Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/252c7909-cf70-3db1-b07e-53377dc66e8c.roa
File:                     252c7909-cf70-3db1-b07e-53377dc66e8c.roa (raw, json)
Hash identifier:          OMEmrvTJDTspdluS/3kQQdtd0D2epbnJNpDIQ3Ocgd0=
Subject key identifier:   79:36:38:F5:EE:59:09:B2:E2:81:38:7F:75:03:F4:5E:76:F3:35:18
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DD86BF0B670AA0464A4B180
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/252c7909-cf70-3db1-b07e-53377dc66e8c.roa
Signing time:             Thu 19 Jun 2025 09:21:08 +0000
ROA not before:           Thu 19 Jun 2025 09:21:08 +0000
ROA not after:            Wed 17 Sep 2025 09:21:08 +0000
asID:                     22773
IP address blocks:        70.176.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:d8:6b:f0:b6:70:aa:04:64:a4:b1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 09:21:08 2025 GMT
            Not After : Sep 17 09:21:08 2025 GMT
        Subject: CN=de033f17-5285-46b3-ba0f-d51d4902db83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:eb:2f:c9:f7:9c:2e:55:7e:4d:70:6d:59:86:
                    4c:8f:c1:cc:d0:4f:b2:cc:ce:f7:28:93:17:0e:00:
                    3c:cf:1a:70:25:2b:7d:43:e3:cd:b1:72:77:d0:6e:
                    5a:82:bb:d1:4c:9e:52:bf:6c:cd:a7:83:18:50:53:
                    bb:6a:b2:79:86:b7:10:6f:8b:6f:9b:8e:e3:d4:2a:
                    fc:47:a2:02:a5:7b:6c:13:dc:37:36:38:3e:1e:4e:
                    b0:a1:b0:13:2e:96:ff:d2:6d:f8:c0:c8:1a:76:03:
                    d9:9f:44:c1:97:2a:36:e8:7c:a8:c2:1c:e5:fa:e4:
                    5f:c1:f3:86:f7:f4:84:65:83:50:6a:61:88:47:95:
                    37:de:bb:5b:a4:0e:6a:51:f5:be:b0:72:ce:bc:f2:
                    ac:55:2a:0b:51:a4:96:34:29:f2:7a:eb:8e:34:d9:
                    14:09:4d:bc:65:38:12:1b:b4:24:c0:ed:fe:25:12:
                    59:77:58:65:52:9d:f5:d2:7b:ec:9c:7d:8e:65:56:
                    14:df:f7:b5:69:01:2a:16:ba:e4:a8:6e:eb:0e:ed:
                    de:14:32:b9:07:96:4e:be:2d:ca:a5:79:4b:5b:84:
                    f2:05:bb:e6:02:68:fe:e1:9c:97:06:30:0d:d5:51:
                    33:9e:2f:41:db:9c:95:fb:27:df:3c:7f:2f:8b:fe:
                    93:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:36:38:F5:EE:59:09:B2:E2:81:38:7F:75:03:F4:5E:76:F3:35:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/252c7909-cf70-3db1-b07e-53377dc66e8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.176.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d0:1c:a5:15:d1:ab:47:47:cd:f6:0c:3a:4f:3a:7e:37:8a:
         db:40:86:a1:cd:7a:c1:23:62:85:82:6e:c9:01:7c:fe:71:87:
         56:3a:8e:67:7f:eb:36:be:21:22:49:e0:dd:f4:fc:49:ab:9c:
         59:ff:4e:38:99:10:e8:ba:5e:c1:46:bb:e1:f8:a0:37:6e:af:
         14:11:5d:60:5a:e5:ce:08:ca:20:2d:f1:c7:07:0f:38:46:ef:
         30:49:ef:8e:56:03:e2:88:b0:5b:32:cf:c0:e4:af:79:e0:76:
         27:b7:e8:89:92:6c:42:52:ee:ca:4e:51:5c:6e:4c:25:0f:42:
         b3:8f:b9:94:58:f5:07:89:1a:77:fd:ff:8d:35:7b:38:1e:98:
         dc:3f:d8:17:f9:e9:30:a3:96:ee:69:e8:8f:df:0c:22:8c:a5:
         f1:ab:b0:67:bd:3f:7d:46:18:4f:4b:b6:1c:3d:e0:b9:08:c9:
         96:40:ff:4a:75:11:0a:e6:da:81:ad:b1:69:16:1a:81:2c:93:
         48:ae:fd:21:3a:09:47:a1:84:22:44:0d:f2:63:b6:d2:5b:ff:
         90:fe:ba:7f:43:9c:69:5a:ad:95:6a:3e:13:cb:23:7a:f3:e6:
         25:88:27:57:d6:02:7e:3b:b0:8e:24:ad:9b:df:73:0f:07:c5:
         73:af:16:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:12:09 2025 by rpki-client