Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5f23c15c-0caa-39e9-9af1-8855028d42f9.roa
File:                     5f23c15c-0caa-39e9-9af1-8855028d42f9.roa (raw, json)
Hash identifier:          2Oo8vbgarefFoWyZf+q5xjowst5A7+7TImlaQRcwYwY=
Subject key identifier:   69:3C:57:B5:31:93:BC:93:DA:74:AD:37:AE:5D:CE:D1:1F:FA:7C:AC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DD63C69E45AC73E13919000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5f23c15c-0caa-39e9-9af1-8855028d42f9.roa
Signing time:             Thu 19 Jun 2025 09:16:44 +0000
ROA not before:           Thu 19 Jun 2025 09:16:44 +0000
ROA not after:            Wed 17 Sep 2025 09:16:44 +0000
asID:                     22773
IP address blocks:        68.225.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:d6:3c:69:e4:5a:c7:3e:13:91:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 09:16:44 2025 GMT
            Not After : Sep 17 09:16:44 2025 GMT
        Subject: CN=639ccd8f-e020-425c-82b6-f318cd32fe53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:9f:ad:c7:32:33:c9:f6:02:c8:f3:45:4b:6a:
                    30:12:2d:96:4b:2f:48:b2:9d:77:c5:61:8e:5a:27:
                    15:1e:fb:e6:1c:8c:5f:13:67:fb:d4:99:68:8f:30:
                    f8:a8:67:96:28:7b:dd:05:0d:21:cd:ca:2b:82:e0:
                    dd:7c:f9:6e:0a:c3:ea:66:30:2d:71:b5:20:78:f3:
                    40:d3:03:46:13:0d:2a:ae:0a:c0:5b:3d:e7:57:e8:
                    ed:dd:ac:21:bd:a9:7f:96:24:36:c4:23:56:ab:27:
                    d8:95:fb:bf:23:14:e5:4c:22:3b:3f:4f:af:06:8b:
                    62:bc:b5:59:d5:2f:42:5c:df:3f:0c:b2:10:71:fa:
                    19:4c:cd:d7:50:2e:09:15:9a:91:12:5a:8c:4b:66:
                    12:eb:45:39:d9:6c:98:13:01:dc:f9:cf:2f:80:9e:
                    d4:2f:b3:95:14:e2:e7:ae:9d:de:36:76:c6:a4:26:
                    c8:1e:02:e6:d7:af:f1:36:ae:c7:e1:15:03:6a:0f:
                    4a:00:d3:4d:03:de:26:17:94:e9:b2:0e:70:d0:b2:
                    cf:22:25:c6:76:23:82:cc:38:fd:15:21:7d:bc:37:
                    03:79:fe:c3:a3:87:6a:19:ce:8f:1b:89:c3:80:d5:
                    5c:28:f7:d9:69:d1:df:00:62:68:75:c1:f0:c1:52:
                    51:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:3C:57:B5:31:93:BC:93:DA:74:AD:37:AE:5D:CE:D1:1F:FA:7C:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5f23c15c-0caa-39e9-9af1-8855028d42f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.225.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:0e:df:e9:b2:2e:11:78:a2:60:32:2b:5b:40:ac:be:9c:48:
         21:a5:94:db:5d:f9:25:7e:e9:24:fd:3b:00:c5:da:6a:0d:df:
         fc:0b:8f:e6:f6:d5:3b:64:6a:de:a6:fd:5a:2a:7a:de:75:8b:
         9b:21:74:5d:8a:18:81:8d:6a:0b:18:77:6b:5f:d0:7b:8d:d9:
         44:a0:0e:a0:01:9c:ee:df:08:9e:89:9b:64:d5:3c:ef:6f:ac:
         75:fb:e6:90:a8:7a:0b:fd:c4:d8:c2:4a:d3:06:8a:0a:71:9c:
         ab:e8:fa:f4:af:75:a8:30:03:4f:91:dc:1b:f0:d4:7b:7f:d1:
         83:ec:85:09:30:cf:38:99:82:05:0a:84:be:b0:b5:5b:eb:33:
         5d:a2:08:f6:98:44:68:38:ac:31:46:ed:2a:ea:e8:e7:91:2b:
         d8:d6:85:ff:dd:f4:0c:58:6b:9e:52:66:c5:d3:53:5d:39:c1:
         e0:4a:d8:ba:0b:9a:b4:ad:f4:47:59:cb:66:33:95:c7:39:95:
         5f:6d:8e:06:39:ec:fe:ee:72:ef:54:2b:e1:00:a7:7c:f5:0a:
         95:65:79:81:8d:28:72:f8:d5:9c:f5:a4:f4:0c:a5:10:59:6f:
         de:15:21:5c:f6:b0:14:22:66:81:bf:86:5d:89:f9:6e:8e:8e:
         9a:80:96:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 06:47:19 2025 by rpki-client