Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/442e1918-e52e-3607-b74e-0ff9fb5bb775.roa
File:                     442e1918-e52e-3607-b74e-0ff9fb5bb775.roa (raw, json)
Hash identifier:          5pynHKoiA1G4kp1X52FFouf5s0uy+TqxqjcYPWzicqc=
Subject key identifier:   1A:33:07:DA:AB:3B:D7:3B:CE:1F:9F:15:94:BE:2B:60:67:55:D1:B1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E751C82D1EB168679F5DDC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/442e1918-e52e-3607-b74e-0ff9fb5bb775.roa
Signing time:             Thu 19 Jun 2025 14:36:51 +0000
ROA not before:           Thu 19 Jun 2025 14:36:51 +0000
ROA not after:            Wed 17 Sep 2025 14:36:51 +0000
asID:                     22773
IP address blocks:        70.190.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:75:1c:82:d1:eb:16:86:79:f5:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:36:51 2025 GMT
            Not After : Sep 17 14:36:51 2025 GMT
        Subject: CN=43295b90-ce53-4216-8506-0f81b9ddf7ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f9:9e:26:ef:26:f0:f1:5b:c3:3a:15:1b:21:
                    85:4f:eb:8c:a9:1c:c2:2e:bc:85:f6:31:9b:82:80:
                    03:cd:71:91:e8:35:97:00:81:b8:12:a6:bb:67:b1:
                    48:68:38:6e:42:ad:cf:63:05:5b:5f:88:a4:80:27:
                    38:a6:96:c1:7c:18:79:bd:19:86:37:0b:b4:3c:ba:
                    0f:aa:7d:8d:10:58:66:f3:c8:59:f4:22:32:60:d2:
                    88:ab:d4:98:53:91:c1:fc:30:9e:f8:32:5c:b4:ef:
                    20:2e:bc:58:06:34:36:1e:5f:82:46:05:45:23:06:
                    3c:85:32:e2:41:18:5a:55:f8:f0:c9:97:66:86:9a:
                    de:b1:f4:15:5b:c5:22:c0:2f:b7:a6:b8:81:27:90:
                    9c:76:88:a5:dd:45:c3:6d:a6:27:7f:de:c1:4c:0f:
                    d5:0b:f9:e2:4e:94:a3:52:28:06:a2:92:80:de:d1:
                    5b:01:41:2b:c4:a5:ac:54:03:35:43:82:0c:42:3c:
                    e2:b9:27:b3:f7:f3:92:5e:e8:b2:70:7c:a7:4e:5f:
                    6d:79:a1:07:98:28:43:53:20:f3:fb:b6:e1:52:3d:
                    59:2c:ec:19:8b:e4:54:d6:8e:e8:b8:6e:8f:22:6f:
                    77:59:d8:6b:e7:1f:e0:81:57:e3:d5:1b:09:a4:67:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:33:07:DA:AB:3B:D7:3B:CE:1F:9F:15:94:BE:2B:60:67:55:D1:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/442e1918-e52e-3607-b74e-0ff9fb5bb775.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.190.120.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:96:e5:a6:ee:29:d9:b4:2a:cd:94:f5:eb:d6:62:e1:93:20:
         d2:fb:ce:c8:38:9d:d8:29:b3:8f:cb:78:f0:ea:b3:c6:09:0a:
         76:00:b6:fb:2d:7d:42:b3:17:5a:31:2a:cd:bb:70:4a:9d:22:
         a8:60:c4:0d:d2:27:16:a9:fc:d9:a0:5a:18:dc:0e:79:03:92:
         89:8a:2c:ff:c0:e2:01:3e:8c:73:cf:25:5c:2a:4a:65:af:b4:
         87:38:6b:02:05:f7:52:a6:8b:3f:bc:4b:46:fc:6d:05:d2:dd:
         8f:4e:a1:bc:1e:74:dd:14:a6:09:64:92:3b:cd:88:12:56:f8:
         71:29:96:9a:53:de:cc:5e:11:64:74:40:f8:e6:19:1d:26:f4:
         e9:63:ae:8e:0a:a3:ba:11:83:05:8c:c5:10:bc:2f:b9:80:a9:
         1d:bc:6e:2f:2b:ed:75:3c:49:49:f1:24:68:52:4d:ef:d0:9b:
         66:62:06:b5:34:6c:50:7a:9a:20:66:0e:08:5a:2f:4c:c0:29:
         f1:88:d4:2f:0a:d4:3b:7c:61:7d:94:b0:fc:1d:01:8f:04:1e:
         5e:ad:94:f7:7a:d8:e3:6a:c4:1f:52:e9:0a:e9:74:f2:b1:bc:
         6b:b1:22:57:0c:19:ac:3a:e6:58:c8:21:93:2d:ca:db:86:5e:
         00:69:10:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dRyC0esWhnn13cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDYxOTE0MzY1MVoXDTI1MDkxNzE0MzY1MVowLzEtMCsGA1UEAxMk
NDMyOTViOTAtY2U1My00MjE2LTg1MDYtMGY4MWI5ZGRmN2FlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvmeJu8m8PFbwzoVGyGFT+uMqRzCLryF9jGb
goADzXGR6DWXAIG4Eqa7Z7FIaDhuQq3PYwVbX4ikgCc4ppbBfBh5vRmGNwu0PLoP
qn2NEFhm88hZ9CIyYNKIq9SYU5HB/DCe+DJctO8gLrxYBjQ2Hl+CRgVFIwY8hTLi
QRhaVfjwyZdmhpresfQVW8UiwC+3priBJ5Ccdoil3UXDbaYnf97BTA/VC/niTpSj
UigGopKA3tFbAUErxKWsVAM1Q4IMQjziuSez9/OSXuiycHynTl9teaEHmChDUyDz
+7bhUj1ZLOwZi+RU1o7ouG6PIm93Wdhr5x/ggVfj1RsJpGfwTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBozB9qrO9c7zh+fFZS+K2BnVdGxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDQyZTE5MTgtZTUyZS0z
NjA3LWI3NGUtMGZmOWZiNWJiNzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr54MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAqW5abuKdm0Ks2U9evWYuGTINL7zsg4ndgps4/LePDqs8YJCnYAtvst
fUKzF1oxKs27cEqdIqhgxA3SJxap/NmgWhjcDnkDkomKLP/A4gE+jHPPJVwqSmWv
tIc4awIF91Kmiz+8S0b8bQXS3Y9OobwedN0UpglkkjvNiBJW+HEplppT3sxeEWR0
QPjmGR0m9Oljro4Ko7oRgwWMxRC8L7mAqR28bi8r7XU8SUnxJGhSTe/Qm2ZiBrU0
bFB6miBmDghaL0zAKfGI1C8K1Dt8YX2UsPwdAY8EHl6tlPd62ONqxB9S6QrpdPKx
vGuxIlcMGaw65ljIIZMtytuGXgBpEK8=
-----END CERTIFICATE-----
Generated at Tue Jul 1 03:00:50 2025 by rpki-client