Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f1568e3-86ad-3e4a-bd3d-3ac7c6170e97.roa
File:                     4f1568e3-86ad-3e4a-bd3d-3ac7c6170e97.roa (raw, json)
Hash identifier:          4WWY8cZCdSFyomM39gbLDuUlYC54xzgMycuAP+EmhVo=
Subject key identifier:   E0:00:72:DE:87:2F:A0:C8:13:BA:B5:CF:4C:95:9E:26:5F:A8:B8:DD
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DD6D52E1CB5C93A994CD520
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f1568e3-86ad-3e4a-bd3d-3ac7c6170e97.roa
Signing time:             Thu 19 Jun 2025 09:17:56 +0000
ROA not before:           Thu 19 Jun 2025 09:17:56 +0000
ROA not after:            Wed 17 Sep 2025 09:17:56 +0000
asID:                     22773
IP address blocks:        68.231.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:d6:d5:2e:1c:b5:c9:3a:99:4c:d5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 09:17:56 2025 GMT
            Not After : Sep 17 09:17:56 2025 GMT
        Subject: CN=118fb994-3ee2-4ae4-b9ba-b72df015859d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:a3:de:47:30:5e:76:69:e0:70:c0:85:b7:47:
                    9f:f3:0c:e6:f3:8c:27:5a:40:0b:3f:93:70:0b:c5:
                    2d:87:8e:aa:1d:a1:1f:33:04:94:99:3f:c6:4e:14:
                    b2:c7:e9:e2:af:52:61:17:9a:3e:04:4c:72:fc:c1:
                    88:b7:af:65:80:ca:3b:21:1c:54:08:29:03:70:17:
                    88:17:4c:94:98:e2:e7:31:eb:74:fe:2c:ce:9a:1d:
                    e6:f5:2b:e4:31:24:5d:ad:c1:e9:39:55:ff:0c:75:
                    67:4a:60:4c:14:52:ee:44:91:d4:05:bf:cc:49:5f:
                    b2:d9:d2:12:0c:9c:d2:8f:0e:37:4e:d0:66:f0:2a:
                    e8:ec:82:b7:71:71:75:7a:49:25:f3:6b:05:2c:fe:
                    7d:52:07:84:0d:b4:95:84:05:d8:85:9d:c7:43:1b:
                    30:5a:af:04:5a:f2:32:1d:78:a7:6c:33:f2:a7:1a:
                    66:f5:78:d4:5e:de:05:2d:4c:af:c9:e7:c1:19:16:
                    46:35:02:57:d3:df:3a:3d:45:1f:fb:ab:e4:02:ae:
                    71:cc:0c:ef:f8:b9:67:9a:d2:cc:e3:63:a6:e5:a2:
                    01:00:aa:c5:23:b0:8a:04:19:8b:f6:62:2b:46:23:
                    d5:af:6e:16:30:8a:b6:0b:f2:82:4f:af:93:61:c0:
                    05:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:00:72:DE:87:2F:A0:C8:13:BA:B5:CF:4C:95:9E:26:5F:A8:B8:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f1568e3-86ad-3e4a-bd3d-3ac7c6170e97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.231.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:54:9b:94:93:b0:27:c2:01:9e:7d:8c:e3:d4:61:1c:46:bb:
         65:43:4f:f3:01:8d:02:ff:8a:20:ae:3e:46:7f:64:85:bd:04:
         5b:a8:24:5b:a1:c9:65:0b:c5:60:24:bb:12:3c:6e:af:5b:04:
         23:e2:de:f7:e5:a3:af:1c:23:4d:49:ff:87:84:f5:64:88:32:
         a1:dd:7e:51:ae:ae:94:95:d3:35:7e:f2:a2:5e:ab:54:d8:2c:
         94:f2:db:7c:89:f1:21:ac:6b:91:3e:e7:9b:75:53:11:db:3c:
         29:e8:2d:9a:d3:5f:b3:61:af:67:14:12:f9:72:57:a4:36:1f:
         c5:40:d0:6b:2f:17:21:79:9f:09:c5:46:01:25:52:e8:77:b1:
         35:5d:c5:c8:44:37:84:e2:1d:9e:6c:85:ee:0a:0a:07:af:d2:
         06:40:a0:33:f6:78:ec:d7:8f:a1:ef:52:eb:81:25:74:92:96:
         80:32:d6:46:5b:4a:4f:71:43:52:a9:4d:93:ed:69:b0:0a:f3:
         ff:f7:60:97:b8:c5:4a:77:56:50:11:ca:ee:94:40:c5:a0:ad:
         c9:7e:9d:5e:34:f1:84:08:70:23:79:7d:76:67:38:01:fc:d2:
         f3:a4:d8:d6:48:10:52:3f:0b:8f:34:9b:0b:f2:7e:e5:51:63:
         3c:80:ec:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo91tUuHLXJOplM1SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDYxOTA5MTc1NloXDTI1MDkxNzA5MTc1NlowLzEtMCsGA1UEAxMk
MTE4ZmI5OTQtM2VlMi00YWU0LWI5YmEtYjcyZGYwMTU4NTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaPeRzBedmngcMCFt0ef8wzm84wnWkALP5Nw
C8Uth46qHaEfMwSUmT/GThSyx+nir1JhF5o+BExy/MGIt69lgMo7IRxUCCkDcBeI
F0yUmOLnMet0/izOmh3m9SvkMSRdrcHpOVX/DHVnSmBMFFLuRJHUBb/MSV+y2dIS
DJzSjw43TtBm8Cro7IK3cXF1ekkl82sFLP59UgeEDbSVhAXYhZ3HQxswWq8EWvIy
HXinbDPypxpm9XjUXt4FLUyvyefBGRZGNQJX0986PUUf+6vkAq5xzAzv+LlnmtLM
42Om5aIBAKrFI7CKBBmL9mIrRiPVr24WMIq2C/KCT6+TYcAFLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOAAct6HL6DIE7q1z0yVniZfqLjdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGYxNTY4ZTMtODZhZC0z
ZTRhLWJkM2QtM2FjN2M2MTcwZTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROcGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEtUm5STsCfCAZ59jOPUYRxGu2VDT/MBjQL/iiCuPkZ/ZIW9BFuoJFuh
yWULxWAkuxI8bq9bBCPi3vflo68cI01J/4eE9WSIMqHdflGurpSV0zV+8qJeq1TY
LJTy23yJ8SGsa5E+55t1UxHbPCnoLZrTX7Nhr2cUEvlyV6Q2H8VA0GsvFyF5nwnF
RgElUuh3sTVdxchEN4TiHZ5she4KCgev0gZAoDP2eOzXj6HvUuuBJXSSloAy1kZb
Sk9xQ1KpTZPtabAK8//3YJe4xUp3VlARyu6UQMWgrcl+nV408YQIcCN5fXZnOAH8
0vOk2NZIEFI/C480mwvyfuVRYzyA7A8=
-----END CERTIFICATE-----
Generated at Mon Jun 30 16:04:06 2025 by rpki-client