Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c8044174-479b-34b0-b021-06ece9fe0375.roa
File:                     c8044174-479b-34b0-b021-06ece9fe0375.roa (raw, json)
Hash identifier:          QPhfJOGaa4y1E7LMB/5L7O5NfaViGk3LTrmu40FX6hk=
Subject key identifier:   91:27:FC:92:5E:10:C9:19:77:8B:04:DC:27:1E:97:49:3D:1E:05:89
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3C102F9E9881E96427CF35E0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c8044174-479b-34b0-b021-06ece9fe0375.roa
Signing time:             Wed 18 Jun 2025 18:01:53 +0000
ROA not before:           Wed 18 Jun 2025 18:01:53 +0000
ROA not after:            Tue 16 Sep 2025 18:01:53 +0000
asID:                     22773
IP address blocks:        68.3.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:10:2f:9e:98:81:e9:64:27:cf:35:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 18 18:01:53 2025 GMT
            Not After : Sep 16 18:01:53 2025 GMT
        Subject: CN=94c63d8b-8c47-4306-9b64-c3154a353cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:71:45:02:45:e3:ec:25:6e:ec:88:31:02:3f:
                    fe:8b:e4:74:c3:47:5a:44:71:41:54:96:2c:17:28:
                    0d:31:e0:4e:6d:4a:2d:98:d7:77:4a:57:92:22:ef:
                    bd:77:7d:eb:5a:f6:10:83:98:13:ce:5c:4d:99:91:
                    e2:90:2d:35:b9:c1:bf:9c:c9:a6:10:cc:e4:c6:a9:
                    fd:02:e4:e8:7e:35:da:a2:dd:ea:ae:60:a2:41:84:
                    54:ea:5e:c0:98:9d:a8:07:e8:e6:75:5b:7a:83:72:
                    4c:02:1e:7d:dc:f7:16:6c:cf:5a:df:65:a6:6f:8c:
                    7a:47:18:c9:81:2a:76:c9:fe:27:f9:55:1c:75:cc:
                    44:f9:ce:61:29:d6:8d:9f:ec:44:25:bd:ae:5e:84:
                    8d:5a:11:41:a8:e8:e8:bf:13:35:ff:2f:28:f5:e8:
                    b8:68:a8:89:d2:ab:07:29:9e:12:90:1d:f9:00:05:
                    28:d9:cf:0a:a5:3c:93:fa:10:54:d3:0b:b1:19:3f:
                    86:80:dd:81:67:78:bf:30:1f:89:6b:4c:62:ea:a6:
                    17:82:d5:a1:c0:76:4c:b3:bf:f9:cb:e2:77:c1:36:
                    12:2a:2d:3e:40:ea:9d:80:e7:ff:ce:bf:a6:21:67:
                    0e:ad:1a:ce:87:ef:ad:81:18:38:25:02:df:29:1f:
                    21:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:27:FC:92:5E:10:C9:19:77:8B:04:DC:27:1E:97:49:3D:1E:05:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c8044174-479b-34b0-b021-06ece9fe0375.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.3.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d0:06:8d:06:00:2a:65:5b:0b:ef:a8:35:28:0d:45:32:ce:
         98:18:71:9e:db:2d:ef:46:b2:78:2c:df:10:51:02:1a:57:69:
         8c:58:75:1f:a2:c9:37:a2:94:9a:92:b6:1a:46:24:a2:ff:c9:
         9d:8a:f3:f3:9f:ec:07:e0:45:d3:bd:a6:be:36:92:e9:d1:a5:
         a3:85:72:ca:d3:e4:3d:aa:33:1c:2e:ec:79:ea:47:6a:fe:fb:
         c9:87:a9:ca:f2:4e:30:97:33:3d:eb:c7:68:d6:a6:cb:e1:cc:
         f9:64:d9:2d:c1:c7:be:48:be:a5:7b:94:f6:e5:c4:ac:05:09:
         04:a5:8c:2a:36:53:cc:ee:f6:95:e2:68:eb:ed:38:ae:ea:64:
         68:7f:f3:1d:b9:d1:b9:fc:7c:46:3c:35:12:e8:a1:49:43:45:
         e9:17:d8:da:42:5e:ff:72:62:7e:18:e5:09:e5:87:0b:4d:ec:
         42:45:59:6b:7b:5a:06:34:52:df:80:de:2b:bf:6b:a0:86:81:
         84:1c:01:75:98:47:47:a0:6b:2f:a8:98:ab:ef:c5:d3:d3:85:
         b6:ea:5f:b9:ea:3a:59:12:47:d6:78:eb:a6:07:1a:f7:a1:cd:
         f0:fb:22:b9:ee:a2:30:8c:e9:a2:31:91:c8:6b:d6:19:a7:84:
         46:3b:7e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:17:10 2025 by rpki-client