Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a081935-05e1-3ad6-9b89-9e728c9acfb2.roa
File:                     0a081935-05e1-3ad6-9b89-9e728c9acfb2.roa (raw, json)
Hash identifier:          6xUQbX8HVkMr//zMdAUqK5bSGB2T6NwNEa7KdsegpsA=
Subject key identifier:   D8:8B:7B:58:31:35:2C:4B:E7:AE:3D:3A:4B:C2:05:F0:DD:63:63:F5
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4112D66B486EC88F498DC600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a081935-05e1-3ad6-9b89-9e728c9acfb2.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        70.174.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:d6:6b:48:6e:c8:8f:49:8d:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=462e6434-e902-469f-a9ec-bb293e5fcc37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:86:b6:47:1f:92:19:45:da:25:77:ea:b4:2a:
                    a4:c9:8d:b7:08:55:67:08:b1:0d:f7:42:55:f8:88:
                    a2:4b:84:1b:43:54:b3:36:9b:a1:2f:3b:52:1f:b9:
                    22:4d:fb:dc:0b:21:fc:8f:49:5d:c8:43:01:25:0e:
                    81:48:ba:25:e4:63:2c:c6:08:be:74:c9:16:c5:cd:
                    16:67:0d:5a:f3:80:5f:0c:a6:93:62:da:b9:ed:59:
                    f7:4c:4b:d9:84:4c:61:74:07:f3:97:69:cd:11:29:
                    83:c6:82:10:35:61:9a:ee:aa:20:66:00:42:32:e3:
                    46:55:d3:d6:5f:bd:18:70:0f:30:ef:6d:65:15:60:
                    eb:c9:24:23:35:da:ae:3b:4d:1f:da:d3:c1:28:18:
                    c5:c2:59:11:a5:96:e3:4a:a6:11:f2:db:1a:66:37:
                    70:3a:58:dc:78:d6:e9:9a:aa:06:4b:8c:e1:8b:89:
                    22:c9:1b:ed:1d:6e:f0:91:54:5a:27:1e:c7:04:78:
                    33:36:de:a0:7e:71:20:98:72:2a:25:ed:cd:6a:a2:
                    bb:30:c9:17:60:87:6c:cf:eb:18:62:1d:50:fa:ac:
                    16:8e:1d:4a:1a:42:d4:d1:8a:f8:1f:46:79:4d:de:
                    cf:73:95:c1:a4:06:ef:e0:72:a1:c0:55:ed:7f:7e:
                    60:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8B:7B:58:31:35:2C:4B:E7:AE:3D:3A:4B:C2:05:F0:DD:63:63:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a081935-05e1-3ad6-9b89-9e728c9acfb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.174.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:a5:28:b8:08:ac:b8:e7:cf:a6:a2:53:b6:cd:c2:b3:45:02:
         f1:92:22:74:ed:a0:1f:a2:d5:fc:3a:bc:d4:69:f0:d9:e3:46:
         48:4a:91:6e:6b:51:ad:65:6d:28:0d:7d:99:91:a7:d8:be:df:
         4f:df:fc:44:5c:5f:79:8f:85:e4:27:8c:82:2c:a1:7c:0c:be:
         18:c0:64:ab:54:d4:e6:7e:b6:d4:40:a5:26:71:41:48:ee:2d:
         89:b6:4c:b7:f5:f0:08:4e:43:45:23:05:16:c0:63:1e:dd:c9:
         0d:f7:c7:30:b2:fd:84:3e:64:8b:13:62:19:3e:88:eb:dd:e0:
         de:c2:86:41:c9:56:4f:66:8b:bc:c7:82:dd:5e:a6:a0:64:c4:
         ab:c9:c8:f8:e9:89:2a:10:62:ed:9f:db:2b:39:72:28:08:23:
         9b:1e:35:3b:fb:12:45:3e:2d:2f:8f:15:69:a8:8f:0e:1e:c9:
         49:37:c9:bd:3b:00:90:8c:cd:47:d3:fb:79:d0:3e:16:07:ed:
         38:59:d5:01:83:08:e9:1c:f3:e4:35:1a:86:af:44:10:a8:ee:
         b4:b6:9d:4b:59:5d:be:67:c8:20:9f:c0:af:8a:a7:02:82:8f:
         8c:57:02:7b:c9:37:3a:a6:67:82:38:0a:37:51:61:ff:99:a9:
         9b:6d:d9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:59:43 2026 by rpki-client