Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07575fd1-448b-3a60-992d-d007c481b436.roa
File:                     07575fd1-448b-3a60-992d-d007c481b436.roa (raw, json)
Hash identifier:          i0B3JFkyVRKR5NmmsFRSItC9dKtoUgs9ig70+ilUV3s=
Subject key identifier:   98:2B:12:5E:D5:31:BA:4B:FB:8E:78:45:57:6E:C2:54:DF:81:17:4C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DC135DB05B040F9F73D6DF300
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07575fd1-448b-3a60-992d-d007c481b436.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     22773
IP address blocks:        70.170.4.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:db:05:b0:40:f9:f7:3d:6d:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=14bfa47f-40aa-4bd2-96ce-5a14ef1234f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:22:c4:fd:84:ea:61:41:fe:7c:85:85:f9:78:
                    9e:2e:2e:b1:e2:3e:31:ce:53:2a:81:7a:8e:d8:15:
                    d8:83:4c:6f:da:3e:f4:0a:c5:15:26:21:15:de:a0:
                    e8:60:a2:93:ce:10:d9:ce:7c:a3:64:84:b0:9c:61:
                    28:1f:a0:97:7b:a9:c9:6f:6d:44:de:2d:30:80:6b:
                    a4:ac:a2:5b:4a:48:e7:60:f4:e5:74:2c:60:42:e6:
                    0b:57:78:94:b0:0a:dc:16:3f:28:90:9c:28:19:b4:
                    ef:9a:89:d5:17:f5:be:d7:fc:5c:e5:35:4f:aa:ce:
                    06:9f:fb:df:eb:fd:f4:77:cc:ac:3b:2e:11:e2:b3:
                    ff:4f:1f:e1:00:c5:fd:cb:70:ad:cb:3e:72:4d:d4:
                    7d:31:d7:94:c0:db:a1:dc:a8:0e:b2:81:82:99:3c:
                    aa:07:23:ab:39:61:19:2d:d9:90:28:2a:24:d6:28:
                    16:f1:a4:19:3a:33:1c:fe:ee:a3:b4:82:e3:64:4b:
                    65:34:fe:fd:cc:b3:ec:8c:95:7b:8b:9a:00:59:ff:
                    ae:45:39:cf:6e:33:65:17:3e:85:7a:7d:1a:7c:41:
                    58:5d:3b:e2:3d:94:05:28:b3:93:c6:63:cc:f3:de:
                    39:67:a2:0f:72:40:0a:c7:88:9a:4c:6a:6d:11:3f:
                    26:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2B:12:5E:D5:31:BA:4B:FB:8E:78:45:57:6E:C2:54:DF:81:17:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07575fd1-448b-3a60-992d-d007c481b436.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.170.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:a6:62:65:bd:22:a4:92:39:03:f4:72:3b:ca:5a:61:91:7e:
         63:94:a2:11:0f:13:d2:41:07:32:3f:20:77:ef:45:6e:ca:27:
         e8:a9:30:e9:eb:42:e1:74:be:7e:d5:19:c9:b8:b7:e0:e8:0c:
         49:35:79:5a:5f:ff:c0:a2:a8:ff:b5:e8:9f:cd:dd:68:99:56:
         f9:4d:82:06:10:04:77:ec:87:4a:a4:72:a2:4d:6f:2c:f8:82:
         0d:42:90:ab:bc:08:38:c8:aa:80:f8:18:52:84:62:4e:45:3d:
         52:bb:2d:79:f2:8d:d0:59:51:d1:82:11:13:42:fc:05:ba:cc:
         b0:80:4b:49:a4:15:32:c4:95:2c:18:97:6d:30:43:6d:1f:18:
         bc:0c:2c:df:9e:34:6e:3e:8d:dd:dc:07:ec:17:93:ed:55:7a:
         20:41:03:e7:39:e6:22:9c:2d:bd:8b:9a:03:45:60:3e:b6:8c:
         60:b7:83:c6:f5:87:7f:d0:14:27:ba:ec:d0:38:67:1c:67:c1:
         2c:80:76:19:80:b1:5f:37:49:48:a8:cc:49:e0:1f:7a:04:49:
         17:35:6a:ac:a3:1e:0e:59:e4:32:40:81:1a:37:13:a4:dc:95:
         a7:8c:bc:d9:29:6d:eb:e0:09:10:ec:38:6f:b0:7f:a5:0b:6a:
         d2:30:94:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:37:33 2026 by rpki-client