Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bdd4e746-d368-3608-bacd-93678159c58f.roa
File:                     bdd4e746-d368-3608-bacd-93678159c58f.roa (raw, json)
Hash identifier:          J01B2w0EWnXT7rAkvF4pj7dfqNR9YHUpRGDjUs8s0nY=
Subject key identifier:   22:69:59:4C:86:0B:FD:66:76:E2:3A:7E:57:07:C5:E0:C8:AD:AE:14
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A963617CA9F1732725F939700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bdd4e746-d368-3608-bacd-93678159c58f.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        68.14.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:17:ca:9f:17:32:72:5f:93:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=63a62f82-9359-4906-886b-a61155082321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f6:08:bf:10:98:7c:b4:1d:4e:28:5b:b0:4a:
                    57:79:80:5a:b9:a3:22:73:10:95:dc:ac:5f:bb:eb:
                    86:53:36:72:b5:ae:70:18:18:e5:50:63:67:44:bc:
                    17:2f:3c:44:94:67:f6:7c:12:0d:b9:af:3a:e6:7f:
                    5b:e9:98:45:55:e9:d4:9b:50:58:54:1c:50:bd:ec:
                    fa:ef:98:28:f3:23:24:57:89:f0:9c:1c:03:e0:8b:
                    2e:ea:f5:a2:0d:c8:2e:08:93:d1:cf:67:b9:e3:8c:
                    49:00:a0:e8:09:42:1d:87:d2:3f:c6:c5:67:72:58:
                    df:a7:e9:e9:fe:34:0e:79:f6:0e:6c:46:c5:56:ef:
                    c3:a1:01:55:bd:c6:a0:79:52:6f:36:c0:1f:f5:49:
                    8e:d5:82:2b:0e:c1:47:15:27:8e:07:68:4a:d6:03:
                    f3:dd:6f:29:6e:97:30:61:cd:8d:0a:80:cf:b8:70:
                    1a:25:50:bf:6a:4c:09:4d:e4:05:42:98:55:de:2d:
                    23:d8:fd:a2:4a:6f:ed:25:61:e3:20:75:19:0e:91:
                    42:9e:40:7f:c1:8e:b2:b9:35:3d:f0:78:62:c9:21:
                    ad:13:2f:47:84:e5:3c:f9:38:cb:67:ac:fb:a5:d4:
                    2c:c5:90:6b:d8:a1:2a:a2:ba:41:41:c4:5c:57:8f:
                    de:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:69:59:4C:86:0B:FD:66:76:E2:3A:7E:57:07:C5:E0:C8:AD:AE:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/bdd4e746-d368-3608-bacd-93678159c58f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.14.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:85:11:2f:0b:a7:b9:94:66:b8:46:36:c1:23:3b:07:3f:d0:
         c6:0a:82:86:bc:87:6b:ba:4e:dc:31:f4:72:b5:0f:19:3b:38:
         c5:c7:71:ea:e8:3e:ed:ec:56:73:92:fb:a7:f6:9b:d3:7d:2e:
         cf:47:83:7d:8a:3a:97:a3:ee:8f:65:c8:35:6e:42:d2:e3:8e:
         b1:d7:da:01:ac:5c:78:33:1a:8d:99:24:a9:70:86:fa:da:0c:
         d9:0b:1e:95:77:54:3b:cc:ea:44:29:e5:b9:4b:93:89:7b:7d:
         0b:f3:35:cd:9e:c2:0d:f9:46:a0:30:bc:a0:e1:66:b7:12:f1:
         19:5e:96:9f:c6:c2:5f:e1:e4:89:04:f1:30:ca:83:3d:3e:10:
         da:9f:19:62:d6:31:d1:22:5a:e1:f6:b2:0f:d2:a2:c4:aa:ea:
         78:cc:b8:04:66:d5:30:fe:12:34:65:c5:c8:7b:af:5a:52:d1:
         51:ee:a4:8c:7b:13:5a:4b:fb:28:c8:ac:49:fb:9d:df:fe:cd:
         0c:93:b7:df:2c:c1:d9:c2:45:4a:23:66:73:23:d0:d1:c0:7f:
         fe:aa:ed:ea:ab:38:22:69:8c:46:3c:6b:45:ce:88:34:48:4c:
         d5:bd:68:70:2e:71:05:f4:4b:23:53:17:5c:92:e4:2e:ee:6f:
         1c:ec:82:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:50:55 2025 by rpki-client