Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/021d1b50-d85f-3732-9a2c-c7f4a602fec9.roa
File:                     021d1b50-d85f-3732-9a2c-c7f4a602fec9.roa (raw, json)
Hash identifier:          3bTcLAvf7pv/1WB1xXjIvbINXaTMohUzK1D2JoR9IPA=
Subject key identifier:   D9:56:5B:55:9A:73:31:82:31:95:29:CE:8F:A4:F9:F3:26:1B:AA:F7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E7805903D02C847C0C02700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/021d1b50-d85f-3732-9a2c-c7f4a602fec9.roa
Signing time:             Thu 19 Jun 2025 14:42:43 +0000
ROA not before:           Thu 19 Jun 2025 14:42:43 +0000
ROA not after:            Wed 17 Sep 2025 14:42:43 +0000
asID:                     22773
IP address blocks:        72.223.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:78:05:90:3d:02:c8:47:c0:c0:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:42:43 2025 GMT
            Not After : Sep 17 14:42:43 2025 GMT
        Subject: CN=9c6cfad3-12a5-4d34-8e5b-8ad3cb18eab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:03:2a:5e:24:c6:1c:5f:d6:55:32:0f:8a:0c:
                    6e:94:f3:c5:5f:e8:03:bd:1d:9e:90:cf:38:77:0e:
                    ad:34:7e:f5:80:ed:62:69:c5:9d:4c:ba:e0:c7:cf:
                    35:a1:10:15:2d:1e:41:d9:8b:2f:df:1c:32:40:31:
                    e2:2a:bd:0a:f9:be:b3:13:7e:7b:bc:8f:76:e9:95:
                    2f:2b:85:b0:08:95:2d:2f:19:b2:bb:87:84:9d:03:
                    97:47:e4:85:70:55:c3:06:26:39:a3:6d:5a:1f:16:
                    02:87:fd:b3:21:b1:06:f9:14:3d:98:c4:31:b8:8e:
                    73:a8:fe:29:93:93:5d:b7:64:f0:3e:ce:8d:dc:5b:
                    6f:a6:2c:77:33:c5:ee:9b:b9:a4:82:0e:96:9d:a7:
                    e0:81:4a:57:f2:ec:46:f8:8f:3a:42:23:5f:6a:93:
                    88:4e:f7:5e:f4:89:a6:bc:60:bb:e2:50:44:d9:e1:
                    4f:3c:ab:88:5a:d1:23:fd:45:ae:72:1e:84:5b:fd:
                    3c:cd:22:f5:0d:76:be:1c:9a:ac:45:45:40:e8:8e:
                    55:ea:af:f5:f9:05:a7:99:e4:4a:bf:f1:03:df:46:
                    51:44:b0:57:58:18:29:99:2f:98:2e:cd:27:97:93:
                    21:9f:a6:40:e0:1e:e3:7f:e8:c5:06:ca:41:65:0b:
                    86:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:56:5B:55:9A:73:31:82:31:95:29:CE:8F:A4:F9:F3:26:1B:AA:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/021d1b50-d85f-3732-9a2c-c7f4a602fec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.223.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:f5:99:f6:7e:8a:d1:21:80:7f:57:86:69:47:d4:01:2d:36:
         f4:8f:17:58:18:eb:12:33:56:e3:62:78:5c:1f:89:32:20:bb:
         a8:eb:39:87:87:70:6b:78:04:b6:d1:c3:92:d3:96:09:95:72:
         97:74:6a:e2:e9:bb:9d:ab:01:cd:d0:35:8e:52:9c:08:55:b6:
         d1:39:8c:da:5c:24:41:d4:57:1e:2a:e4:62:fa:c4:f5:82:b6:
         a4:b6:95:46:97:a1:ad:75:0a:92:bd:5c:cf:0e:02:37:f4:47:
         87:8d:dc:70:3f:96:cf:6d:14:b5:47:1d:fd:f1:9d:19:ef:fb:
         70:8c:90:cd:54:a7:4f:1b:be:8c:03:d0:c0:16:86:6b:82:0e:
         14:d1:50:27:3e:84:ff:5d:00:70:ad:76:6b:0c:d9:40:e5:68:
         4d:76:fb:c1:d2:0a:a0:c6:3c:fb:dd:4d:48:e9:8b:14:5b:a2:
         b9:14:60:f9:9b:24:5a:7d:12:19:24:3e:f5:20:cb:6c:87:7c:
         e0:65:90:45:36:d1:aa:ff:e9:75:b5:87:54:e5:c9:f7:e1:c8:
         89:c7:09:74:c5:f5:ec:aa:30:ee:66:1a:f7:2f:29:7e:be:29:
         6b:d2:09:8f:12:63:77:d5:d0:ed:6d:1d:a3:c0:37:fd:5c:bf:
         50:69:05:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 09:52:08 2025 by rpki-client