Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f2acfa0-079f-36ce-a01e-8fe8595243a2.roa
File:                     2f2acfa0-079f-36ce-a01e-8fe8595243a2.roa (raw, json)
Hash identifier:          daOcDW1WY5mZOvoRmkHQumeFTKtjrR4LHfr1ROPSzm8=
Subject key identifier:   C0:6F:5C:F0:AC:89:6A:96:94:48:5B:75:39:A6:A3:42:88:48:FC:4C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F42781141A6015B877CCB19C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f2acfa0-079f-36ce-a01e-8fe8595243a2.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        70.190.18.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:11:41:a6:01:5b:87:7c:cb:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=ce57f2d4-fb03-4db7-baa2-331632a95471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:13:f1:88:4e:fd:ec:5c:e7:22:42:e2:09:3a:
                    3e:cf:3c:53:7b:f8:d9:68:cb:4e:b9:38:f9:91:8f:
                    b6:3d:6c:95:85:71:d6:f9:c2:a4:26:65:2d:b0:a0:
                    23:c9:87:48:5e:ef:f8:d4:bb:21:65:58:a6:77:14:
                    13:5f:b0:27:98:6c:9e:d3:f7:8a:4f:2c:d0:32:07:
                    e8:78:bb:c9:ab:20:13:9a:39:ec:57:2a:0f:d7:ed:
                    83:1b:af:e6:f8:31:6e:12:c6:f4:bf:86:44:69:df:
                    73:94:18:74:65:6d:1f:d3:4d:2d:0e:e5:b1:de:c3:
                    d8:6d:4c:cf:2e:9a:1f:11:11:ac:e6:b8:58:e4:dd:
                    68:77:74:a0:73:2d:7e:29:21:55:fc:69:5e:93:1f:
                    d7:9d:a4:84:50:d9:33:ca:8c:a9:f1:3d:e7:98:3e:
                    a4:cc:d7:55:51:37:b7:f2:96:ee:95:be:5a:ed:f6:
                    8c:c5:80:84:8b:40:da:c8:4c:d1:b2:2d:16:7f:c6:
                    76:44:e8:e3:ed:a5:ba:ad:37:9e:3d:88:07:e8:4e:
                    aa:17:2a:ad:42:75:d9:78:ec:99:ad:05:e2:00:8a:
                    29:73:b5:e1:79:b0:74:a8:d7:aa:ec:d6:f2:e2:89:
                    41:8d:44:28:0e:9a:e5:bc:58:f4:b0:6a:6d:bf:6e:
                    c6:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:6F:5C:F0:AC:89:6A:96:94:48:5B:75:39:A6:A3:42:88:48:FC:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2f2acfa0-079f-36ce-a01e-8fe8595243a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.190.18.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:23:ae:cd:a3:f8:8c:f8:09:3c:00:20:f1:5f:a4:ef:96:e3:
         08:9b:ca:9a:79:27:cd:c8:24:81:70:e8:09:d2:76:75:d7:db:
         9c:76:cb:0f:e8:36:f7:48:e6:f1:72:48:9c:8a:7e:59:85:a3:
         3a:2a:99:47:9d:78:c1:46:de:6b:ef:1f:c5:55:46:fc:bd:0c:
         a8:2f:82:6f:de:a5:a2:17:cd:4f:bc:97:20:9e:f8:70:da:a3:
         13:11:33:20:be:60:ad:85:5f:06:b8:c9:81:7c:ea:54:bc:b5:
         c4:72:62:88:4f:66:f8:40:2a:ee:49:db:14:07:e5:d6:d2:5d:
         7b:46:fc:a4:b0:97:d0:7c:3c:c6:f3:c3:d8:16:c1:02:95:ab:
         ed:df:bc:04:18:54:43:4e:a3:54:37:e5:09:24:88:8d:df:2c:
         2c:12:5e:14:5a:c7:c3:c6:41:1c:16:05:a5:e4:11:62:e3:62:
         76:f7:6b:33:ca:06:29:68:e9:68:da:7f:03:e5:27:39:07:25:
         2d:5c:e6:89:eb:ec:4d:2d:93:05:5b:21:3d:ad:75:1e:13:db:
         3b:f3:7b:1b:2c:2d:40:c2:db:57:e2:b0:f7:cc:32:7e:1f:c8:
         f4:2a:28:f8:a9:93:95:10:43:c5:8e:a7:42:6c:83:01:a0:ff:
         c0:99:0d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:52:29 2026 by rpki-client