Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23777efa-a298-3c7e-a51e-d0679fa4e63d.roa
File:                     23777efa-a298-3c7e-a51e-d0679fa4e63d.roa (raw, json)
Hash identifier:          XxxmbDbrk/BQ6SEn6bnXQaGeDJJif1vsK/nLxme1O5o=
Subject key identifier:   53:3A:F2:87:95:B4:1E:F3:21:78:D8:4E:DD:14:78:A9:F3:A9:60:38
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DBFD0446669889241A00D6BE0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23777efa-a298-3c7e-a51e-d0679fa4e63d.roa
Signing time:             Thu 07 May 2026 01:00:23 +0000
ROA not before:           Thu 07 May 2026 01:00:23 +0000
ROA not after:            Wed 05 Aug 2026 01:00:23 +0000
asID:                     22773
IP address blocks:        70.190.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bf:d0:44:66:69:88:92:41:a0:0d:6b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  7 01:00:23 2026 GMT
            Not After : Aug  5 01:00:23 2026 GMT
        Subject: CN=a604eec2-fc2a-440c-b13b-e551e7ca6a99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a8:7f:c4:06:75:af:6b:03:eb:97:9c:eb:43:
                    79:1b:4c:d3:29:1f:f4:2d:82:df:81:48:a1:dc:f6:
                    55:6e:62:cd:d1:9e:66:c8:e7:eb:27:cd:87:50:22:
                    5a:b8:9d:17:47:5b:f2:09:65:35:d1:5e:86:13:27:
                    17:17:5c:61:aa:2e:e2:25:64:0b:2f:b8:79:7b:c3:
                    c5:26:b4:23:37:7e:b0:ed:0b:6d:cb:49:f6:2a:e1:
                    6e:a6:d0:0f:0d:b1:02:b2:26:12:d4:fa:7a:e7:5f:
                    96:72:ca:77:d4:77:e0:22:e4:4b:1c:b9:3d:34:ab:
                    51:dd:cc:15:fb:e9:ff:8d:7b:39:05:b2:10:0c:55:
                    73:92:41:41:83:df:6a:bf:ea:9f:6f:26:a9:0f:73:
                    cf:5e:3d:fd:76:a2:ca:ac:d1:c3:cf:73:4c:7b:b5:
                    53:91:36:da:d8:56:49:ea:23:35:11:21:28:6a:d5:
                    73:92:8d:e2:ba:be:16:3b:17:35:50:c0:54:2e:f7:
                    29:38:15:d8:1a:6d:30:15:7e:cb:a8:f3:41:d7:f9:
                    83:0d:00:22:8a:32:46:c4:84:5a:2a:e1:9a:9c:f8:
                    96:4d:fd:73:af:e4:f6:a0:9a:eb:3a:ba:b9:cd:ea:
                    a0:4f:40:cb:e5:82:43:b5:82:9d:06:e7:34:d3:b8:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:3A:F2:87:95:B4:1E:F3:21:78:D8:4E:DD:14:78:A9:F3:A9:60:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/23777efa-a298-3c7e-a51e-d0679fa4e63d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.190.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:30:56:a1:ea:b2:b0:07:50:21:63:46:6d:e0:22:55:02:c8:
         db:d5:fa:6b:8f:81:84:56:f2:5a:7b:09:e5:7f:18:a6:02:4d:
         da:6e:7b:90:9a:45:81:f2:94:2d:0b:8e:ba:1b:58:56:eb:d8:
         fc:a1:76:21:0e:71:56:f5:83:95:10:2e:d5:84:12:16:5f:a6:
         4a:32:e2:e4:bf:1d:03:a5:a6:a4:ad:18:61:9e:bd:cb:b6:68:
         2a:da:d5:4c:41:66:fa:87:b2:91:33:71:9d:bc:50:99:19:41:
         b6:3f:7f:fc:a6:b5:89:12:c4:bc:8f:bf:4a:f4:02:09:ef:b3:
         48:93:01:a2:1b:d7:6b:a8:6c:2d:89:7e:7f:94:57:d3:f7:91:
         5e:bd:cc:14:ab:8a:65:45:cc:e7:f3:25:62:1a:c0:1f:f8:73:
         8e:07:95:2f:1a:2e:80:39:2b:c1:bd:a2:f9:a6:9a:51:c2:ff:
         1e:82:4c:2d:9a:0c:45:97:41:b0:d1:3d:d2:bd:ca:9a:95:8b:
         76:46:b2:c1:f9:f4:63:27:db:da:e6:89:1e:bf:c9:a0:8e:75:
         cf:d8:22:05:fe:f8:81:c5:f5:2f:94:cb:e3:a2:d6:d6:fa:92:
         d9:5a:85:79:8b:8c:23:87:6f:e4:98:90:dd:7d:1e:51:c5:42:
         71:3b:56:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:12:25 2026 by rpki-client