Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c15012bf-e822-3eca-9b71-312d26a98187.roa
File:                     c15012bf-e822-3eca-9b71-312d26a98187.roa (raw, json)
Hash identifier:          RdQxPJgsHXWrEEvrBnbg+oNJxPX8hTjAZYN2EjnLVYs=
Subject key identifier:   94:29:E2:D2:3E:DF:53:99:EE:C2:F1:7D:D6:4D:01:C7:8C:BB:50:3F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F50D632CB77A5446B4B140
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c15012bf-e822-3eca-9b71-312d26a98187.roa
Signing time:             Thu 01 May 2025 17:08:53 +0000
ROA not before:           Thu 01 May 2025 17:08:53 +0000
ROA not after:            Wed 30 Jul 2025 17:08:53 +0000
asID:                     22773
IP address blocks:        68.9.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f5:0d:63:2c:b7:7a:54:46:b4:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:08:53 2025 GMT
            Not After : Jul 30 17:08:53 2025 GMT
        Subject: CN=64ce003a-63a5-4d99-ac92-2cf356471ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:79:ba:ba:10:8e:9d:82:f4:ae:58:e8:f5:42:
                    fa:32:96:d5:66:62:21:5c:64:71:9d:af:f4:bb:51:
                    32:df:66:d5:a9:37:f6:bf:f6:41:0f:90:02:12:66:
                    31:5e:83:2d:2f:91:bd:09:c1:41:51:3b:e3:32:97:
                    e1:cd:26:56:92:03:d9:84:98:02:be:c4:93:40:f4:
                    38:a8:a3:68:7a:05:7c:39:fb:db:5c:17:6c:c3:21:
                    8d:3b:0b:bf:97:c6:a4:6b:a5:06:4e:08:4c:d1:02:
                    1b:79:ea:93:c1:99:d9:5a:01:0b:93:88:e5:f8:1e:
                    50:1d:d8:86:62:2b:cc:65:b6:96:a7:2b:c7:b6:ea:
                    7e:71:01:58:48:f7:d9:55:99:67:55:f1:5c:fe:24:
                    37:ce:81:10:ef:d2:3b:78:17:d6:8f:f4:12:5c:90:
                    03:a7:f9:16:b1:bb:94:0b:c4:65:9d:45:6b:b0:e0:
                    1a:f5:e7:92:31:57:51:88:84:8e:d8:64:42:63:70:
                    0a:0d:29:98:f3:bd:f8:29:30:1a:d2:33:31:d0:77:
                    bd:09:10:d1:b6:c0:79:9c:d1:e0:8a:de:c0:9d:6f:
                    26:99:0f:57:e8:04:a6:bb:25:75:a2:2c:ea:2a:54:
                    55:37:5c:eb:0a:86:e1:30:e3:a4:51:9e:46:32:7a:
                    35:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:29:E2:D2:3E:DF:53:99:EE:C2:F1:7D:D6:4D:01:C7:8C:BB:50:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c15012bf-e822-3eca-9b71-312d26a98187.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.9.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:09:ac:31:3a:6c:8e:ca:86:e9:a5:ce:d7:b1:dc:d0:c1:65:
         eb:bf:83:ad:50:2b:15:43:b0:96:be:2f:b9:a7:8e:a1:76:30:
         2b:39:09:c5:b5:ad:30:e7:90:68:04:62:2a:73:e4:6d:4b:f1:
         bd:94:22:fa:e5:22:5c:7c:42:49:69:a4:4e:41:f9:a0:ec:c7:
         29:84:67:2f:51:22:91:b1:13:31:21:86:01:29:a3:64:7d:63:
         9e:27:6f:37:25:91:ec:84:da:16:b4:6f:59:41:58:c3:c5:6f:
         c9:c8:64:08:a8:f2:bc:f2:b5:9a:11:05:b9:16:7d:ca:97:7e:
         f5:78:88:e2:ea:78:e0:89:c8:47:1e:e3:0f:57:16:ab:fd:94:
         3e:9f:97:d8:b8:ea:ad:83:dc:32:8f:a4:f5:32:f9:59:cf:42:
         02:d9:0e:88:25:e9:af:76:1d:ff:92:d0:cc:cf:fa:7b:c9:dc:
         1e:78:2a:64:4f:d2:7b:21:ef:a8:a4:70:d7:04:63:4a:c7:5d:
         65:c7:8a:b7:6e:d6:82:02:87:59:2d:61:b6:1a:06:ed:0b:b5:
         1b:3f:25:14:10:4e:8f:07:e4:ab:3c:15:c8:c6:09:ad:65:51:
         5a:7a:b6:bb:7f:d2:a9:e9:f5:08:02:1f:93:bb:b9:22:19:a0:
         7d:4d:91:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 19:06:48 2025 by rpki-client