Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7504c09a-8542-33ab-bcc7-1ef97164d68c.roa
File:                     7504c09a-8542-33ab-bcc7-1ef97164d68c.roa (raw, json)
Hash identifier:          /GmFpG3VbOInYpHYmtxTPgCDHtowFgdE3xfgcAIjy98=
Subject key identifier:   F5:6A:EA:52:97:EE:95:28:06:BF:78:89:DB:00:66:0F:14:6A:F8:36
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A96363802B18CEC069AA06600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7504c09a-8542-33ab-bcc7-1ef97164d68c.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        68.10.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:38:02:b1:8c:ec:06:9a:a0:66:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=735de047-9e33-4330-8fff-82c48e0c9be2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:56:f0:4b:20:d2:6c:d0:27:52:dc:7e:30:43:
                    ee:57:ca:14:44:26:24:7a:a6:88:27:dc:b2:75:9f:
                    1a:de:1b:24:7a:a2:ff:25:62:64:33:42:c8:f2:3b:
                    6a:d8:fb:24:b9:91:bc:b4:6b:2d:b3:9a:04:b7:f4:
                    ad:30:5e:c1:7b:7d:6c:66:e4:9c:7b:2a:9a:89:ca:
                    87:43:8d:53:d9:71:44:6d:ec:9b:f7:27:89:ab:c1:
                    6a:36:83:23:98:6c:4e:2a:b7:6a:d6:fc:cd:4b:5a:
                    d5:e5:56:11:d0:39:a8:23:68:a4:22:05:e0:26:84:
                    92:31:e6:dd:d3:96:5a:ca:e9:06:a3:f5:9c:58:87:
                    a1:14:d6:a9:07:2a:6f:84:68:b2:14:ac:0b:79:be:
                    a0:0b:f9:70:8c:88:05:2b:77:fc:d7:c1:5b:ba:53:
                    81:b1:bf:0d:7d:eb:66:dd:f0:91:5b:81:be:92:20:
                    48:9d:17:7e:25:52:7d:be:89:cd:58:5c:0c:9b:4a:
                    5c:e4:82:3c:07:26:83:f5:4f:aa:66:0a:b9:de:d2:
                    34:2b:55:36:94:80:b3:5b:c6:dc:12:09:79:5f:34:
                    22:17:77:c2:34:13:7c:bb:93:fb:f2:b1:ff:0d:78:
                    c5:39:a7:47:22:41:94:ee:47:f9:da:85:28:14:10:
                    cf:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:6A:EA:52:97:EE:95:28:06:BF:78:89:DB:00:66:0F:14:6A:F8:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7504c09a-8542-33ab-bcc7-1ef97164d68c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.10.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:c1:9b:f8:7e:d8:f0:58:d6:c9:68:6a:c6:43:f7:8b:92:1d:
         0a:4b:a4:55:4f:d7:8a:77:0a:b3:cf:ea:d5:96:4e:eb:f1:8c:
         f2:72:98:87:41:09:4a:59:e8:ba:5d:9b:65:f1:b6:7a:c0:3b:
         97:2e:94:91:75:e7:09:ce:67:24:cc:6e:2f:62:10:76:3d:50:
         e6:72:33:5f:d3:82:6f:f3:48:40:3a:7c:eb:6f:1b:07:43:f8:
         59:8f:8c:b0:c6:c8:4e:fa:0c:cc:58:5c:f1:83:47:35:62:1b:
         1b:71:35:18:aa:d6:61:6b:56:82:d1:a8:ae:20:e6:8c:ee:12:
         ed:0a:b1:d0:0b:d2:4f:3f:14:07:7f:1f:72:21:0f:41:c1:2d:
         7f:af:1e:3c:d5:48:27:83:4e:0e:ea:e8:c1:8a:36:c2:e4:f0:
         4c:78:47:e6:7d:75:e7:e9:dc:e0:24:d3:ee:14:7c:04:7b:13:
         fe:a1:61:0b:37:e1:93:c1:05:ba:4e:f0:0e:6e:26:56:72:03:
         e4:68:a4:e9:99:04:d1:3a:72:ca:df:4f:4d:7e:f0:ee:e7:47:
         57:91:e3:6a:d3:9b:67:06:47:eb:de:10:ee:bb:2f:36:77:1d:
         6d:26:0d:77:ea:0d:b7:8b:fe:96:f0:5b:34:62:84:30:4d:0f:
         d3:fc:b3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:38:03 2025 by rpki-client