Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a5745702-c073-35c8-a440-48b664bf6d32.roa
File:                     a5745702-c073-35c8-a440-48b664bf6d32.roa (raw, json)
Hash identifier:          SI5JgYo8PXpJ9/LUT7hcNoVeawzDpslm+uJmfYXQaDo=
Subject key identifier:   97:B8:77:2F:CC:50:D0:25:F1:82:83:58:FA:C2:BE:88:B2:2A:1A:91
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3C105D5124E8A0FD711928A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a5745702-c073-35c8-a440-48b664bf6d32.roa
Signing time:             Wed 18 Jun 2025 18:02:14 +0000
ROA not before:           Wed 18 Jun 2025 18:02:14 +0000
ROA not after:            Tue 16 Sep 2025 18:02:14 +0000
asID:                     22773
IP address blocks:        68.3.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:10:5d:51:24:e8:a0:fd:71:19:28:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 18 18:02:14 2025 GMT
            Not After : Sep 16 18:02:14 2025 GMT
        Subject: CN=ddcab084-fef6-448b-93c7-0ef9bb25a470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:31:f4:1b:3c:1d:bd:fb:c2:3f:f2:c8:77:02:
                    0c:4d:22:83:1d:89:21:48:71:0b:9e:ae:79:a7:00:
                    4b:96:8a:d8:10:0b:ac:11:2a:39:73:cd:3c:2e:78:
                    c2:1e:0a:c9:b6:ea:f4:12:a9:82:8a:90:19:76:61:
                    24:a9:1b:31:72:af:36:c5:5d:af:b5:18:e4:c8:80:
                    e7:26:c6:0d:18:c6:b5:ba:43:5b:69:f3:cc:3e:08:
                    67:ed:6d:03:ec:4d:d5:af:27:0e:c1:59:f1:f3:e4:
                    42:d0:9a:12:00:23:8f:b3:db:44:0b:5d:ab:d2:e4:
                    ea:22:3f:17:bc:51:5f:5a:79:f9:c4:12:75:8d:47:
                    4d:05:d3:78:2c:fa:2b:5d:f9:22:ca:a5:95:68:19:
                    07:ce:dd:d7:d4:f1:a0:ad:b6:74:f1:86:de:71:75:
                    1b:2f:f0:ee:1f:b9:5c:50:da:5e:73:a0:59:1a:61:
                    6c:14:c7:9f:05:84:d8:a8:4d:73:40:28:28:1a:70:
                    cd:00:85:16:28:d4:d9:4f:7e:e6:29:f0:eb:e4:3e:
                    67:74:75:b8:ec:39:73:d0:db:7a:be:c9:7c:4b:a5:
                    d2:81:d6:75:d8:e9:9e:f9:fb:f7:6d:92:c5:c3:02:
                    6a:0a:bb:c7:18:1e:1f:5a:d1:99:32:37:2a:6e:ee:
                    49:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B8:77:2F:CC:50:D0:25:F1:82:83:58:FA:C2:BE:88:B2:2A:1A:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a5745702-c073-35c8-a440-48b664bf6d32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.3.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:05:b8:a1:45:2d:9a:e1:e0:13:f2:6d:d7:32:7c:be:01:42:
         24:64:c6:c3:ef:b2:09:91:47:2d:5e:40:9c:26:3a:2c:73:8d:
         6f:c6:33:a9:f7:f5:a8:f4:f1:56:d7:5d:69:1c:ef:82:23:71:
         37:fd:9e:fa:69:26:62:f2:a1:5d:58:1e:e7:44:10:22:04:87:
         d4:8e:d5:d8:db:58:15:33:82:df:7e:02:44:61:5d:33:e9:91:
         d9:87:a1:d9:f4:d7:87:00:47:c3:0c:77:42:ee:10:56:d1:d9:
         47:91:0d:ad:28:0b:cd:f7:e6:ca:6c:99:68:80:3c:20:25:db:
         c3:77:f6:20:9c:b2:1b:85:64:75:d0:13:c1:26:b0:da:62:d5:
         d8:11:7d:43:3e:3f:5d:df:18:6b:e6:98:09:91:d9:dd:d4:67:
         b9:a6:1f:78:e8:2b:9d:9b:ac:62:23:4a:31:19:17:40:f8:be:
         cc:f4:86:b6:77:e0:a8:c2:16:cf:a3:58:44:67:f7:58:ee:4d:
         1e:77:06:95:74:93:29:1c:c0:54:90:20:f8:c3:ac:ad:11:55:
         d9:e0:a4:2c:23:fd:25:bb:5c:c1:5a:3a:86:09:ba:86:0e:61:
         2b:1a:fc:ee:1e:e2:b7:74:ac:f8:8c:21:4f:4f:31:19:0b:d1:
         8c:e3:f6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:05:56 2025 by rpki-client