Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db1b2131-1f33-3ee5-b0bd-3a64c6331fc2.roa
File:                     db1b2131-1f33-3ee5-b0bd-3a64c6331fc2.roa (raw, json)
Hash identifier:          WWDp6nSDZ69yeWyz3S01Kk5UYLRsoZ9mysNjpyHQTSs=
Subject key identifier:   D4:72:BD:36:01:45:30:DE:3A:EF:1F:3B:B4:0D:BA:6C:C5:1E:EF:E7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DFC706A359DA9F6411B6F80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db1b2131-1f33-3ee5-b0bd-3a64c6331fc2.roa
Signing time:             Thu 19 Jun 2025 10:33:42 +0000
ROA not before:           Thu 19 Jun 2025 10:33:42 +0000
ROA not after:            Wed 17 Sep 2025 10:33:42 +0000
asID:                     22773
IP address blocks:        98.161.93.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:fc:70:6a:35:9d:a9:f6:41:1b:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 10:33:42 2025 GMT
            Not After : Sep 17 10:33:42 2025 GMT
        Subject: CN=5b1eac7d-ec73-46be-986d-f065f114dbe5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d6:90:fb:c9:a0:b8:4b:c0:08:e8:b5:0c:55:
                    f2:91:d7:e5:4c:48:85:55:9d:67:f6:cb:cb:9d:3d:
                    57:22:a7:5d:04:df:bf:79:e5:d8:a1:b9:85:88:32:
                    90:d3:21:97:ab:5e:dd:d9:18:6a:5a:6d:d4:51:b8:
                    02:fa:32:81:49:84:4a:33:c6:f1:8e:9a:b5:b5:8c:
                    4d:5c:4b:5c:d8:35:7a:0a:37:db:04:2c:f8:19:cc:
                    c5:a9:69:f0:47:99:ee:55:d0:31:b4:0a:ef:4f:f5:
                    ec:8b:e5:78:64:62:2d:92:e9:1c:a6:2f:80:64:26:
                    66:c4:3a:f7:c7:a5:11:99:16:35:15:c2:75:9e:52:
                    d1:d4:48:77:76:72:15:89:74:58:0e:ba:bb:f9:ce:
                    8f:9c:13:b0:d8:3f:72:de:c8:f6:01:2b:85:07:2c:
                    a8:a5:84:85:bb:fb:82:cc:f0:cb:25:32:45:bd:75:
                    0c:0b:97:7f:e0:c0:c3:46:42:9d:0e:fe:42:df:89:
                    62:f8:1d:d2:05:aa:62:5e:90:30:2d:1c:d4:f1:11:
                    ff:76:85:26:74:d1:0c:90:41:7e:05:c1:09:1b:5a:
                    ad:ef:ed:2c:1d:a0:03:7c:62:cb:6d:46:ae:63:eb:
                    68:a5:24:b6:5c:bf:ce:13:eb:d0:50:01:77:d7:92:
                    28:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:72:BD:36:01:45:30:DE:3A:EF:1F:3B:B4:0D:BA:6C:C5:1E:EF:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/db1b2131-1f33-3ee5-b0bd-3a64c6331fc2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.161.93.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:e8:63:20:33:b9:fe:85:06:f2:9d:bd:ef:b8:91:ca:fc:a7:
         6a:2f:4b:63:5a:66:43:9b:a7:75:b1:83:81:23:9b:9e:c7:9e:
         ea:3d:05:c7:1d:d3:80:3d:4b:0e:ad:90:91:31:c9:a5:09:9b:
         1c:d3:6c:a0:83:18:78:16:84:19:84:f9:91:9b:fb:3a:bb:8f:
         91:d6:09:9f:3f:8f:e4:b3:1b:2e:3a:51:ae:f0:ca:fc:6e:64:
         27:d5:51:1c:d0:83:54:6f:97:af:57:d5:c6:77:b9:a0:af:74:
         d0:02:f5:d7:24:af:fa:94:b7:64:5b:c1:a5:e3:a4:b0:ea:ac:
         5d:f2:3e:77:52:ab:20:e1:ac:e2:8c:21:81:a8:91:1a:3c:2f:
         39:11:9b:7d:a0:ef:27:b2:a6:5b:a6:32:38:a1:f0:8e:32:82:
         e3:83:da:00:90:f4:52:1d:09:de:bb:07:56:03:32:b4:e2:3c:
         2f:2c:b5:65:68:3c:c3:22:81:f6:ad:5e:17:f0:9c:09:a4:4b:
         a7:06:43:81:aa:5c:cf:0d:71:ef:7e:47:51:87:76:ba:8f:bd:
         56:d4:40:4c:bd:04:60:99:c5:a1:88:b3:bf:19:2a:58:27:84:
         e7:a1:ca:f3:ae:8c:84:ff:02:bd:d9:12:99:b4:b5:de:96:e0:
         f0:8e:de:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 12:59:35 2025 by rpki-client