:BF:A4:42:40:60:B8:43:86:C0:17:63
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C57205D0C78DA42F54080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9e69df7-cb58-30d1-9eb2-3405f49d40eb.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        68.231.98.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:57:20:5d:0c:78:da:42:f5:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=99d67f00-6baf-4f56-9afe-11ca23b8ca32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8b:2f:d7:56:f8:54:07:9a:98:75:c7:c3:4d:
                    ef:44:a8:f8:26:6c:5f:e0:3d:05:34:0b:e6:54:4e:
                    cc:f9:d3:33:04:5e:6c:67:cd:b1:68:94:c0:a7:4f:
                    d7:41:16:f5:43:54:01:8f:ad:a5:fe:bc:e1:ef:dc:
                    1a:d1:c2:21:be:d7:2c:86:7a:fe:51:47:33:78:35:
                    b6:0c:b9:32:f1:62:c1:d4:86:2c:cd:8d:20:22:9b:
                    5c:bd:f6:db:73:ac:ea:19:26:3f:b9:37:f0:f9:d5:
                    b6:38:b6:2b:0c:9d:65:3f:cd:0f:5a:03:eb:c5:5d:
                    19:18:f9:1d:4c:57:17:c4:cf:91:70:81:da:7b:1c:
                    f6:a1:99:76:45:cc:ba:86:33:15:f5:75:cf:fe:72:
                    0f:40:49:05:dd:9d:cb:88:38:29:d5:9c:fc:7e:fa:
                    9b:b0:7d:ee:13:9c:ee:ca:de:35:83:d9:50:61:5b:
                    a6:2f:ec:4e:2e:91:a1:61:ec:78:7e:c9:98:04:27:
                    d6:46:c0:c4:49:c6:40:de:9e:e0:06:ae:2b:3f:ad:
                    f8:8c:24:c3:b6:38:ae:0e:5d:6d:35:bb:d2:34:39:
                    22:c2:81:6f:3c:a8:78:c3:0b:69:f7:a2:48:ff:fe:
                    9c:e0:21:e8:d8:ad:3f:94:4c:7f:75:4b:25:fe:03:
                    e5:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B5:1B:26:DC:04:40:A2:0C:BF:A4:42:40:60:B8:43:86:C0:17:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9e69df7-cb58-30d1-9eb2-3405f49d40eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.231.98.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:e4:81:01:9a:c5:41:74:93:85:34:2f:68:fb:9d:1a:15:37:
         96:dd:73:c1:14:f2:aa:9b:a3:2c:11:c7:66:d0:9a:03:c5:4f:
         f7:f6:0f:b8:09:51:6f:7d:d6:20:a1:95:85:4a:cd:93:b9:ca:
         ed:6d:41:20:b5:2a:47:ff:0d:4d:62:0b:17:9f:bb:a6:08:2f:
         62:09:b4:be:71:07:fc:39:50:a1:24:99:25:d6:0e:0b:0f:0f:
         17:8f:42:82:e7:0b:bc:2b:c6:57:ee:ee:c1:60:d6:2e:ba:92:
         3c:67:c0:83:11:16:f3:d5:b4:16:da:0e:b8:96:28:26:85:8e:
         2b:1f:cb:60:15:fb:e2:6f:b0:8d:cd:5e:fb:ee:f4:ab:a8:dc:
         a6:ea:40:4c:0d:a1:18:86:49:f6:3a:5d:05:c7:55:04:5b:9d:
         02:9b:84:a7:9c:94:71:08:db:6b:89:08:d8:bb:06:b7:e2:dd:
         d1:13:f0:76:0c:4f:ca:c5:04:37:bc:0e:4d:c9:81:52:fa:c0:
         b6:28:c5:46:19:93:52:c1:a7:aa:1a:27:10:ad:c3:1c:68:7b:
         f8:ff:be:e9:2f:12:1c:b7:d3:e3:e8:02:46:db:af:1c:fd:42:
         61:8c:26:a4:74:86:40:5a:f5:37:1c:20:3d:9e:eb:72:e5:14:
         31:9d:9b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:44:10 2025 by rpki-client