Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b7409ed8-ffcd-3061-b6f1-7d0c6379264c.roa
File:                     b7409ed8-ffcd-3061-b6f1-7d0c6379264c.roa (raw, json)
Hash identifier:          jGxWw0JsLnkvaLPr4uNgaSOh3+/r3Fk11+Gh7dgWylc=
Subject key identifier:   58:BB:DA:51:76:C0:31:D3:66:98:0D:4A:F4:E9:F5:ED:BB:4A:01:AE
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584ACCA68DBA45351380F7F838C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b7409ed8-ffcd-3061-b6f1-7d0c6379264c.roa
Signing time:             Sat 09 Aug 2025 13:00:41 +0000
ROA not before:           Sat 09 Aug 2025 13:00:41 +0000
ROA not after:            Fri 07 Nov 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        68.227.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cc:a6:8d:ba:45:35:13:80:f7:f8:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug  9 13:00:41 2025 GMT
            Not After : Nov  7 14:00:41 2025 GMT
        Subject: CN=e42a481c-6773-4b61-9cd2-09f1d458b177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:36:7d:6f:81:a9:17:04:5c:c5:90:18:f6:1f:
                    39:2b:c8:0c:f1:7b:2e:df:00:f9:d9:f5:0d:74:02:
                    66:8f:94:b4:18:a5:a1:5d:3f:7d:e7:8f:6b:2f:40:
                    f9:b6:2b:bb:3b:6d:dc:70:75:3d:e7:ed:79:3b:98:
                    90:7a:6f:57:d6:fb:f5:98:8b:24:9b:85:9e:90:10:
                    24:fb:fd:33:fd:af:7b:17:06:6e:e8:de:d0:6c:df:
                    70:11:14:25:d7:45:5d:26:5d:ba:e6:e2:d6:5d:e4:
                    85:9f:62:f9:78:9d:ab:73:65:b6:78:f1:d6:2d:15:
                    6d:f7:62:d0:fa:2b:c7:76:27:40:d1:d8:89:b3:1c:
                    be:0e:e6:c4:c1:34:97:58:4a:5b:63:52:49:bb:98:
                    84:bb:aa:eb:a2:e0:48:ee:21:f9:52:3f:60:0d:5e:
                    59:a9:64:f8:2a:a5:20:13:e0:66:8a:d1:0b:b1:9d:
                    04:9e:71:f9:cc:3e:a3:60:cb:0c:c2:27:94:e5:50:
                    59:32:46:0b:9a:e0:37:8a:13:2d:c1:40:07:92:e7:
                    e1:c4:64:72:62:d6:a2:17:13:b9:ef:9e:c0:3f:37:
                    9e:d2:0c:bc:76:01:17:09:d3:90:a8:4f:fb:6d:a5:
                    10:cc:65:42:c3:22:86:7e:6e:64:7e:bc:59:d1:b5:
                    d8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BB:DA:51:76:C0:31:D3:66:98:0D:4A:F4:E9:F5:ED:BB:4A:01:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b7409ed8-ffcd-3061-b6f1-7d0c6379264c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.227.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:20:0d:7f:18:97:9f:ed:b1:49:47:ab:ef:d1:99:00:78:69:
         88:32:55:1a:57:d1:ce:17:9b:18:20:5c:32:98:f1:a2:21:24:
         24:fa:b5:a0:eb:9b:dd:1b:fe:65:be:ab:c8:7a:6c:bf:16:9c:
         ba:c3:db:d7:51:e2:10:d7:82:6e:38:68:94:fd:02:00:c5:56:
         fc:9a:42:d7:2a:81:d4:c0:63:1e:47:78:78:04:d5:8d:65:a8:
         29:01:3b:4b:60:8e:24:09:23:8c:92:d0:4f:b4:24:66:83:ad:
         5c:6d:2d:14:cc:41:22:d0:32:25:96:3a:46:29:e6:49:f7:fe:
         45:a8:c1:db:1f:0c:92:c2:ab:9b:af:ca:1f:c5:5f:a0:3c:40:
         60:c4:18:d4:b6:09:5a:dd:47:06:24:5b:b1:d7:22:5e:9e:f5:
         b7:76:d2:07:3b:3e:f1:e3:92:f2:a8:52:24:4b:c9:b9:53:58:
         7f:b5:2c:39:53:f3:ff:18:7b:9e:77:43:7a:22:46:60:88:cb:
         82:27:33:da:49:c6:00:b5:13:2a:35:9e:a5:02:58:99:20:b9:
         1c:d8:0a:21:6c:d4:b2:ea:c8:45:cd:e7:ae:67:f4:a8:6e:1e:
         4c:f3:99:d9:93:8e:20:28:8a:d3:76:ab:f9:2a:57:04:27:13:
         d6:48:1f:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMpo26RTUTgPf4OMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk
ZTQyYTQ4MWMtNjc3My00YjYxLTljZDItMDlmMWQ0NThiMTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDZ9b4GpFwRcxZAY9h85K8gM8Xsu3wD52fUN
dAJmj5S0GKWhXT99549rL0D5tiu7O23ccHU95+15O5iQem9X1vv1mIskm4WekBAk
+/0z/a97FwZu6N7QbN9wERQl10VdJl265uLWXeSFn2L5eJ2rc2W2ePHWLRVt92LQ
+ivHdidA0diJsxy+DubEwTSXWEpbY1JJu5iEu6rrouBI7iH5Uj9gDV5ZqWT4KqUg
E+BmitELsZ0EnnH5zD6jYMsMwieU5VBZMkYLmuA3ihMtwUAHkufhxGRyYtaiFxO5
757APzee0gy8dgEXCdOQqE/7baUQzGVCwyKGfm5kfrxZ0bXYwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFi72lF2wDHTZpgNSvTp9e27SgGuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjc0MDllZDgtZmZjZC0z
MDYxLWI2ZjEtN2QwYzYzNzkyNjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAROMEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACkgDX8Yl5/tsUlHq+/RmQB4aYgyVRpX0c4XmxggXDKY8aIhJCT6taDr
m90b/mW+q8h6bL8WnLrD29dR4hDXgm44aJT9AgDFVvyaQtcqgdTAYx5HeHgE1Y1l
qCkBO0tgjiQJI4yS0E+0JGaDrVxtLRTMQSLQMiWWOkYp5kn3/kWowdsfDJLCq5uv
yh/FX6A8QGDEGNS2CVrdRwYkW7HXIl6e9bd20gc7PvHjkvKoUiRLyblTWH+1LDlT
8/8Ye553Q3oiRmCIy4InM9pJxgC1Eyo1nqUCWJkguRzYCiFs1LLqyEXN565n9Khu
HkzzmdmTjiAoitN2q/kqVwQnE9ZIH4I=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:52:23 2025 by rpki-client