Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b63889a-305c-3b96-a4bc-1d1d94b6b94a.roa
File:                     1b63889a-305c-3b96-a4bc-1d1d94b6b94a.roa (raw, json)
Hash identifier:          I6Evy95JWz2REDpKO+RDO6bKC8uwAto2Ed4sB5btH4k=
Subject key identifier:   D0:30:65:74:4C:B0:F4:3E:28:AF:3A:DD:FF:CA:AF:22:26:99:03:D5
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F43DD63F364B5C4F3F2E803C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b63889a-305c-3b96-a4bc-1d1d94b6b94a.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        70.173.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:63:f3:64:b5:c4:f3:f2:e8:03:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=8974228e-5dc8-4ff3-bcb4-02a30a2bf637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0d:d0:e8:a1:31:c9:8f:2a:cb:42:0b:18:ee:
                    2a:5a:72:b8:f0:84:a9:57:d5:57:b0:3b:eb:57:eb:
                    cd:67:fc:f2:b2:43:05:c6:76:72:a7:29:8a:c3:e1:
                    13:a7:7f:b5:a0:4a:65:28:2a:64:8c:40:47:01:ad:
                    a5:d8:d4:21:b3:f0:d0:d8:33:ac:fb:c7:f3:eb:ac:
                    06:f4:d2:ea:aa:2f:34:f9:fe:b5:45:32:5a:4f:c9:
                    03:7e:4b:cc:fe:58:c0:42:70:e8:72:12:b3:ca:0c:
                    ba:9f:c7:08:a0:51:8d:41:72:02:93:4e:41:db:96:
                    ec:d0:2e:be:4d:52:c4:2e:85:c6:3c:d6:2f:19:86:
                    07:09:e0:81:98:23:81:fc:e1:d5:f9:18:30:b6:5d:
                    3e:a9:a8:b7:ac:64:da:1a:56:ff:a7:22:a8:04:34:
                    fb:b7:57:81:4e:87:95:61:d7:6a:5d:2a:2f:c7:96:
                    19:6b:c1:49:81:9a:56:f0:b5:d6:74:92:48:80:24:
                    54:b9:de:1b:1e:f5:b6:6d:56:f6:c3:5e:e3:0a:87:
                    d4:cb:ef:b8:33:e0:9a:a9:67:2b:ef:dd:4d:18:d9:
                    86:a5:3f:8d:ca:ff:0c:05:14:98:7f:c3:88:c9:c7:
                    a8:14:12:da:6a:83:57:1e:1f:77:88:28:b1:06:7e:
                    a4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:30:65:74:4C:B0:F4:3E:28:AF:3A:DD:FF:CA:AF:22:26:99:03:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1b63889a-305c-3b96-a4bc-1d1d94b6b94a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.173.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:dd:08:d6:8b:f0:9c:d6:75:99:d7:ce:48:93:51:5d:8e:ac:
         e6:94:c8:e7:ff:cd:50:6e:d1:4b:ae:55:61:3c:80:08:63:c2:
         51:19:a5:b2:56:1a:e2:c5:ee:dd:83:16:ef:85:64:36:05:cf:
         3f:92:de:09:f1:80:0c:24:b5:be:b0:4e:a7:4c:56:7c:3e:29:
         4d:e0:cc:83:c2:fc:f1:d0:64:8d:5d:ef:00:90:6b:72:02:8f:
         b7:4b:af:2f:74:4d:9a:ad:e9:70:a3:29:12:08:e5:91:b9:92:
         9b:45:ed:f7:6a:53:db:66:97:65:6d:bb:aa:31:9c:ad:68:e5:
         79:5a:d2:f4:8e:c2:bc:9e:0f:e9:51:c6:f3:56:da:b1:18:9b:
         96:25:50:66:f7:d6:8e:74:d5:d1:68:c5:a3:94:f6:9c:68:d1:
         db:ad:ea:a2:2c:b2:d5:95:b7:cb:a5:81:37:dc:9a:7a:9d:72:
         4d:8a:34:23:8d:bc:96:be:5a:c8:8d:06:7d:8a:16:9b:f4:03:
         c0:b0:3e:e3:a5:1c:2c:6b:1a:ba:e9:46:54:ba:16:af:a1:bc:
         a3:3f:11:c3:53:6d:58:e0:73:7c:eb:19:b2:5f:be:0d:82:f1:
         27:34:ea:f3:a7:f9:60:b8:72:c8:c7:65:f0:7f:0f:2d:74:88:
         6b:84:35:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:27:32 2026 by rpki-client