Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11eb6a52-24f3-33ec-8db2-65f455c0b095.roa
File:                     11eb6a52-24f3-33ec-8db2-65f455c0b095.roa (raw, json)
Hash identifier:          +upSsqZmt81EhCoCl1FBCXU5/dYfqXzJJlhufIBvY/Y=
Subject key identifier:   07:6D:F8:29:68:3A:EA:2B:2E:8A:32:7C:B7:B7:29:E6:D7:A1:EF:08
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4112D6C54462C51D01B12480
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11eb6a52-24f3-33ec-8db2-65f455c0b095.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        70.176.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:d6:c5:44:62:c5:1d:01:b1:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=ca16a9c8-0256-4a4d-ae7d-92a980f011b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:95:b8:9b:c5:9b:1b:20:7e:a3:e6:80:54:
                    3f:ae:38:72:80:c8:70:66:78:98:17:c2:a6:22:5a:
                    f2:a6:d4:00:ab:f7:d4:40:38:e7:dc:35:bb:67:3e:
                    1c:c7:58:87:c5:24:41:8e:37:ae:8d:94:8a:fb:7d:
                    d9:c7:b7:73:33:5a:13:66:a5:7c:9f:03:c4:34:bd:
                    40:8f:c2:04:4c:3c:76:f2:c7:d2:fa:05:0e:16:75:
                    ee:0a:be:c2:b1:ae:57:2d:b5:32:fe:b7:eb:f1:ee:
                    c7:9b:42:dd:9c:0f:44:e1:c2:0e:6e:a2:e1:e4:14:
                    65:e4:fd:8e:79:e2:de:7c:83:e7:7b:5a:d9:eb:41:
                    7a:80:a1:f7:11:75:36:ee:30:7c:88:2d:5e:e0:62:
                    24:4a:cd:b3:97:93:e7:58:6e:2f:b5:c8:27:19:68:
                    cb:83:05:6b:87:22:e2:f9:e2:89:5a:a4:c0:e7:03:
                    1b:79:ee:ca:10:c2:3f:70:4a:29:5d:d6:db:13:2f:
                    7e:4c:4e:87:11:3e:f4:95:b5:62:44:9a:5d:90:b3:
                    a5:58:da:d2:76:a0:91:99:8c:1e:ee:f4:e9:a3:98:
                    f6:ff:d0:eb:6c:bf:cd:de:49:b1:7d:d4:3a:fc:5c:
                    2f:e1:36:2a:26:6b:19:56:be:8b:74:39:34:9c:9c:
                    d3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:6D:F8:29:68:3A:EA:2B:2E:8A:32:7C:B7:B7:29:E6:D7:A1:EF:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11eb6a52-24f3-33ec-8db2-65f455c0b095.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.176.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:ff:98:61:68:6d:2c:6e:ef:4c:8d:fa:62:c2:ef:12:99:eb:
         c2:e1:73:d8:b7:ed:b8:b8:e4:32:04:5d:f9:77:77:25:94:3d:
         9a:aa:a2:d0:7f:9d:68:29:b6:80:6b:c5:14:6b:e0:e5:38:4b:
         71:c7:6c:69:b1:d5:21:df:0d:f9:05:41:c9:ef:31:70:c9:83:
         55:92:58:4b:ac:72:16:c1:e7:74:b0:b2:1d:b8:02:40:32:99:
         68:74:e4:67:2e:cf:35:08:fb:07:b9:f1:dd:3b:59:21:b6:f8:
         c4:c4:8e:3b:ee:81:be:31:c2:80:c8:bf:ec:bc:c3:1f:52:d9:
         4f:20:2f:13:a0:45:91:64:fc:71:09:83:93:10:ac:56:b0:94:
         e8:6e:43:13:ec:b2:05:0a:3a:28:cb:b9:c0:05:4b:42:de:34:
         44:af:a0:ca:60:48:b7:b2:54:87:24:74:9f:ff:e7:d7:76:d1:
         33:64:66:66:d6:c4:99:95:70:a0:c1:e3:bd:c0:80:95:6c:0c:
         b1:88:b5:c0:d9:67:2c:d5:80:3a:30:05:cf:be:8f:8e:46:32:
         43:86:11:63:b9:fa:c5:52:3e:d8:c0:a6:fb:21:39:b7:a1:f5:
         94:92:eb:20:97:be:99:55:83:bd:63:58:8d:ba:f9:38:b4:bc:
         11:f9:9f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:40:07 2026 by rpki-client