Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d005ade9-61ad-35e8-9b93-a9202d05442d.roa
File:                     d005ade9-61ad-35e8-9b93-a9202d05442d.roa (raw, json)
Hash identifier:          dRUjgYA8qs3+m6sPXZCfQSzhiMcETyMCr4n1buNUhSE=
Subject key identifier:   46:DB:DA:2E:07:10:C9:B5:CC:D3:4E:2C:1D:83:CC:27:27:55:04:53
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3990884FB4048DB812D60800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d005ade9-61ad-35e8-9b93-a9202d05442d.roa
Signing time:             Tue 17 Jun 2025 20:33:03 +0000
ROA not before:           Tue 17 Jun 2025 20:33:03 +0000
ROA not after:            Mon 15 Sep 2025 20:33:03 +0000
asID:                     22773
IP address blocks:        68.2.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:39:90:88:4f:b4:04:8d:b8:12:d6:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 17 20:33:03 2025 GMT
            Not After : Sep 15 20:33:03 2025 GMT
        Subject: CN=23b551e2-3c7f-46d3-83a1-a3600a6f52d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:54:74:3a:c8:c9:87:46:e2:96:b9:38:6d:4f:
                    6e:fe:10:3d:c5:15:c7:21:a0:64:37:8c:95:3c:d4:
                    dd:3d:64:7c:32:34:d5:de:75:78:66:58:33:97:93:
                    99:ef:9c:ce:03:cd:80:ea:21:06:0e:20:68:8d:19:
                    05:34:7a:ae:66:ca:b3:1d:b7:ff:1e:8b:1b:14:d5:
                    21:30:72:b8:fa:54:a7:df:4c:a5:7d:fe:69:f6:42:
                    ff:72:8a:8d:b6:f7:c1:dc:18:82:b4:9c:80:9b:de:
                    f9:ce:12:7b:6e:5b:8c:54:ab:6a:b3:cc:24:4b:60:
                    45:a5:b2:7e:4b:e9:36:bb:7a:82:b9:2d:0f:12:bd:
                    f8:2d:57:e5:00:a6:ad:82:a7:cd:a6:a2:c5:48:06:
                    31:1a:bf:6e:cd:3d:bd:b0:a7:92:70:0f:6b:a3:49:
                    b0:5c:16:77:00:fe:89:4c:b2:77:32:39:9a:7d:22:
                    3f:04:93:8a:9f:05:f0:cb:1d:a3:00:c7:13:8b:0c:
                    f5:51:2b:c5:35:3e:8e:c8:cf:31:1b:e0:5b:35:b7:
                    97:3f:1a:b2:9e:1b:38:a9:e1:13:01:b8:ee:fe:1c:
                    39:9f:10:e7:8b:3b:a1:28:4f:88:08:c3:dd:76:fc:
                    8a:32:f8:13:20:ca:e4:83:62:fa:b6:09:7d:c8:89:
                    00:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:DB:DA:2E:07:10:C9:B5:CC:D3:4E:2C:1D:83:CC:27:27:55:04:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d005ade9-61ad-35e8-9b93-a9202d05442d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.2.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:dc:6f:64:76:05:19:0e:ea:77:0b:a2:dd:40:23:c1:40:6e:
         d0:67:dd:47:30:b4:4e:28:fb:5c:ee:b5:b7:18:f1:04:f4:d6:
         b2:d9:ef:d3:38:41:3c:c0:de:4a:8d:f9:29:8f:a2:fe:f1:9f:
         ec:08:3f:70:3b:17:de:fa:22:ab:46:2e:09:3d:5a:98:bc:7a:
         cc:02:de:32:80:89:e0:91:c3:b3:50:9f:a3:6c:7a:af:37:48:
         bf:47:16:0e:f9:df:f9:bb:47:1a:02:08:63:75:4d:01:1b:0e:
         a8:be:f3:1e:79:3d:ae:2c:d4:47:1f:f3:1e:10:7d:65:16:33:
         87:68:b6:b2:fb:90:19:5c:82:9f:ca:9d:26:5c:21:b7:41:61:
         c9:c3:e1:2f:2e:dc:93:b5:0c:13:7c:93:20:c3:21:f3:64:b3:
         58:3e:48:e8:88:42:aa:35:ba:e6:16:f7:ba:0f:8b:fa:f2:23:
         38:27:11:50:25:60:91:46:e4:16:e2:63:1b:1a:f5:e6:39:ce:
         26:9a:cc:f7:27:ba:8e:fb:8c:05:94:82:04:27:8b:82:16:20:
         33:0f:4f:8b:86:e1:67:ff:de:2b:02:78:a3:34:39:9a:03:66:
         b9:8f:13:05:fd:d3:17:16:14:21:6c:06:5a:b7:a1:f9:b7:65:
         bd:ab:71:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:12:23 2025 by rpki-client