Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aeae4b2-e75d-37a4-bc28-3ca1ede13b68.roa
File:                     4aeae4b2-e75d-37a4-bc28-3ca1ede13b68.roa (raw, json)
Hash identifier:          78kgxXhvK3kZ0h9YCvvwjTyYhJN/dgDgXlpWGYAYBnI=
Subject key identifier:   14:33:0B:8B:4C:6B:7C:9B:91:44:D5:45:B5:65:2C:AD:31:74:FD:36
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A6DBB509D479C724366DC4C40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aeae4b2-e75d-37a4-bc28-3ca1ede13b68.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     22773
IP address blocks:        68.106.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:50:9d:47:9c:72:43:66:dc:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=ad19a4f6-5810-46d7-8762-e150a61b2270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:b9:15:20:3e:d9:32:c6:80:f0:53:9a:88:
                    af:5f:4d:e9:d5:c6:87:50:1d:51:da:f4:e7:09:82:
                    28:fa:8c:c4:6f:fa:d0:6b:55:d3:be:c5:4c:31:f2:
                    54:f7:d7:c4:3a:36:58:ee:f6:fd:86:75:7e:f3:9c:
                    39:58:f4:cd:51:ba:5b:d4:5f:3c:8b:25:d1:89:00:
                    39:6f:99:8b:2c:da:a4:7f:f2:13:60:c3:91:65:1a:
                    61:b1:83:22:30:ee:1b:76:59:75:ee:af:30:ad:17:
                    11:54:fa:0f:7d:4f:9c:07:d8:12:2b:d8:f0:aa:5a:
                    37:d4:bd:e3:81:53:82:03:a2:fd:7d:f3:59:80:57:
                    7e:07:76:92:6b:ad:34:32:22:a1:5d:ca:43:e9:20:
                    90:52:8c:38:bf:74:f3:7b:6d:e2:1f:7d:e2:34:66:
                    ca:6b:fe:5a:2c:f6:65:4c:89:c7:86:c3:0a:e1:e5:
                    30:03:b3:b4:54:cf:84:60:5d:b6:d7:cb:7b:6d:00:
                    a6:18:76:7b:20:64:45:0d:a5:78:68:a8:0c:29:24:
                    ad:31:1c:4e:e2:f4:14:ed:e1:84:bc:7c:0b:96:a1:
                    da:2e:83:bd:ba:f0:d9:72:a5:1f:6b:7f:a9:f6:22:
                    00:4d:ba:2a:1c:fa:5f:d7:be:89:1d:3c:7a:78:b9:
                    29:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:33:0B:8B:4C:6B:7C:9B:91:44:D5:45:B5:65:2C:AD:31:74:FD:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4aeae4b2-e75d-37a4-bc28-3ca1ede13b68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.106.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:ba:89:f6:bb:8d:c0:2e:8d:91:5d:e8:74:40:1c:c9:0a:2d:
         93:d6:48:be:9b:51:1b:3e:8a:6e:31:d1:85:ea:df:5c:ca:c3:
         14:2b:aa:26:d3:5a:ff:f7:4d:1b:57:3c:54:8c:28:e9:19:60:
         79:bf:7d:f6:7f:2f:1f:b4:ca:72:c4:24:67:86:e0:d0:35:43:
         69:ff:9d:2c:f8:68:36:2d:30:19:1e:25:a8:31:86:d8:e8:c7:
         d7:f4:3f:d3:6c:63:f0:cf:d8:ab:6d:86:e7:ad:0f:48:d0:3d:
         69:d2:50:42:4e:81:59:e4:40:0d:3a:b0:ed:1c:6a:32:5b:33:
         f1:eb:2f:a6:fe:e8:e3:0d:ee:64:60:b6:d5:9a:dd:3b:6b:30:
         e3:4a:41:42:55:10:c9:72:47:67:b3:82:18:7e:c7:6b:ad:8f:
         eb:b2:9b:29:6c:a6:e1:32:ca:ff:b9:f8:e3:1d:17:83:cc:12:
         53:ce:4a:1f:a6:2d:5b:18:b6:e9:e4:2b:42:ff:99:10:ac:22:
         ec:0c:6c:70:0f:74:35:12:72:a7:7f:3c:38:f3:3a:b7:78:bf:
         a6:aa:68:f8:c7:8d:82:59:64:db:2a:49:46:71:78:52:25:93:
         17:9a:19:03:ef:82:da:df:be:8e:ce:dc:92:d2:44:83:2f:e8:
         c7:20:d8:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu1CdR5xyQ2bcTEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
YWQxOWE0ZjYtNTgxMC00NmQ3LTg3NjItZTE1MGE2MWIyMjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6y5FSA+2TLGgPBTmoivX03p1caHUB1R2vTn
CYIo+ozEb/rQa1XTvsVMMfJU99fEOjZY7vb9hnV+85w5WPTNUbpb1F88iyXRiQA5
b5mLLNqkf/ITYMORZRphsYMiMO4bdll17q8wrRcRVPoPfU+cB9gSK9jwqlo31L3j
gVOCA6L9ffNZgFd+B3aSa600MiKhXcpD6SCQUow4v3Tze23iH33iNGbKa/5aLPZl
TInHhsMK4eUwA7O0VM+EYF2218t7bQCmGHZ7IGRFDaV4aKgMKSStMRxO4vQU7eGE
vHwLlqHaLoO9uvDZcqUfa3+p9iIATboqHPpf176JHTx6eLkpswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBQzC4tMa3ybkUTVRbVlLK0xdP02MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNGFlYWU0YjItZTc1ZC0z
N2E0LWJjMjgtM2NhMWVkZTEzYjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGqYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADy6ifa7jcAujZFd6HRAHMkKLZPWSL6bURs+im4x0YXq31zKwxQrqibT
Wv/3TRtXPFSMKOkZYHm/ffZ/Lx+0ynLEJGeG4NA1Q2n/nSz4aDYtMBkeJagxhtjo
x9f0P9NsY/DP2KtthuetD0jQPWnSUEJOgVnkQA06sO0cajJbM/HrL6b+6OMN7mRg
ttWa3TtrMONKQUJVEMlyR2ezghh+x2utj+uymylspuEyyv+5+OMdF4PMElPOSh+m
LVsYtunkK0L/mRCsIuwMbHAPdDUScqd/PDjzOrd4v6aqaPjHjYJZZNsqSUZxeFIl
kxeaGQPvgtrfvo7O3JLSRIMv6Mcg2JI=
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:04:13 2025 by rpki-client