Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/90059a01-40ec-34d8-917a-8a196ef57339.roa
File:                     90059a01-40ec-34d8-917a-8a196ef57339.roa (raw, json)
Hash identifier:          IiXQEq5vQRixMltMPibBrPPDrTH2YqASgjJXY/xY4+Q=
Subject key identifier:   45:70:C0:C3:CF:37:17:80:78:3F:8D:83:31:EC:69:52:10:56:98:C6
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F4328584B4081CC484B1690F2E39F7980
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/90059a01-40ec-34d8-917a-8a196ef57339.roa
Signing time:             Sat 20 Sep 2025 01:00:32 +0000
ROA not before:           Sat 20 Sep 2025 01:00:32 +0000
ROA not after:            Fri 19 Dec 2025 02:00:32 +0000
asID:                     19165
IP address blocks:        204.14.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:40:81:cc:48:4b:16:90:f2:e3:9f:79:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Sep 20 01:00:32 2025 GMT
            Not After : Dec 19 02:00:32 2025 GMT
        Subject: CN=06c342fa-f126-462c-9344-1366fc3c753c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0b:6a:af:06:31:e2:7c:6f:21:db:52:d6:a6:
                    6f:12:ab:ae:6b:3b:83:b5:c0:3d:8a:4e:e9:ba:03:
                    3c:fa:41:99:23:df:e7:9c:26:37:9a:0f:52:3e:6d:
                    c6:3c:d3:c4:d8:48:e9:03:58:9e:3b:a6:b5:8e:fd:
                    38:0b:d5:bf:09:cc:16:d0:14:f3:44:35:60:02:a4:
                    69:34:6f:12:e6:95:79:7c:66:fa:3c:f7:d0:f2:43:
                    09:8a:72:90:87:b8:bc:7e:df:a0:7d:b4:57:c9:15:
                    30:39:75:ef:f5:ef:7f:fe:14:42:f1:8c:ee:bb:cf:
                    3a:0a:71:69:fe:bb:59:21:0a:3c:17:19:93:c1:f6:
                    a3:48:fe:13:b2:9d:05:68:6b:82:88:70:29:8d:15:
                    c5:ad:88:6c:31:14:aa:35:c5:bc:71:ae:7e:df:8f:
                    1f:cf:4d:83:5f:91:6a:7e:29:16:d4:e6:3c:5c:79:
                    5f:c6:3d:b7:02:2f:5c:60:b0:89:9b:ca:69:94:3d:
                    e5:0b:de:1f:2e:39:a8:28:1b:0c:15:4e:0b:70:39:
                    f2:21:28:fb:99:40:de:c0:c5:e7:9d:22:cc:2d:fb:
                    9c:fa:a4:4e:7e:bd:90:95:76:bf:8b:76:6c:49:57:
                    ee:cb:47:a4:4c:72:cf:d7:37:73:64:3e:be:c2:29:
                    00:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:70:C0:C3:CF:37:17:80:78:3F:8D:83:31:EC:69:52:10:56:98:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/90059a01-40ec-34d8-917a-8a196ef57339.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:4c:eb:37:e7:33:50:75:25:67:31:fc:5f:1a:32:67:48:57:
         a4:f4:88:15:2c:bc:7e:7e:73:9e:57:b5:8c:14:0a:46:f9:60:
         d8:b9:e9:5b:f6:42:31:f3:28:ad:8a:99:a0:bf:a4:64:09:c3:
         f3:9a:33:f8:b7:23:d7:f8:64:6e:7f:2d:cc:0c:0a:d4:3f:5f:
         20:70:e4:b0:0b:8e:cf:ad:3b:78:23:d0:fa:37:6e:97:74:15:
         59:82:37:fb:d6:93:84:7c:cb:5d:6c:b3:76:fc:dc:35:e3:c2:
         09:d5:b0:13:e5:07:68:84:e6:02:93:9b:f7:27:ff:ca:e3:1b:
         ba:75:4d:d0:87:17:f2:60:46:f8:d4:a0:0b:40:da:31:39:65:
         a5:46:7a:63:cf:2b:98:97:d4:20:94:b6:ba:39:91:0f:bb:af:
         d0:78:16:a1:ab:2a:5a:f1:f7:2f:27:cc:3c:9f:a5:c1:ac:8c:
         9f:41:dd:23:fc:d1:c1:90:db:70:ac:17:3d:05:aa:4a:39:64:
         a5:8b:81:de:e4:65:6f:6a:2c:91:3a:0c:04:32:0c:a8:49:82:
         82:92:eb:8a:6f:0c:a7:21:d4:06:a3:f8:09:13:0e:88:cf:d0:
         da:07:4c:dc:3a:7b:fb:e0:ca:b1:aa:6b:99:c4:30:f0:70:5a:
         2a:4e:02:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:22:36 2025 by rpki-client