Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b7e2796-e306-3c89-a8ac-df4c7270ef89.roa
File:                     5b7e2796-e306-3c89-a8ac-df4c7270ef89.roa (raw, json)
Hash identifier:          Ok1yrHbp3pFPWxMKtJjaKngWVrGoUM9SneJlxh5Iv+M=
Subject key identifier:   A1:F3:F0:5F:80:61:2B:EE:AF:5F:6C:1F:A7:2C:C3:F9:44:B6:83:E3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F801ACFAF40D15C19D0080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b7e2796-e306-3c89-a8ac-df4c7270ef89.roa
Signing time:             Thu 01 May 2025 17:14:50 +0000
ROA not before:           Thu 01 May 2025 17:14:50 +0000
ROA not after:            Wed 30 Jul 2025 17:14:50 +0000
asID:                     22773
IP address blocks:        68.107.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f8:01:ac:fa:f4:0d:15:c1:9d:00:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:14:50 2025 GMT
            Not After : Jul 30 17:14:50 2025 GMT
        Subject: CN=a39d1482-c8eb-4e8b-9728-bfcf08784cac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:a1:1a:ed:42:95:cc:82:03:8d:27:f3:2e:a7:
                    69:a8:fd:5c:e9:24:d6:ee:43:78:5c:24:30:ef:d4:
                    dd:7b:08:3c:4e:74:be:c3:ec:1f:7d:36:d7:14:87:
                    21:b5:24:0e:57:e0:06:5c:65:22:15:48:3e:03:e1:
                    69:f1:77:6e:33:df:84:21:e7:69:29:38:5d:9a:36:
                    a7:af:94:47:47:e6:92:63:12:03:c6:1d:a6:6b:dd:
                    83:62:81:03:00:17:28:7b:73:05:64:6a:06:5f:82:
                    4c:ee:45:64:71:e6:ea:15:a6:d1:2c:4d:cf:88:fa:
                    6a:9a:d6:da:7a:fe:1c:1b:8e:83:d1:52:07:47:35:
                    34:de:b8:d7:c7:24:b7:2e:2f:51:1e:99:ea:c1:77:
                    38:bf:e5:c0:33:09:26:28:f0:ef:0d:2d:c5:39:22:
                    d2:7b:d4:6b:92:d0:06:7a:11:bd:1b:d1:0b:11:e8:
                    6f:e5:f3:c9:97:53:69:6b:28:3e:6e:ad:d5:f9:04:
                    8b:e8:dc:43:af:74:fe:61:7e:c0:26:da:15:61:5b:
                    61:c7:ea:be:d9:b6:27:69:68:fc:71:6b:fe:e9:e4:
                    d7:6e:f0:7f:11:33:2b:0d:af:59:a7:37:85:cc:c0:
                    16:36:c9:4b:54:cd:6c:55:8f:6e:96:c7:81:58:d8:
                    dc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:F3:F0:5F:80:61:2B:EE:AF:5F:6C:1F:A7:2C:C3:F9:44:B6:83:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5b7e2796-e306-3c89-a8ac-df4c7270ef89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.107.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:0f:33:77:b4:3f:37:fd:9d:ea:57:d0:67:38:77:ac:b7:37:
         ab:62:c6:97:96:ea:e1:92:fd:0b:4c:b4:af:f2:04:c6:da:36:
         5e:a6:50:18:0c:5d:6f:b2:9b:fc:e4:f7:04:0c:2f:f1:12:ea:
         ca:d9:5d:88:d0:43:66:75:1a:c7:b8:ed:7e:1d:3a:e2:90:7e:
         08:dc:6d:fb:e8:e1:ae:4a:43:07:db:06:4a:50:81:de:45:b9:
         a5:f8:ea:35:96:a3:77:83:7b:ac:13:04:d4:d3:62:c8:93:ff:
         de:f5:fb:d1:34:46:95:b1:71:b0:ed:4a:d7:8c:8b:2d:c5:a1:
         40:30:9a:da:e4:16:da:94:f0:06:5a:7e:d2:54:b5:88:d3:5a:
         5c:16:11:ad:28:9b:36:b9:37:a1:fc:64:6d:02:de:83:8f:75:
         25:9b:68:4f:a1:8b:f3:20:5c:dc:a2:15:f1:7b:54:4e:00:23:
         cd:e6:4e:79:64:b8:da:2c:30:7d:d8:56:f1:3a:f8:ce:06:34:
         2b:4e:ab:79:ba:41:3c:00:2c:c3:f2:62:aa:62:88:56:ca:91:
         59:4d:ac:79:ee:b0:6d:da:df:42:13:ea:36:e7:dc:25:a2:71:
         76:cb:66:be:60:56:3b:31:65:4b:52:ad:bb:9b:c3:6c:d4:ea:
         56:46:4e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:48:20 2025 by rpki-client