Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f9d0b2d-8c65-3a39-aa8a-3b7e71de6625.roa
File:                     2f9d0b2d-8c65-3a39-aa8a-3b7e71de6625.roa (raw, json)
Hash identifier:          8Bpj1yMzRqeBvFA+m1S5ckFTsPgoYGr9kVZQviTUVrM=
Subject key identifier:   7B:AD:4C:F8:65:65:D0:E9:FF:3B:08:51:BE:EC:37:84:E3:90:DA:54
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5FD3A05C470C4E526999600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f9d0b2d-8c65-3a39-aa8a-3b7e71de6625.roa
Signing time:             Thu 01 May 2025 17:25:21 +0000
ROA not before:           Thu 01 May 2025 17:25:21 +0000
ROA not after:            Wed 30 Jul 2025 17:25:21 +0000
asID:                     22773
IP address blocks:        68.111.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:fd:3a:05:c4:70:c4:e5:26:99:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:25:21 2025 GMT
            Not After : Jul 30 17:25:21 2025 GMT
        Subject: CN=1e854f0f-4493-4b79-baf5-79f95c151fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:a5:98:86:a9:d9:0e:3b:f5:48:63:9e:19:
                    5b:e2:aa:6c:b8:c0:4f:be:23:4a:07:21:c3:1a:28:
                    20:a4:8a:82:29:62:2b:7f:38:28:c0:41:ec:54:ff:
                    66:2f:ce:08:b2:a4:db:72:40:5e:67:92:ae:1b:59:
                    ad:f6:0f:06:6c:57:85:a1:ed:70:41:fc:2b:7d:d5:
                    d4:e0:dd:66:21:c6:3b:e8:4d:d6:a3:9c:84:fa:90:
                    b4:52:04:74:4e:ed:cd:05:49:70:e5:de:db:28:b4:
                    47:20:18:6f:c5:6c:30:5e:fc:8b:61:8d:d3:27:4c:
                    a8:56:9d:ea:cf:28:b7:92:38:ce:11:f8:16:a9:8a:
                    b8:32:98:47:c7:35:c9:e2:3a:6e:3b:59:a0:a1:e3:
                    b4:89:a8:46:4d:22:01:35:3a:ba:37:ee:82:d2:42:
                    e6:43:85:17:3e:46:c1:d4:de:eb:7f:58:f3:13:63:
                    e4:8e:13:2e:ee:12:6e:c6:a1:f9:ae:7c:19:69:e5:
                    22:29:91:2e:e1:de:25:cc:09:8e:8e:f8:87:3e:1e:
                    8c:27:15:76:a3:5e:6c:df:88:90:54:e6:b2:55:21:
                    21:b9:8c:22:73:61:a6:22:e0:cd:71:86:4c:ec:99:
                    38:99:b1:4f:99:4c:29:cc:57:f9:a2:a5:f8:20:32:
                    65:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AD:4C:F8:65:65:D0:E9:FF:3B:08:51:BE:EC:37:84:E3:90:DA:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f9d0b2d-8c65-3a39-aa8a-3b7e71de6625.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.111.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:34:60:da:a4:4f:3d:7c:92:db:68:a1:85:25:f1:cd:6e:fb:
         7b:69:80:9c:cb:51:4d:1f:c8:09:e5:3a:be:49:f6:93:0e:4e:
         1f:43:b2:19:f1:81:07:cd:f4:86:a4:61:ed:9f:7b:e2:c7:ad:
         25:84:7a:d3:e3:37:4c:12:d7:7c:c4:8f:37:59:41:b4:3b:6a:
         ab:bc:a2:d7:b6:54:6e:78:6b:e6:31:23:90:b1:8c:23:43:16:
         de:e6:69:e6:fa:d0:59:82:c8:b1:ba:be:15:6d:5f:63:d6:6b:
         06:97:57:a1:50:cb:cc:74:aa:69:a6:7c:d8:35:43:8f:f2:e2:
         32:19:cc:99:62:d7:5a:50:9c:8c:a4:00:c0:9a:ab:ac:99:07:
         55:3a:e4:24:e6:6a:ab:68:6d:04:38:4b:cf:c1:75:bc:28:39:
         d6:e1:a5:ec:75:48:78:87:3e:75:23:77:d2:c9:27:89:71:d1:
         0a:58:d9:4d:90:6d:f8:21:c0:df:a5:e8:f0:18:79:b5:d5:17:
         e4:87:81:38:e3:3b:73:6f:b1:91:25:94:a7:3b:37:2b:6f:74:
         a3:30:ff:fc:2c:cc:47:80:83:8c:98:0a:4a:55:df:be:bc:0c:
         e3:39:bd:41:f4:ac:11:31:77:a8:54:3b:fd:be:9c:b6:15:cf:
         ad:9e:27:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:56:47 2025 by rpki-client