Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4084f464-2ceb-37d8-8e41-49511dffd9ab.roa
File:                     4084f464-2ceb-37d8-8e41-49511dffd9ab.roa (raw, json)
Hash identifier:          XQ/VLsPN4japmeIwJmtSDBvKtZfp5rH1ZQantEMHMQ4=
Subject key identifier:   69:E2:D6:19:E1:B5:F7:59:BB:07:9C:F2:0A:C3:31:53:E5:13:D9:BA
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F43DD5251D7C2C28876B8A460
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4084f464-2ceb-37d8-8e41-49511dffd9ab.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        70.189.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:52:51:d7:c2:c2:88:76:b8:a4:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=7c2c6e12-861e-490e-b210-912518754ea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:de:37:ab:2a:72:a7:1f:f0:bf:75:7a:0c:bd:
                    d2:ea:da:31:4c:cd:2a:98:12:53:f4:cc:65:e2:30:
                    07:7a:6f:a1:75:74:b6:9a:25:07:2e:f9:0d:56:94:
                    5f:07:a5:cb:e5:6e:68:76:c5:05:df:8f:ac:30:f0:
                    7c:d6:c2:75:8e:2c:e8:2a:2f:fa:3b:a7:c0:9c:4d:
                    19:3f:d1:82:ed:bf:89:2c:07:16:9b:1f:1f:15:2d:
                    72:96:8e:fc:a9:3f:ed:d9:6e:cb:7e:8f:ee:ce:40:
                    bf:4d:55:ad:99:1f:be:9d:16:27:ec:60:b2:46:f5:
                    99:c9:4d:ee:fa:33:7a:39:b3:42:f1:51:79:7a:14:
                    a2:a3:c0:51:ba:39:e5:2f:5d:bb:1a:07:f5:00:7c:
                    af:79:92:fa:f8:03:f7:2e:4e:2c:6c:e1:ec:91:01:
                    8f:e2:60:22:67:7f:5c:6d:d8:ca:14:19:5e:d8:da:
                    96:5e:45:05:96:a7:53:30:4a:42:89:47:0a:4c:fc:
                    f6:ce:47:4a:9a:ab:0c:c8:48:69:5d:3d:f1:c3:78:
                    66:83:70:1a:d3:ba:74:4f:02:d1:df:1d:f1:d6:59:
                    b9:76:6d:c5:7c:15:ac:72:f6:2a:94:ae:05:7e:2d:
                    df:d4:6f:eb:a6:0d:f8:4b:05:02:57:ee:ca:cb:1a:
                    1a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E2:D6:19:E1:B5:F7:59:BB:07:9C:F2:0A:C3:31:53:E5:13:D9:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4084f464-2ceb-37d8-8e41-49511dffd9ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.189.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:93:42:c3:67:d9:fd:b4:84:5c:1f:35:2f:16:d7:a5:c4:7b:
         db:89:d4:b6:11:5c:a9:51:c0:16:be:46:55:39:f4:da:83:69:
         b6:0f:7c:92:67:bc:99:e4:39:1c:2c:5c:d9:0c:38:28:07:6d:
         e7:95:41:b2:2c:c8:97:1c:d3:75:a9:1f:69:c4:f1:ca:46:5a:
         c2:89:c6:81:77:6d:0c:da:31:ff:e0:5e:d4:fb:26:e9:71:05:
         8e:43:ff:92:08:a1:35:ce:91:2a:03:9c:54:e4:bb:13:56:0a:
         92:49:14:e8:a0:19:ec:a9:a9:cf:94:6a:41:87:2c:86:86:3f:
         71:da:83:7b:d2:42:b2:30:ef:be:a1:66:0b:32:64:4e:43:21:
         ef:3e:ac:ce:00:da:6a:af:08:27:3d:d0:5e:20:96:c4:2a:11:
         13:fa:1e:95:4c:a2:3d:07:71:ef:2d:e3:c1:89:f3:b7:d1:d0:
         3b:e9:16:85:55:18:07:19:bd:92:9e:a7:06:dc:ec:87:8e:ff:
         b4:8e:20:4e:57:bd:35:fb:af:02:f9:36:79:3f:cb:74:17:87:
         a6:20:bb:50:a3:19:85:c3:b9:27:d2:85:d1:ce:ad:59:98:aa:
         f3:44:d7:22:3d:d7:f0:d6:24:a8:3a:ae:d5:9f:71:d5:00:92:
         29:b6:c3:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3VJR18LCiHa4pGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk
N2MyYzZlMTItODYxZS00OTBlLWIyMTAtOTEyNTE4NzU0ZWE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5t43qypypx/wv3V6DL3S6toxTM0qmBJT9Mxl
4jAHem+hdXS2miUHLvkNVpRfB6XL5W5odsUF34+sMPB81sJ1jizoKi/6O6fAnE0Z
P9GC7b+JLAcWmx8fFS1ylo78qT/t2W7Lfo/uzkC/TVWtmR++nRYn7GCyRvWZyU3u
+jN6ObNC8VF5ehSio8BRujnlL127Ggf1AHyveZL6+AP3Lk4sbOHskQGP4mAiZ39c
bdjKFBle2NqWXkUFlqdTMEpCiUcKTPz2zkdKmqsMyEhpXT3xw3hmg3Aa07p0TwLR
3x3x1lm5dm3FfBWscvYqlK4Ffi3f1G/rpg34SwUCV+7KyxoalQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGni1hnhtfdZuwec8grDMVPlE9m6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDA4NGY0NjQtMmNlYi0z
N2Q4LThlNDEtNDk1MTFkZmZkOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRr3wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFuTQsNn2f20hFwfNS8W16XEe9uJ1LYRXKlRwBa+RlU59NqDabYPfJJn
vJnkORwsXNkMOCgHbeeVQbIsyJcc03WpH2nE8cpGWsKJxoF3bQzaMf/gXtT7Julx
BY5D/5IIoTXOkSoDnFTkuxNWCpJJFOigGeypqc+UakGHLIaGP3Hag3vSQrIw776h
ZgsyZE5DIe8+rM4A2mqvCCc90F4glsQqERP6HpVMoj0Hce8t48GJ87fR0DvpFoVV
GAcZvZKepwbc7IeO/7SOIE5XvTX7rwL5Nnk/y3QXh6Ygu1CjGYXDuSfShdHOrVmY
qvNE1yI91/DWJKg6rtWfcdUAkim2ww8=
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:59:53 2026 by rpki-client