Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1025d044-171a-3b91-acce-d6cfbc5835c3.roa
File:                     1025d044-171a-3b91-acce-d6cfbc5835c3.roa (raw, json)
Hash identifier:          vYqq5w6bYvxpUHJL99UPcnCE+I2d+CeMYXI7p/bcGS0=
Subject key identifier:   6C:58:72:1E:0D:D4:B2:07:F4:B9:43:3B:56:84:E8:11:3D:6A:D2:0B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F43DD74D9ECBB9115ED3DEB00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1025d044-171a-3b91-acce-d6cfbc5835c3.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        70.191.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:74:d9:ec:bb:91:15:ed:3d:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=f12c3c5a-26b6-46ed-98a9-a07b1441a1bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:83:2c:54:a3:d9:c9:5f:4a:e1:14:83:93:ed:
                    39:9c:d8:c8:79:7a:a4:99:d7:c1:88:eb:7e:4a:65:
                    42:96:f5:23:1a:4a:5a:c7:69:48:86:fa:38:ad:85:
                    98:21:f6:80:b4:b3:7d:f4:88:01:e3:3e:fe:fb:02:
                    ae:d1:17:71:45:18:f8:ad:f6:f5:11:3c:a8:3b:af:
                    ab:13:07:da:77:4c:2c:6f:35:a0:51:f5:61:ab:f9:
                    d0:03:6a:7b:2f:4f:76:8c:8e:c3:64:6e:d9:04:70:
                    6a:0b:23:02:d2:c6:2b:c4:9c:d8:95:b4:60:bf:cd:
                    11:2e:c9:97:ba:12:09:65:8e:54:a9:f2:e9:3e:8c:
                    4d:45:fd:b3:a9:03:5e:e0:c8:83:7b:b2:15:7a:1a:
                    0f:37:86:44:55:3a:cf:f9:56:8c:e3:32:97:f3:85:
                    ec:96:ba:d9:8c:65:69:5d:28:82:ef:b3:0c:91:aa:
                    0a:b1:97:21:9a:1a:78:46:a3:19:1a:99:80:29:d2:
                    54:e1:18:49:41:d8:02:76:a7:67:62:e8:38:b2:22:
                    e3:97:38:ed:62:ab:da:54:cf:a6:f4:2a:8d:d7:bd:
                    76:a2:c4:e6:ca:ce:e4:8f:1a:ca:ef:b4:a9:f4:de:
                    42:6d:fe:a5:e8:47:25:6b:52:bb:fd:b8:f3:19:5a:
                    4a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:58:72:1E:0D:D4:B2:07:F4:B9:43:3B:56:84:E8:11:3D:6A:D2:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1025d044-171a-3b91-acce-d6cfbc5835c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.191.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:f9:92:04:96:75:0f:97:26:f4:de:1a:86:6c:27:98:ff:77:
         9b:e8:da:3b:02:f2:5b:f9:89:dd:1d:ba:93:f0:85:15:55:d0:
         cc:3e:3f:98:10:83:d8:44:25:59:fe:52:92:7f:99:fb:51:bb:
         67:1c:07:88:13:5b:2f:46:85:ec:0f:2f:64:5c:ea:86:3e:25:
         53:8f:aa:62:5a:9e:c2:98:c2:3e:86:58:96:26:1c:ef:2f:13:
         4f:16:8f:7d:5d:72:0b:8c:a6:d9:ec:7e:f2:fc:23:ec:cd:e7:
         d4:2b:3b:fd:49:ed:21:b0:e6:62:6a:84:da:ff:c2:32:ed:9a:
         dc:f8:8c:81:70:38:87:64:e4:ec:68:04:5f:4f:10:06:f4:a5:
         6e:fd:1f:4f:4d:3a:9e:f5:62:0c:ab:ce:ac:01:39:30:02:36:
         59:ca:29:ea:ba:81:e3:e9:02:e9:ee:54:4d:b6:98:d3:25:31:
         3c:93:f9:c0:38:8e:b4:9f:74:ae:1d:60:df:99:73:7b:6f:ed:
         69:60:85:08:bb:c0:1e:15:3c:44:7e:27:1f:ca:90:b9:d1:e5:
         7b:42:65:22:5b:bc:48:1f:7b:78:55:7f:71:75:54:6b:9b:09:
         ae:68:6d:a3:e8:35:da:89:4b:3e:0d:76:81:29:80:26:4e:f1:
         59:af:1a:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:43:52 2026 by rpki-client