Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33766be5-41cf-3d8e-b10a-ee682aeb4d7e.roa
File:                     33766be5-41cf-3d8e-b10a-ee682aeb4d7e.roa (raw, json)
Hash identifier:          6H9Jbm+B4IlgQUoo956VW6COtEdcCPBBvoPiTFYFZkw=
Subject key identifier:   68:11:D9:6C:23:F5:AA:C3:61:5F:D9:70:A9:6A:35:6D:1C:D9:DC:9F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DC135D2BB59E1A7DE54FF7E80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33766be5-41cf-3d8e-b10a-ee682aeb4d7e.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     22773
IP address blocks:        70.175.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:d2:bb:59:e1:a7:de:54:ff:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=944ee107-3832-4de9-8eaa-5697c75aee89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cc:d8:97:c4:ea:b8:cf:a5:79:c0:b7:8a:76:
                    59:be:c6:03:a5:6e:95:34:0d:c7:89:a1:eb:08:c8:
                    75:16:d3:85:dc:ff:d2:af:33:23:a4:41:fc:0b:62:
                    fc:90:c7:c5:9b:70:ba:dc:0c:08:0e:d6:ae:38:7a:
                    ff:3f:c7:2d:01:45:de:55:64:91:f3:12:4d:d2:48:
                    51:70:23:7a:e9:58:ff:5a:4b:9c:6a:13:fa:35:c7:
                    3b:3f:7b:a8:0d:8f:1b:21:b3:25:e4:44:85:dd:0d:
                    2d:83:f1:43:88:21:4b:13:e1:cc:2d:0f:ee:ba:9c:
                    50:f4:75:63:14:94:c1:08:7e:10:b4:80:d1:ba:49:
                    30:20:53:03:55:2a:f3:90:ac:f2:66:5b:b5:ed:a5:
                    2e:e3:21:6b:c4:31:65:3b:63:89:67:69:0a:75:64:
                    11:56:88:98:86:7e:03:ed:37:7a:32:e6:58:6c:ae:
                    aa:0e:f1:28:a0:e7:af:64:d0:c2:50:d4:ce:54:52:
                    51:77:39:bd:3c:4e:de:95:d3:62:ba:69:ae:8d:5f:
                    9c:7f:90:ad:61:90:2e:09:b9:cc:81:a6:f2:21:5c:
                    71:3d:f7:e5:54:e6:c9:42:20:7b:0f:3c:fa:d6:22:
                    c4:dd:44:18:7f:81:67:20:c0:f1:58:00:bb:19:8b:
                    56:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:11:D9:6C:23:F5:AA:C3:61:5F:D9:70:A9:6A:35:6D:1C:D9:DC:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33766be5-41cf-3d8e-b10a-ee682aeb4d7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.175.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:79:58:5f:d6:d0:e5:e1:b0:ff:d0:17:e4:30:3c:66:56:0b:
         f9:33:23:df:e5:16:55:36:01:b4:80:03:ed:30:3a:7c:73:38:
         c9:e7:dc:5e:08:ca:f2:ab:dd:c7:92:44:10:7d:84:4a:9e:a0:
         24:12:de:44:df:1b:1d:c8:bb:18:42:72:b3:0b:a7:86:be:ef:
         03:63:2c:22:4b:7d:e3:31:cf:2d:d2:c6:9f:0c:da:9b:60:6a:
         ee:ff:e1:1d:00:17:7b:c7:a8:1b:69:68:c8:37:b8:cf:91:56:
         85:08:de:a1:8e:32:ba:14:73:59:8e:79:6b:ff:84:68:33:3f:
         51:99:20:17:9a:97:0d:26:a4:d0:ad:5f:e8:e1:db:7f:cd:7b:
         3c:46:5a:b6:da:ad:24:b5:16:e4:43:a2:60:c9:6f:6e:47:d1:
         8e:95:30:3a:f6:66:17:f2:f0:cc:2a:e8:25:3a:f1:a9:89:ee:
         41:92:91:ba:d6:9b:45:c6:e1:18:6b:d9:94:43:20:d5:23:c6:
         5c:9e:0c:79:e4:00:9f:53:c5:d6:3e:b1:79:76:bc:44:a8:9c:
         9f:60:3b:3d:fd:bc:97:97:3a:f8:09:45:21:01:04:f1:4e:e1:
         12:52:e8:55:75:56:34:b9:8a:d2:cf:e6:5c:3b:47:4e:95:25:
         24:f7:ad:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:41:59 2026 by rpki-client