Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2ff1b13-522f-3b4b-a9aa-5c514ce429a8.roa
File:                     d2ff1b13-522f-3b4b-a9aa-5c514ce429a8.roa (raw, json)
Hash identifier:          BpgxzkgUkvtHfMdjeF7GtgdXmmXJmprE4eJLxXWH7Aw=
Subject key identifier:   B1:F4:21:C7:1E:4B:8F:F6:A2:80:D5:A0:D3:5A:AB:6D:10:3C:19:00
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F5340A225BEEBA713EC480
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2ff1b13-522f-3b4b-a9aa-5c514ce429a8.roa
Signing time:             Thu 01 May 2025 17:09:11 +0000
ROA not before:           Thu 01 May 2025 17:09:11 +0000
ROA not after:            Wed 30 Jul 2025 17:09:11 +0000
asID:                     22773
IP address blocks:        68.14.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f5:34:0a:22:5b:ee:ba:71:3e:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:09:11 2025 GMT
            Not After : Jul 30 17:09:11 2025 GMT
        Subject: CN=30a57ebd-4b53-48cb-98eb-207f6c8c0d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ba:87:03:bd:68:57:aa:49:be:68:0d:7a:a4:
                    54:97:c2:5f:8a:be:e9:07:f9:02:95:ff:c6:8e:74:
                    17:a7:17:47:55:9c:5e:d6:7e:10:1a:62:ee:63:b7:
                    1e:9e:24:f6:33:c9:66:58:43:22:28:bf:55:bd:9e:
                    7c:57:bf:d2:2d:b0:da:3d:df:65:c7:45:de:fc:e4:
                    8b:33:00:de:d6:b5:c7:57:5e:f3:b8:63:93:86:e8:
                    b5:4e:ee:1b:8a:a8:f7:9d:44:a3:dd:c3:4b:f0:4f:
                    ca:1b:d1:60:45:28:74:5b:c8:76:05:e7:5c:9a:71:
                    0f:6d:02:20:bd:27:ee:6e:a3:75:57:57:69:4d:2d:
                    8f:90:88:6e:f9:70:22:b1:08:18:4f:d8:c2:7d:81:
                    11:13:e8:2d:72:92:98:35:01:81:a1:70:96:df:48:
                    6b:ee:80:5f:e4:c0:a1:fe:7c:b0:cf:1f:87:09:89:
                    7a:59:54:ed:2d:ad:14:1f:93:54:10:e2:d5:90:80:
                    a1:95:c7:5f:93:39:73:58:b3:ce:5e:31:37:6a:44:
                    37:10:84:87:35:35:0e:60:2a:a7:8b:86:d9:21:cf:
                    eb:d2:12:f9:fd:f7:52:43:19:40:1e:8d:6a:2a:36:
                    cb:4a:47:29:e3:24:72:0c:c6:e1:13:b5:fe:6d:99:
                    a8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F4:21:C7:1E:4B:8F:F6:A2:80:D5:A0:D3:5A:AB:6D:10:3C:19:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d2ff1b13-522f-3b4b-a9aa-5c514ce429a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.14.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:23:9c:de:80:24:29:47:22:63:17:87:c5:02:a8:7b:2d:40:
         49:cf:7c:ad:d9:bb:6f:81:74:20:80:26:58:03:3d:f6:44:76:
         c9:d7:39:15:d3:fa:5d:4a:f5:7a:7d:ec:b7:b9:02:6a:05:de:
         37:ba:f4:52:c5:23:65:9d:c0:11:28:23:c4:de:d1:6f:24:a6:
         29:03:a1:a6:79:2d:54:0f:00:82:e5:f1:0c:e7:b9:71:d8:77:
         fd:5f:cd:9a:1b:83:57:3d:02:fc:8f:e5:c7:5f:4d:28:92:47:
         4d:56:7b:06:25:60:1c:0f:35:54:44:f1:a1:c5:fe:4a:e0:97:
         79:25:ca:92:23:98:41:d0:5b:2a:e6:18:c2:ab:40:15:90:dc:
         7f:5f:04:3a:65:db:72:9e:57:24:45:d9:bc:41:cd:ab:9a:db:
         7e:a4:89:76:f7:1f:4d:33:24:fe:84:bf:4d:e5:a6:ba:2a:4e:
         05:0a:86:a8:a2:43:90:02:21:6c:cd:73:13:fa:8a:ae:ad:6d:
         cf:be:28:f5:8e:28:90:57:81:1f:cb:68:f1:d9:e2:61:95:7e:
         72:71:4e:1d:70:10:4c:02:60:3a:32:7a:0e:da:55:9b:e3:07:
         c5:f5:85:05:01:54:e0:52:d4:d7:b6:c3:8a:ea:5c:74:2f:8d:
         fb:aa:85:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:45:21 2025 by rpki-client