Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9f8d91f-fd4e-3c87-a608-fe18edec9201.roa
File:                     a9f8d91f-fd4e-3c87-a608-fe18edec9201.roa (raw, json)
Hash identifier:          D8m7a2XjINB1X2enfpVOxrMW4l5LtrQL183uN1exAVY=
Subject key identifier:   44:59:41:BF:24:F7:91:05:BF:CA:F6:EB:54:A9:A0:47:04:35:9D:D5
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3C10B72F5EB12D7B2549FD20
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9f8d91f-fd4e-3c87-a608-fe18edec9201.roa
Signing time:             Wed 18 Jun 2025 18:02:57 +0000
ROA not before:           Wed 18 Jun 2025 18:02:57 +0000
ROA not after:            Tue 16 Sep 2025 18:02:57 +0000
asID:                     22773
IP address blocks:        68.99.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:10:b7:2f:5e:b1:2d:7b:25:49:fd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 18 18:02:57 2025 GMT
            Not After : Sep 16 18:02:57 2025 GMT
        Subject: CN=ea2ce2fe-4b4b-41ac-8e82-d61c5e70babe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:25:6b:d9:27:f1:8f:82:1b:3a:58:6f:06:66:
                    35:1a:82:29:ac:03:52:77:8e:22:a4:a3:de:d2:44:
                    65:44:c6:02:e9:81:89:63:93:94:28:c8:91:8e:7f:
                    ab:33:fd:a2:57:6c:65:48:6f:6e:db:80:d3:ac:20:
                    42:11:05:b0:0e:cb:8b:a4:7a:d1:ec:d9:19:a5:44:
                    9e:21:73:b6:b5:2d:3c:ce:cb:dc:11:04:70:2c:a1:
                    1b:e7:90:fd:80:16:bc:9e:43:f1:bc:97:fe:c2:04:
                    98:ea:f8:20:9d:2c:12:10:6d:0c:f6:31:e5:28:ae:
                    93:5f:fb:24:70:d2:fc:63:bb:a1:bd:15:ed:e7:39:
                    85:65:bc:46:f3:36:23:6a:07:dd:26:da:c4:e4:80:
                    3f:aa:37:30:1a:97:14:c6:f4:fa:12:41:83:5b:41:
                    3d:5d:a6:5d:47:9f:37:cc:d6:93:36:7e:1d:03:70:
                    5b:38:49:ab:dc:c8:4d:82:df:f3:35:1b:d6:3d:3d:
                    55:70:75:60:0a:3f:50:17:44:56:81:bb:e8:47:ee:
                    74:1b:d0:82:fa:69:5f:e3:2f:52:53:2c:b4:34:bd:
                    c7:9c:7f:c0:d8:fa:f3:28:ff:8f:28:b9:d4:e5:6d:
                    1f:3e:8a:64:a9:1c:16:02:f4:57:89:c0:03:fe:f1:
                    41:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:59:41:BF:24:F7:91:05:BF:CA:F6:EB:54:A9:A0:47:04:35:9D:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a9f8d91f-fd4e-3c87-a608-fe18edec9201.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.99.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:d5:2d:5c:af:da:0b:ea:81:55:6f:dc:5b:25:07:15:37:0d:
         13:89:39:80:8f:6c:b3:79:83:0f:48:5c:3e:e8:a0:77:06:84:
         ca:5a:25:ae:f9:b8:27:d7:82:fc:6d:39:de:20:a2:ce:89:47:
         1e:82:f7:0d:84:1d:ed:eb:e5:70:8d:d3:07:b0:56:0e:f9:f3:
         eb:99:32:30:44:9c:92:c1:8c:08:67:1a:50:21:46:d5:5d:80:
         2f:25:b6:56:ae:dc:b6:08:ec:79:39:73:50:bf:73:ec:ec:7e:
         82:bf:29:a3:e0:75:5f:1e:88:a1:46:19:5e:2a:d7:20:6e:08:
         30:97:e2:ee:a2:5d:40:9a:c6:69:e1:af:48:ab:48:1c:a5:c6:
         31:40:76:95:61:be:48:9b:eb:fc:7b:67:a8:81:72:a0:05:40:
         8e:28:58:91:d7:99:a3:1e:54:c5:4a:2d:86:a4:7f:e7:91:4d:
         cb:cb:8c:e6:4a:0c:d1:b7:3e:04:e8:08:ef:92:30:48:a1:0d:
         66:d9:05:32:a6:9e:44:fd:23:56:d5:53:4f:28:d0:4f:1b:ed:
         22:df:14:32:a2:9d:c5:62:22:84:c1:31:df:4a:f4:c9:cd:43:
         9f:e3:89:07:64:8a:d9:41:04:1f:e2:9d:bb:b2:1f:6b:a5:de:
         c5:55:37:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 15:50:42 2025 by rpki-client