Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c30345d-07b9-39a0-b15d-12d30655ec47.roa
File:                     4c30345d-07b9-39a0-b15d-12d30655ec47.roa (raw, json)
Hash identifier:          ph2mlb9fEiZN4Df71w2YI8jOqXb3wKviSvJ7UGSCkxc=
Subject key identifier:   AF:FA:C9:B2:E5:D0:24:D3:26:C2:BE:36:BD:4F:27:B3:71:FA:10:BC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A03A570F2981CDF6043E3DF00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c30345d-07b9-39a0-b15d-12d30655ec47.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     22773
IP address blocks:        70.191.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:70:f2:98:1c:df:60:43:e3:df:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=35f1c6d2-c435-44f2-9a95-43a29b89d733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:5d:80:c5:dc:85:f5:d0:81:40:64:0e:8a:7f:
                    4f:9d:e8:db:34:7f:c1:17:d6:c2:73:ed:99:ab:15:
                    71:fd:67:ba:f9:7f:0a:06:c8:26:2c:54:d6:dc:40:
                    d5:dd:fe:8e:f3:e1:af:50:05:a0:38:3b:82:44:2f:
                    56:48:50:2f:64:e3:0f:70:b2:d0:7a:d8:57:ee:c2:
                    91:44:bf:96:ff:80:0b:d4:dc:2a:a5:28:43:df:2c:
                    d3:f1:25:3c:4a:b3:e3:de:4f:31:e4:cb:48:05:d2:
                    3f:82:8b:41:22:f5:54:bb:07:09:e7:36:f3:10:b9:
                    45:1e:15:3d:e4:02:71:a2:10:66:51:6f:30:c0:c1:
                    59:e6:55:9e:25:c3:40:cd:9b:40:ae:ef:db:32:4c:
                    a1:87:8c:44:72:50:5a:a9:b6:98:bc:de:d8:b5:3c:
                    26:9c:51:cc:62:75:20:01:ef:f2:e0:41:96:85:70:
                    82:77:b9:d3:d9:c4:d9:c7:04:29:d4:47:9c:a6:8c:
                    d0:15:3c:db:f9:c2:ad:64:40:68:99:1b:66:80:be:
                    c4:ac:6a:38:98:fe:64:8a:6b:64:11:31:80:3b:1b:
                    36:6f:76:f7:f1:4a:e4:d5:fb:0b:6f:61:86:11:d0:
                    bc:31:8e:02:88:45:a9:1b:7f:ca:6e:71:1e:bb:6b:
                    1f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FA:C9:B2:E5:D0:24:D3:26:C2:BE:36:BD:4F:27:B3:71:FA:10:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c30345d-07b9-39a0-b15d-12d30655ec47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.191.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ba:78:3a:64:80:22:03:bb:54:b9:a0:71:e0:53:4f:2f:d2:
         22:60:f6:2a:ec:8b:ba:ff:26:7a:9c:15:a5:d4:a0:73:b6:55:
         d0:d2:0c:e3:a3:ff:2c:34:e2:e9:25:3a:b6:3f:65:bb:e2:d3:
         90:53:c9:78:a3:ed:77:15:d9:fb:32:f0:f9:b4:69:b3:2c:d8:
         24:85:2f:71:6b:23:f2:ff:e5:e7:16:80:9f:a7:86:bb:02:bf:
         ef:71:19:d2:25:91:19:c5:29:4b:fe:8a:4e:53:3f:83:c5:d9:
         db:6a:5a:2b:17:9a:20:e4:ba:de:31:4e:4b:5f:e9:7f:0d:0a:
         98:cb:a9:ee:8e:11:b8:8b:b9:85:1c:5d:1b:91:5a:ef:60:18:
         b8:c0:42:6a:26:25:3f:e3:3e:88:95:d3:9c:fd:8f:5f:dd:9b:
         8f:c8:fb:66:2b:c5:21:35:a2:8e:ca:70:fa:8e:0a:06:d9:d7:
         0b:ca:af:36:3c:16:a7:4c:c9:e9:42:ed:1e:16:82:2c:31:74:
         05:5c:65:3c:b9:0e:14:29:15:e8:75:34:b8:eb:1e:74:79:92:
         c7:4e:3d:57:67:96:59:f5:dc:17:a1:92:85:a2:b4:76:1d:f2:
         83:b1:e2:99:70:42:2e:2f:ac:af:fb:a2:55:2d:95:ea:5d:d0:
         72:bc:a1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:03:48 2025 by rpki-client