Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c53a3ed-395f-3454-a8d3-7d0d5e984cbc.roa
File:                     2c53a3ed-395f-3454-a8d3-7d0d5e984cbc.roa (raw, json)
Hash identifier:          N7hcbI62xosEX4Izzwh+Tx7/VgX44Hi/ZfA1LColjOU=
Subject key identifier:   AF:9B:E5:8C:27:F2:63:83:D6:0C:59:FA:29:A8:E9:78:2D:3E:AD:3C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F411280A9CB1B613038E08180
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c53a3ed-395f-3454-a8d3-7d0d5e984cbc.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        70.163.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:80:a9:cb:1b:61:30:38:e0:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=9d9caa72-9029-49ac-a3c6-a5e1a583695f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cd:e1:d5:55:ba:f7:8c:92:bf:3c:be:91:92:
                    31:8c:5f:a9:21:dd:31:a6:4c:54:4b:37:35:1e:cf:
                    1e:8f:23:8e:55:98:16:89:6c:4b:cb:17:7f:cc:8b:
                    ee:57:9e:2b:b1:7e:df:9e:69:92:ed:44:6f:45:a5:
                    2e:b6:8c:de:c1:94:92:ea:22:4b:8d:16:fe:c8:7c:
                    0d:19:c4:5b:05:48:40:02:ce:a6:3d:13:20:17:6f:
                    55:57:b3:b0:01:21:48:15:ca:2d:0e:97:9e:85:a9:
                    cd:15:14:39:90:8f:1b:a9:57:ac:6e:0c:e6:82:5c:
                    6d:99:b6:90:16:86:83:14:a8:2b:96:47:43:0b:37:
                    b9:6f:a0:4d:42:3b:1a:c9:5b:6b:c0:57:ab:15:eb:
                    39:3f:ff:ee:82:59:b8:4e:97:b3:30:20:77:65:c9:
                    2f:20:4a:73:ee:ed:59:ae:b2:1d:a7:24:56:52:8b:
                    c6:1c:45:9d:e7:a6:62:5e:c4:88:5b:a1:05:1b:0b:
                    de:70:51:5e:22:64:01:ef:d0:dd:84:ef:a2:b8:8f:
                    1b:eb:2a:43:00:ce:bd:be:60:15:cc:55:b6:0c:da:
                    4a:21:f9:97:1a:99:79:b5:b2:c4:59:96:82:bd:4c:
                    a3:c9:64:50:f7:7d:61:11:3e:ec:d8:57:1b:2d:55:
                    6e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9B:E5:8C:27:F2:63:83:D6:0C:59:FA:29:A8:E9:78:2D:3E:AD:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2c53a3ed-395f-3454-a8d3-7d0d5e984cbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.163.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:bb:4c:22:0e:95:0c:22:37:ae:e6:69:9d:68:7b:6c:87:f4:
         da:c4:ac:c1:70:48:ee:7d:a1:d5:d0:31:c6:31:d3:44:2f:5b:
         4b:bd:65:07:e6:a0:36:39:ef:c9:60:c1:31:c0:b4:51:27:a2:
         38:f2:32:f6:ed:e9:d5:9e:78:67:e3:4a:2c:cc:46:e5:39:a5:
         6f:e5:a7:19:08:2d:88:bf:59:50:8e:cc:5a:33:c1:7c:3a:1f:
         01:9f:d6:4b:6d:a3:3f:3a:d1:b0:5a:c7:03:f7:72:a8:ce:fd:
         4b:04:d9:75:27:a7:f9:85:d3:ec:d9:a0:9c:78:8a:82:d5:0a:
         2d:bd:87:31:63:1d:1d:3a:5b:29:e4:aa:38:31:1c:dd:4b:68:
         5e:04:f6:74:45:6c:b5:32:c1:d1:70:bd:cd:f5:a3:05:5a:e9:
         bc:11:d4:f7:52:2d:4b:57:c0:b3:50:95:0c:43:cb:56:93:25:
         ae:e8:09:dd:4a:f3:57:af:d4:b7:ab:2f:a0:77:ad:be:8a:8e:
         51:7b:7a:e4:04:67:1f:7b:e2:6b:3a:83:93:c8:41:f1:af:f7:
         97:cc:77:9d:1b:96:0a:1e:ce:7d:ed:b8:ad:75:93:49:41:51:
         99:f4:2d:ff:4c:aa:99:5c:55:b3:05:31:27:05:f3:43:c8:01:
         c3:66:e7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:54:57 2026 by rpki-client