Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6bbbd710-0b4d-329c-800d-2e5c4fe3788e.roa
File:                     6bbbd710-0b4d-329c-800d-2e5c4fe3788e.roa (raw, json)
Hash identifier:          My3JU7SGezO6tTTMhYSon+F5OWZxKm5/AfRqZd6G1V8=
Subject key identifier:   0A:89:44:DD:40:65:28:58:13:16:B8:E0:3B:49:CB:07:65:C8:1D:F1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A96360B1572F4AB8D52CC2020
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6bbbd710-0b4d-329c-800d-2e5c4fe3788e.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        24.253.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:0b:15:72:f4:ab:8d:52:cc:20:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=92d8fa89-c948-43a8-8e75-b4fc65302c27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fd:58:2a:59:90:64:3d:01:8c:a0:0f:de:b3:
                    92:d1:e3:40:f9:a3:30:bb:4e:11:b5:6b:07:65:52:
                    a9:82:95:50:40:13:43:82:60:f6:ee:d1:66:60:45:
                    67:9d:e0:ea:fd:52:30:e7:a8:b8:5e:5c:3e:cd:56:
                    b1:68:9d:d5:38:52:f0:b5:67:12:a8:14:2a:90:9a:
                    ab:35:63:c9:38:16:27:f5:e6:75:08:7b:aa:ba:11:
                    ed:2a:68:b0:26:e3:a0:ec:ed:cd:7e:12:d1:cb:b2:
                    2f:b1:91:64:a3:3c:ab:59:18:7a:76:1a:64:c5:4a:
                    84:6e:af:a5:cb:d2:bb:e4:ec:67:5b:6a:07:31:c4:
                    40:87:ae:1d:02:50:23:fa:7f:d3:32:43:ee:77:9e:
                    1b:6a:89:8a:03:e5:cf:ca:94:24:13:49:e4:b0:e3:
                    63:26:74:4f:e8:61:6d:46:fd:7e:71:fd:cf:18:01:
                    1e:7f:39:96:af:a0:dd:31:b7:d1:b2:f4:19:80:a7:
                    07:89:36:2b:c3:be:0a:52:a5:da:cb:81:5a:9e:6f:
                    2e:6c:b5:66:ca:2c:12:41:db:32:2c:88:d7:6e:4b:
                    d1:ea:24:ac:ea:01:28:f0:01:d6:48:93:49:69:17:
                    59:a2:f4:e6:6d:db:05:af:a5:03:7c:7a:85:38:d1:
                    51:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:89:44:DD:40:65:28:58:13:16:B8:E0:3B:49:CB:07:65:C8:1D:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6bbbd710-0b4d-329c-800d-2e5c4fe3788e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.253.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:66:88:b8:6f:60:0b:3a:79:21:02:e6:2f:5a:c2:c4:a4:41:
         5b:4d:ed:e4:fd:b3:5e:ff:21:91:b7:cb:2d:e0:60:77:5e:7d:
         dd:f9:0c:65:f3:07:b3:c1:95:34:71:50:ae:1c:0c:5f:1f:ec:
         03:d5:97:bb:df:07:ea:be:95:c1:aa:0b:9d:f3:e2:0e:84:b1:
         e0:71:fd:e1:fc:5c:b3:a6:93:92:90:ea:3a:6a:3f:71:f7:73:
         64:8b:4e:1a:cb:bc:d3:3a:9e:9f:ea:0b:18:e4:11:44:e5:88:
         90:df:bc:dc:24:54:cb:1f:3d:47:f4:e9:8d:c6:38:98:3a:27:
         8d:5e:08:ff:96:fc:ec:1d:55:de:2f:82:b4:69:56:53:ad:d2:
         41:98:52:61:88:51:0c:4a:d4:38:e4:49:a0:94:a3:17:35:e8:
         2a:d7:53:fd:32:f1:49:37:f2:2b:98:58:8c:eb:31:8b:2c:f9:
         4d:73:ab:d6:f9:93:55:de:bf:0b:45:04:9d:ca:1f:e7:b0:3b:
         fe:7e:e2:34:e0:17:f6:f1:bc:74:0b:ba:48:e2:d2:bd:23:36:
         6a:6e:c5:96:5e:34:5b:84:03:b8:fb:58:a6:3c:17:1f:3e:62:
         db:fc:83:34:38:15:65:be:ee:55:e1:6c:09:0c:4e:b8:d3:1a:
         c1:a2:dd:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:25:08 2025 by rpki-client