Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b55d5e6a-65d6-31e0-91a6-9aa5c907bd45.roa
File:                     b55d5e6a-65d6-31e0-91a6-9aa5c907bd45.roa (raw, json)
Hash identifier:          El2qpJ3Z4ZWyzxW2d5Ba+t13dq6a0KKa702x3hMo2u8=
Subject key identifier:   72:F7:F5:08:0B:47:F6:84:D3:AD:D7:67:0D:E3:E3:93:12:91:57:2A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DD5C440549E998B1C84C980
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b55d5e6a-65d6-31e0-91a6-9aa5c907bd45.roa
Signing time:             Thu 19 Jun 2025 09:15:47 +0000
ROA not before:           Thu 19 Jun 2025 09:15:47 +0000
ROA not after:            Wed 17 Sep 2025 09:15:47 +0000
asID:                     22773
IP address blocks:        68.106.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:d5:c4:40:54:9e:99:8b:1c:84:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 09:15:47 2025 GMT
            Not After : Sep 17 09:15:47 2025 GMT
        Subject: CN=d1735923-c076-4b8b-bef4-7c0b26774440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:37:30:06:8f:4f:b5:fc:b3:dc:f1:5c:1e:21:
                    a7:c5:8c:7b:04:dd:1b:d4:b8:31:25:25:d2:b3:5e:
                    d6:16:67:a6:6f:6a:56:a7:2b:e3:70:db:97:23:46:
                    04:14:05:eb:72:cb:5b:f8:36:c1:1b:48:61:d9:b9:
                    05:f0:19:a3:67:42:70:39:f8:4b:62:88:8f:71:bd:
                    60:24:58:ff:77:c3:38:4a:ea:5b:28:6d:98:f0:40:
                    18:44:b8:08:8e:ac:cf:c4:a1:d9:55:5d:33:8f:a1:
                    ad:7f:d7:e9:76:f0:bd:03:10:19:7e:57:78:0a:e6:
                    6a:75:c1:98:88:23:13:67:55:28:0b:54:42:13:8b:
                    9d:c2:fa:92:b5:ed:7a:fa:1c:b5:f0:28:15:1a:e4:
                    61:26:47:cf:03:02:03:29:44:59:dd:9b:ed:48:35:
                    4d:5b:48:f5:10:d3:b0:9d:5b:40:08:86:48:f4:fb:
                    aa:39:54:ec:c0:ac:23:a1:1a:78:07:a9:13:12:54:
                    b1:ed:0d:e4:12:5f:98:20:c7:b9:2c:58:fb:33:9b:
                    7e:f0:7e:e5:ce:5c:21:ce:b2:52:50:08:a4:9f:27:
                    47:22:33:6e:08:73:ae:0b:9f:2f:3e:bd:ef:ef:52:
                    6e:34:76:f8:40:21:c5:e9:73:56:81:5d:c3:8d:46:
                    44:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F7:F5:08:0B:47:F6:84:D3:AD:D7:67:0D:E3:E3:93:12:91:57:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b55d5e6a-65d6-31e0-91a6-9aa5c907bd45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.106.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:cb:a9:5f:76:f6:d1:e5:1a:cc:ff:24:c7:71:25:1a:b1:a5:
         ce:81:c6:1b:58:41:7e:af:cf:83:6e:1e:20:62:37:6b:7e:d7:
         8e:5f:e6:f0:0f:26:15:36:5f:2e:89:6e:b9:8b:2a:1e:ff:a6:
         5c:61:f3:0b:80:26:f3:59:f5:f6:1b:ab:60:51:9b:7a:6a:84:
         36:4b:03:34:47:f6:e9:26:d1:fd:a2:f0:aa:35:a4:0e:22:bf:
         74:bd:d4:2b:e8:5a:5d:1a:e2:d1:7e:a5:62:87:01:41:16:3e:
         9c:c4:7f:77:54:b7:48:fc:f6:9c:04:40:93:26:68:42:a6:01:
         88:8d:db:ab:1d:85:5d:c8:83:3f:8a:0d:1e:bd:bc:a4:ab:5c:
         b5:2f:dc:19:31:f4:33:f5:87:84:82:d9:ab:42:19:86:55:89:
         a4:fd:ae:e5:a2:b4:1e:f6:4c:bf:e4:9c:f2:64:fe:5d:67:7d:
         21:3c:9c:a0:72:67:bb:02:bb:ea:fd:08:09:ab:1a:e4:60:59:
         42:3c:3f:a6:69:e0:62:6a:23:53:2e:d1:a3:e1:76:2a:15:2c:
         b3:6f:71:00:6e:48:21:71:53:32:28:8b:24:d4:f1:21:1e:90:
         dd:d8:99:b2:fb:54:f0:5c:da:cc:5f:fc:8c:d1:c2:39:bf:cc:
         0d:82:36:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:57:52 2025 by rpki-client