Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9787c8b-c6db-3b15-872a-f65cb574f9aa.roa
File:                     d9787c8b-c6db-3b15-872a-f65cb574f9aa.roa (raw, json)
Hash identifier:          o+yD3gJDwiWF1n72eijlGMk0GP3Jbq4OsOJGF4Ggm9Q=
Subject key identifier:   48:6E:D4:04:AA:3A:5C:B7:82:06:A9:05:D2:A7:CF:96:D9:C9:63:03
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F8342220DAC8A00B264480
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9787c8b-c6db-3b15-872a-f65cb574f9aa.roa
Signing time:             Thu 01 May 2025 17:15:14 +0000
ROA not before:           Thu 01 May 2025 17:15:14 +0000
ROA not after:            Wed 30 Jul 2025 17:15:14 +0000
asID:                     22773
IP address blocks:        70.161.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f8:34:22:20:da:c8:a0:0b:26:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:15:14 2025 GMT
            Not After : Jul 30 17:15:14 2025 GMT
        Subject: CN=f1623934-e8d9-41b9-a28d-9fde46521a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:90:13:95:e8:96:0c:05:ba:81:38:8d:18:b2:
                    9e:7e:c6:e4:ed:80:e9:40:d2:0e:e5:35:ab:d5:51:
                    8f:0c:83:2b:83:ea:db:07:80:54:e8:f9:35:14:8d:
                    32:7f:06:a0:df:f9:5a:59:64:73:c0:5e:25:35:1a:
                    c8:5f:9b:f9:0b:3f:ad:66:04:e7:3c:ee:6f:77:28:
                    6b:7a:7c:73:f6:df:79:f4:77:a0:17:bd:c3:a7:d4:
                    1b:46:6b:85:c3:92:07:f4:bf:71:2b:06:60:ad:1d:
                    6b:30:02:9c:7e:6e:cc:58:42:6a:a3:72:63:98:19:
                    70:36:99:99:93:50:77:34:57:1c:b0:a6:2a:ce:cc:
                    36:d1:2d:1b:74:ce:a7:c7:fd:07:dc:4f:c1:67:5f:
                    e7:fc:17:3d:83:09:eb:3e:52:53:6a:2c:f6:1a:85:
                    7b:97:9a:11:51:59:5a:6a:88:7c:80:12:40:a0:fe:
                    5e:66:a3:4a:35:53:30:61:8f:9b:4d:06:c8:5b:49:
                    48:67:57:a9:72:05:cc:b1:df:ac:46:3b:69:4b:f3:
                    03:5f:ab:89:fc:1a:be:da:c6:27:f0:ca:a6:d3:c6:
                    1f:b9:b1:5f:74:33:70:06:8a:1b:a9:1f:9b:a7:ed:
                    3f:08:f4:e2:e4:ba:67:d8:03:09:fb:bb:23:62:0f:
                    8f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6E:D4:04:AA:3A:5C:B7:82:06:A9:05:D2:A7:CF:96:D9:C9:63:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d9787c8b-c6db-3b15-872a-f65cb574f9aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.161.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:40:e8:90:e6:59:e6:96:aa:e6:ba:e1:ac:2b:4a:d3:73:e6:
         3f:62:3f:bd:6e:36:db:c4:c2:1f:5a:ae:30:9e:6d:d0:2e:00:
         43:ae:9b:b1:a9:ef:33:c3:ad:7d:4f:f2:e2:78:ab:cf:df:6a:
         cf:94:e1:de:a7:2b:61:79:55:3b:56:29:78:01:4b:8e:42:23:
         36:25:b6:cb:25:2a:0a:f5:ed:4e:74:6f:ae:b5:9d:94:02:50:
         f6:a4:30:e6:59:88:e3:a7:ac:92:55:40:57:06:9b:44:af:d7:
         4c:c3:b8:69:e4:f4:0e:ef:05:b6:00:5c:45:0a:ac:5c:63:d5:
         31:15:ae:ae:e5:a9:7d:8f:e4:22:d1:a8:73:bf:8d:77:78:fb:
         92:4a:00:59:0b:1c:3c:97:61:b8:28:83:fa:6e:60:be:a5:9f:
         31:d2:9e:5a:40:0f:63:4e:88:ae:81:40:73:f7:05:17:a8:80:
         c7:8e:19:68:cc:60:d2:1e:66:95:e6:04:a9:24:a3:aa:79:5e:
         a3:4d:36:e1:52:c9:b9:42:53:84:6f:bc:e1:e6:58:fa:de:87:
         31:20:e1:86:67:5f:57:56:fc:47:85:d9:46:7a:ad:1a:6b:3f:
         c8:ed:2d:59:a2:71:a1:d7:9e:21:c3:70:b6:e2:d6:41:37:95:
         fc:46:93:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:52:06 2025 by rpki-client