Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c14c7c82-100c-3bb7-bcb1-bd1c0a996744.roa
File:                     c14c7c82-100c-3bb7-bcb1-bd1c0a996744.roa (raw, json)
Hash identifier:          tjroq8RJWlsOhX9ZrQ4fihadxAbopewOtp40Pw1sFss=
Subject key identifier:   63:13:BC:5D:30:70:1F:D5:10:1C:49:E2:A1:B7:2F:F1:96:35:F2:25
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DFE1467D390E8CD72EF5380
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c14c7c82-100c-3bb7-bcb1-bd1c0a996744.roa
Signing time:             Thu 19 Jun 2025 10:37:01 +0000
ROA not before:           Thu 19 Jun 2025 10:37:01 +0000
ROA not after:            Wed 17 Sep 2025 10:37:01 +0000
asID:                     22773
IP address blocks:        174.72.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:fe:14:67:d3:90:e8:cd:72:ef:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 10:37:01 2025 GMT
            Not After : Sep 17 10:37:01 2025 GMT
        Subject: CN=ba4d399a-e61f-461e-8f19-42e7ec2b05ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:61:f4:ae:7a:b4:98:91:88:d0:d2:d9:7f:
                    0f:cd:2f:7b:98:d4:67:cc:23:1e:d7:34:70:43:71:
                    a1:69:b3:a2:dd:63:b0:6a:be:54:57:f9:8b:f1:a0:
                    f8:18:d7:ad:0e:1b:d6:40:a9:de:ec:e1:b2:a3:b1:
                    c1:e9:94:9d:a0:d5:f8:0d:6e:78:03:4e:e8:97:46:
                    01:64:4d:db:d3:60:4c:81:41:b8:43:e9:10:a2:1a:
                    2c:8f:90:dc:07:6b:2e:e4:9b:01:3a:ab:43:e0:a2:
                    38:8b:28:36:15:bc:53:5c:66:3a:52:3a:c9:b8:18:
                    8a:2f:77:09:91:17:df:8d:21:d7:cd:94:27:c8:6e:
                    36:08:4d:7b:0c:b8:eb:08:3f:67:e6:ef:44:d9:25:
                    1b:9e:89:2b:2a:63:2d:52:c2:f8:1d:d2:a1:a2:c9:
                    d2:0a:67:aa:9d:15:48:8b:b1:17:80:82:68:39:a7:
                    8d:04:93:f6:85:1c:7f:6e:a0:21:1d:83:ea:1a:3e:
                    43:ed:9b:e2:f7:71:ba:fe:20:5b:c9:c5:2b:bd:4d:
                    5a:a8:1c:b1:be:f1:ca:88:46:ff:70:12:1a:23:09:
                    62:eb:99:a6:5c:d4:7f:66:af:a4:4d:fa:de:41:85:
                    65:5d:02:e3:4b:3b:f9:4a:cc:20:22:a2:d3:d2:37:
                    40:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:13:BC:5D:30:70:1F:D5:10:1C:49:E2:A1:B7:2F:F1:96:35:F2:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c14c7c82-100c-3bb7-bcb1-bd1c0a996744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.72.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:49:ff:d5:d6:59:48:5c:f3:94:e7:c5:83:1d:30:fd:ad:99:
         1e:7e:3f:12:46:7c:7e:ae:64:47:f8:70:7b:fb:59:d4:0a:f7:
         cd:b5:bc:b6:f3:6c:51:83:db:d1:43:c5:f5:6f:01:9e:7a:c6:
         54:03:8b:18:bd:f9:d2:67:1f:3d:14:24:76:9d:eb:95:ae:d4:
         b6:17:cd:d5:53:c3:a3:00:e2:47:b0:07:46:e3:10:e8:58:0f:
         b1:78:9d:c4:05:44:6b:68:13:f9:ef:50:e5:77:50:11:44:2e:
         60:fd:c2:f6:22:6e:e5:6f:86:9f:e6:1a:63:21:d8:18:a4:fe:
         bb:fe:4e:b5:a2:98:9d:17:e5:af:f9:c2:e0:56:ae:b6:17:d4:
         54:07:8d:28:18:4a:88:46:5a:27:cf:2d:ef:c8:a5:d2:47:5c:
         37:3f:e8:86:a3:de:3f:a3:cc:15:0d:2b:c5:7f:d0:ee:b7:ef:
         c9:d1:c8:fd:ea:02:16:8c:a5:75:42:43:55:88:cf:56:83:17:
         23:c5:e3:96:f2:cf:12:7e:54:22:ab:22:3c:5f:fb:a6:98:5c:
         8a:1b:65:61:72:87:60:c7:39:12:48:12:b4:9f:56:6c:96:29:
         19:3e:ca:e8:b7:57:14:02:db:ef:d6:82:ed:5a:51:70:88:c4:
         64:41:a1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 02:45:08 2025 by rpki-client