Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff19c46d-4b71-334b-b859-cc0eb9b53f7d.roa
File:                     ff19c46d-4b71-334b-b859-cc0eb9b53f7d.roa (raw, json)
Hash identifier:          AN33VzaNyR1dLcblsYAT4NoYw9P3QdLAwd2ROxOFEIU=
Subject key identifier:   57:22:88:25:D0:77:8C:50:2D:E5:0D:7D:FC:2D:DF:06:2C:35:F7:4B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A40A8FD95E3BE2001EF2FB380
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff19c46d-4b71-334b-b859-cc0eb9b53f7d.roa
Signing time:             Fri 20 Jun 2025 09:32:59 +0000
ROA not before:           Fri 20 Jun 2025 09:32:59 +0000
ROA not after:            Thu 18 Sep 2025 09:32:59 +0000
asID:                     22773
IP address blocks:        70.189.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:40:a8:fd:95:e3:be:20:01:ef:2f:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 20 09:32:59 2025 GMT
            Not After : Sep 18 09:32:59 2025 GMT
        Subject: CN=65bcab2f-61ef-445d-8665-ffabdc8ceb2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b1:6b:9b:29:80:35:15:74:47:bb:e7:01:6b:
                    e2:bb:15:23:4b:cc:04:ea:19:43:a2:88:4c:fb:69:
                    c2:db:c6:78:e5:6a:94:31:cf:e4:8f:eb:b0:65:74:
                    fa:9b:e7:e3:4b:5a:57:e5:98:f3:ea:89:90:98:d1:
                    65:86:cc:44:c7:1c:a5:27:d1:01:9a:0e:80:47:0a:
                    7c:6a:1c:ed:c1:fd:d7:1c:84:16:b8:98:a1:13:ed:
                    21:8c:8f:7c:13:88:e7:f7:92:9a:f8:9d:87:38:12:
                    16:ca:54:60:a2:1f:fe:cb:90:68:76:04:0a:ad:d7:
                    bd:6d:0a:5e:a6:dd:09:c1:67:9e:49:08:47:6a:28:
                    75:7c:b5:d0:8a:fd:f0:25:b4:3c:67:ef:cf:2e:dc:
                    93:08:f0:81:36:9e:c7:4a:1e:9e:bf:25:67:d6:60:
                    db:14:d6:3d:38:23:f7:5f:4e:52:92:79:a0:eb:7c:
                    9c:52:1c:e1:af:3b:bf:22:42:e6:d3:0e:ef:76:23:
                    4d:cd:ff:a8:af:cd:a6:13:29:8c:f5:2d:fb:99:cc:
                    3e:d3:ec:48:88:d8:76:45:8c:ae:ab:83:c4:af:56:
                    d8:81:07:4f:1f:b8:1d:05:f6:b1:c4:56:57:21:4e:
                    a6:7e:79:0d:f9:dd:39:62:d1:29:d5:3f:6e:74:20:
                    0b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:22:88:25:D0:77:8C:50:2D:E5:0D:7D:FC:2D:DF:06:2C:35:F7:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/ff19c46d-4b71-334b-b859-cc0eb9b53f7d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.189.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:4d:5d:8b:2c:c8:c1:cb:d9:91:6c:81:01:39:3e:d3:18:de:
         55:47:7c:13:3b:01:2c:3d:61:7b:39:2d:9c:54:ed:3b:2f:d8:
         56:b2:cf:6a:36:50:0c:20:de:12:91:8a:d4:6d:54:0b:78:89:
         2d:35:a2:c7:51:3c:8d:9f:21:2c:de:4c:03:85:6c:5a:6c:45:
         fa:2b:b2:b1:ed:6a:42:13:e8:05:e4:1b:6f:a8:40:25:50:f3:
         21:88:4e:21:50:b6:db:a4:d9:a1:29:f3:71:6a:53:d3:07:fd:
         7e:2f:eb:2a:38:2c:ad:f2:84:e3:dc:ee:70:86:60:34:1d:33:
         82:16:5b:db:37:b7:4d:ee:87:5f:ec:90:a3:c4:6e:d0:01:d4:
         81:80:5e:35:04:c6:ab:49:a4:c2:af:b8:69:4c:a5:d3:b0:ba:
         87:dc:77:ab:3e:b2:7b:3d:dd:1b:46:85:23:e8:15:a6:8b:b6:
         14:e4:66:93:c5:95:be:0a:c7:c9:d0:68:ba:b4:24:bc:69:e2:
         24:02:f9:19:fa:71:4c:2a:d6:f3:e5:b6:68:1b:c4:3a:c4:63:
         2a:51:2d:b4:80:c8:2c:3e:34:15:59:94:ed:37:06:93:32:82:
         ee:5a:19:18:60:2a:f2:fd:6c:14:22:07:a2:d5:c7:a7:c5:be:
         47:58:f4:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpAqP2V474gAe8vs4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDYyMDA5MzI1OVoXDTI1MDkxODA5MzI1OVowLzEtMCsGA1UEAxMk
NjViY2FiMmYtNjFlZi00NDVkLTg2NjUtZmZhYmRjOGNlYjJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrFrmymANRV0R7vnAWviuxUjS8wE6hlDoohM
+2nC28Z45WqUMc/kj+uwZXT6m+fjS1pX5Zjz6omQmNFlhsxExxylJ9EBmg6ARwp8
ahztwf3XHIQWuJihE+0hjI98E4jn95Ka+J2HOBIWylRgoh/+y5BodgQKrde9bQpe
pt0JwWeeSQhHaih1fLXQiv3wJbQ8Z+/PLtyTCPCBNp7HSh6evyVn1mDbFNY9OCP3
X05Sknmg63ycUhzhrzu/IkLm0w7vdiNNzf+or82mEymM9S37mcw+0+xIiNh2RYyu
q4PEr1bYgQdPH7gdBfaxxFZXIU6mfnkN+d05YtEp1T9udCAL2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFciiCXQd4xQLeUNffwt3wYsNfdLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmYxOWM0NmQtNGI3MS0z
MzRiLWI4NTktY2MwZWI5YjUzZjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRr3MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHZNXYssyMHL2ZFsgQE5PtMY3lVHfBM7ASw9YXs5LZxU7Tsv2Fayz2o2
UAwg3hKRitRtVAt4iS01osdRPI2fISzeTAOFbFpsRforsrHtakIT6AXkG2+oQCVQ
8yGITiFQttuk2aEp83FqU9MH/X4v6yo4LK3yhOPc7nCGYDQdM4IWW9s3t03uh1/s
kKPEbtAB1IGAXjUExqtJpMKvuGlMpdOwuofcd6s+sns93RtGhSPoFaaLthTkZpPF
lb4Kx8nQaLq0JLxp4iQC+Rn6cUwq1vPltmgbxDrEYypRLbSAyCw+NBVZlO03BpMy
gu5aGRhgKvL9bBQiB6LVx6fFvkdY9Jk=
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:54:26 2025 by rpki-client