Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c0464d6-c169-33a0-9853-4c6565f2b960.roa
File:                     9c0464d6-c169-33a0-9853-4c6565f2b960.roa (raw, json)
Hash identifier:          hW60dFSBupO3hAg5oFtEl7G7TwMehk1Qz7MxghYCoBg=
Subject key identifier:   FF:F7:D2:DD:C8:86:3F:09:2C:74:4C:F5:B3:EC:D6:3E:9C:2B:99:5B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A40A7EBB875F66C7CF7AD82E0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c0464d6-c169-33a0-9853-4c6565f2b960.roa
Signing time:             Fri 20 Jun 2025 09:30:50 +0000
ROA not before:           Fri 20 Jun 2025 09:30:50 +0000
ROA not after:            Thu 18 Sep 2025 09:30:50 +0000
asID:                     22773
IP address blocks:        68.229.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:40:a7:eb:b8:75:f6:6c:7c:f7:ad:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 20 09:30:50 2025 GMT
            Not After : Sep 18 09:30:50 2025 GMT
        Subject: CN=b50c8dca-1262-4be0-980f-ac0c4515fd34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a1:b3:4b:f4:22:9c:d7:c7:9c:df:d9:c5:6c:
                    30:d8:2e:8f:0c:df:5d:79:40:5f:c7:ac:f8:be:97:
                    17:25:0a:34:1c:65:c7:2d:e9:dd:c3:56:18:0d:62:
                    e6:06:9a:25:35:9f:28:89:35:d2:2f:98:42:b9:c5:
                    4f:5b:f5:18:0d:42:d1:c5:92:17:53:6d:6c:85:7c:
                    cf:eb:c4:e3:ad:1c:fc:db:97:a0:8f:b8:f1:82:19:
                    af:e4:5c:c5:64:31:57:93:4b:2e:00:cd:f9:98:26:
                    ce:d4:79:83:7f:66:43:c9:f4:7a:3c:75:38:eb:a9:
                    f7:99:ff:1d:83:c3:04:e7:7f:f2:4f:27:80:e7:d9:
                    48:38:9f:81:37:79:77:f8:1f:9d:d9:46:cc:dd:cf:
                    3b:80:c1:d5:f8:b9:63:b3:d7:dc:bd:03:f1:99:03:
                    6f:d8:a5:ff:cc:a5:4c:02:f3:f3:58:c0:1e:4c:a8:
                    3c:6e:b6:f9:e0:47:bc:d6:63:b4:6d:0d:97:97:98:
                    e6:82:29:9c:1a:b7:07:77:d4:07:0b:9b:db:20:b4:
                    9d:2b:bc:8e:c3:13:cf:d5:bd:35:33:b2:03:25:b8:
                    75:66:cd:84:26:06:31:c8:22:4e:09:15:92:cb:ff:
                    92:13:03:07:e2:82:0d:37:90:41:2e:d7:53:83:19:
                    a9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F7:D2:DD:C8:86:3F:09:2C:74:4C:F5:B3:EC:D6:3E:9C:2B:99:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9c0464d6-c169-33a0-9853-4c6565f2b960.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.229.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:26:37:86:a9:68:58:a4:ae:7e:c6:23:75:99:8d:84:5f:23:
         a5:3a:59:e9:16:b1:de:f9:eb:b2:c5:d7:df:3e:3a:57:76:75:
         46:8d:80:a0:24:19:87:90:0c:bd:bc:c5:47:02:83:fc:9e:8c:
         7d:d4:43:a3:3d:67:79:77:fd:1d:d7:ef:47:68:0c:d0:3c:77:
         3b:fb:e8:50:8d:5a:ec:e7:0b:c6:6e:95:5a:af:94:83:79:eb:
         e4:9f:b9:b7:7d:1f:67:f6:89:65:e6:8f:09:c2:02:5a:81:9b:
         b4:65:da:50:56:91:51:59:6e:a8:66:eb:81:cf:5b:7d:ce:5f:
         d4:6a:fa:9e:db:e9:e0:6a:b1:6e:b6:cb:d5:fc:1a:05:42:57:
         ff:ab:83:21:eb:6c:24:fa:e3:f8:88:95:ca:f1:e4:85:53:b1:
         f5:ec:78:63:21:3a:df:59:11:3a:eb:50:4c:4c:95:0c:fb:45:
         97:29:78:4f:51:23:96:fb:ee:08:a0:e7:92:c5:eb:29:76:d5:
         82:8b:66:8f:db:08:81:f2:5e:4d:b9:63:d9:31:97:82:ce:fe:
         2d:0e:65:7d:2e:48:24:93:ce:78:39:92:35:54:85:24:21:62:
         82:c2:1c:b1:97:79:6c:e3:3a:1c:54:8e:d7:72:ed:3e:0c:bf:
         34:3a:ec:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAp+u4dfZsfPetguAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDYyMDA5MzA1MFoXDTI1MDkxODA5MzA1MFowLzEtMCsGA1UEAxMk
YjUwYzhkY2EtMTI2Mi00YmUwLTk4MGYtYWMwYzQ1MTVmZDM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46GzS/QinNfHnN/ZxWww2C6PDN9deUBfx6z4
vpcXJQo0HGXHLendw1YYDWLmBpolNZ8oiTXSL5hCucVPW/UYDULRxZIXU21shXzP
68TjrRz825egj7jxghmv5FzFZDFXk0suAM35mCbO1HmDf2ZDyfR6PHU466n3mf8d
g8ME53/yTyeA59lIOJ+BN3l3+B+d2UbM3c87gMHV+Lljs9fcvQPxmQNv2KX/zKVM
AvPzWMAeTKg8brb54Ee81mO0bQ2Xl5jmgimcGrcHd9QHC5vbILSdK7yOwxPP1b01
M7IDJbh1Zs2EJgYxyCJOCRWSy/+SEwMH4oINN5BBLtdTgxmp9wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP/30t3Ihj8JLHRM9bPs1j6cK5lbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWMwNDY0ZDYtYzE2OS0z
M2EwLTk4NTMtNGM2NTY1ZjJiOTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROUhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGgmN4apaFikrn7GI3WZjYRfI6U6WekWsd7567LF198+Old2dUaNgKAk
GYeQDL28xUcCg/yejH3UQ6M9Z3l3/R3X70doDNA8dzv76FCNWuznC8ZulVqvlIN5
6+Sfubd9H2f2iWXmjwnCAlqBm7Rl2lBWkVFZbqhm64HPW33OX9Rq+p7b6eBqsW62
y9X8GgVCV/+rgyHrbCT64/iIlcrx5IVTsfXseGMhOt9ZETrrUExMlQz7RZcpeE9R
I5b77gig55LF6yl21YKLZo/bCIHyXk25Y9kxl4LO/i0OZX0uSCSTzng5kjVUhSQh
YoLCHLGXeWzjOhxUjtdy7T4MvzQ67Ok=
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:20:58 2025 by rpki-client