Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f055513c-529e-3211-9173-22c22b4bbe66.roa
File:                     f055513c-529e-3211-9173-22c22b4bbe66.roa (raw, json)
Hash identifier:          XnvBJsbcadj7Nk9Rv37tCUruKmCOpzNoX1+nM7UJGw4=
Subject key identifier:   F3:C4:41:03:AD:E7:47:27:D5:CD:1F:93:84:3B:BA:24:C6:03:25:C2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B2067075E930F61C2198E86C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f055513c-529e-3211-9173-22c22b4bbe66.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.170.124.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:07:5e:93:0f:61:c2:19:8e:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=90fc29e8-5242-4b24-804e-c2df63785f38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:0a:80:fb:c5:b7:cb:30:ec:02:b3:3f:c5:84:
                    17:04:7c:55:eb:8c:db:21:c6:53:3b:bf:5c:1c:e9:
                    3f:bb:4c:f7:23:6c:3b:db:3d:1d:46:ae:d5:d0:6a:
                    ac:00:1e:e7:20:79:20:00:7c:18:af:27:52:15:8a:
                    5f:16:44:7e:ad:2b:cd:e2:13:04:d4:2c:28:42:7b:
                    95:00:26:fc:37:5b:b2:bd:66:6b:a5:0e:03:48:12:
                    8a:86:2f:99:3c:9c:06:48:2a:8a:4b:e2:84:03:2e:
                    c6:ca:f8:9d:56:08:da:9a:9e:d6:68:07:08:76:d7:
                    f7:5d:79:4c:11:81:03:0c:e5:f8:13:d5:b3:6e:a5:
                    9c:65:78:dd:1c:39:55:aa:7a:57:a6:53:a0:aa:43:
                    f3:bc:ac:06:04:fa:ae:47:dc:cb:9d:ce:76:bb:22:
                    16:cf:23:6d:5b:a8:57:20:4b:06:62:74:ad:7d:3c:
                    94:ae:99:9d:ea:6c:7e:5f:22:d8:3a:e8:f8:97:8c:
                    35:6e:ec:8a:e6:9f:1a:2f:17:2e:68:54:09:4d:4b:
                    65:e2:4d:0d:10:cf:c9:74:1c:5a:8e:d4:c0:a2:16:
                    81:57:76:9f:29:8f:25:8f:bc:fe:47:b4:6c:98:45:
                    23:60:26:3e:23:cf:3f:6c:95:89:48:b5:63:e0:ed:
                    72:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C4:41:03:AD:E7:47:27:D5:CD:1F:93:84:3B:BA:24:C6:03:25:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f055513c-529e-3211-9173-22c22b4bbe66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.170.124.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:28:b3:aa:d4:04:6a:c8:a7:80:7a:8b:22:ca:a3:8e:04:6a:
         29:7d:7d:4b:f0:94:71:e3:aa:3d:24:d6:b8:21:64:c3:65:de:
         a9:20:d8:57:d6:70:dc:5d:45:2f:81:29:b6:be:28:24:9e:41:
         78:ea:2f:03:73:76:d8:1a:c9:a1:d5:4b:a9:e6:4b:c8:76:9e:
         e1:8d:d3:57:41:ff:73:9c:79:7d:7c:95:1f:46:0b:38:db:9f:
         b9:fe:93:76:da:cb:a7:80:64:ee:2d:2b:90:04:1d:13:af:c8:
         af:9e:31:69:64:93:e1:f8:57:b8:bf:71:14:59:ac:c9:26:b5:
         01:eb:a5:93:16:c5:54:d2:66:48:f4:60:8f:eb:30:eb:81:45:
         ce:4b:32:d0:16:02:a5:0c:d7:a0:b7:1b:fc:ac:86:55:4d:14:
         b4:09:8c:6f:55:a8:eb:a0:ba:53:8d:10:3c:56:c9:a0:e8:a4:
         81:7c:1b:51:c1:c0:b9:98:9e:85:c1:46:e4:54:81:44:4e:f3:
         04:0e:e8:de:2f:83:4d:8e:d9:83:35:01:74:6e:d8:f1:5d:37:
         79:dd:8b:d6:2f:62:e4:2c:76:74:9b:4b:ff:25:e3:74:4e:98:
         fb:8c:11:da:93:5b:0e:58:96:e0:f1:d4:0e:07:64:86:81:91:
         98:b4:0a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 02:03:38 2025 by rpki-client