Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/470073f3-fcfa-3e53-a2f8-4acadbae4d89.roa
File:                     470073f3-fcfa-3e53-a2f8-4acadbae4d89.roa (raw, json)
Hash identifier:          i9h03RS9Xw27/xpoRFa3rVbTBKI9QacQvnCaAi6EbWE=
Subject key identifier:   2C:E0:4D:C5:95:F2:2D:08:3B:28:62:DD:6F:87:19:7B:25:72:9B:11
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F43DD7DABBCCC1C72D5D99280
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/470073f3-fcfa-3e53-a2f8-4acadbae4d89.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        70.180.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:7d:ab:bc:cc:1c:72:d5:d9:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=e46ba6ab-ee5c-4a9d-84c1-ce6ebcbbd7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:7c:e0:b2:62:48:a5:76:27:3b:50:65:87:
                    03:88:05:f7:a6:48:f5:98:d5:4a:13:ff:cc:3a:04:
                    99:ed:b5:4c:da:53:77:d4:db:7b:d2:46:2f:dc:e5:
                    c7:44:05:fb:2b:77:75:e8:46:e0:01:98:e9:fe:e8:
                    8f:2b:63:6f:c8:97:15:f0:fd:cf:32:0a:33:f2:14:
                    b7:05:ad:f6:30:ac:3c:35:e4:32:d7:40:54:c7:32:
                    30:fc:09:48:8f:ae:87:62:5f:4f:e9:a9:b5:5e:d7:
                    d1:0c:26:77:58:7c:51:ed:a7:0e:70:1c:ff:c3:af:
                    d7:70:d5:2c:de:cf:7e:eb:5d:98:48:0a:39:27:58:
                    dd:e8:cb:96:a4:23:b2:ed:22:37:d0:61:5d:85:df:
                    92:e6:a4:d4:be:63:32:10:f7:9a:fa:38:cf:5d:57:
                    7a:62:08:ce:81:9b:ab:77:5f:46:2c:80:b2:55:6a:
                    47:d8:2e:36:20:32:db:d9:98:8d:dd:e8:b1:85:be:
                    15:d2:66:f7:b4:f8:00:97:8d:a7:85:84:93:c6:60:
                    f1:bd:7b:fd:32:c7:d2:11:53:de:5a:6e:2a:44:fd:
                    5e:79:fd:e0:e3:37:d1:66:47:a7:2c:97:89:73:a8:
                    21:ba:b4:55:95:00:b9:ea:87:e3:3f:7d:59:cc:6d:
                    fa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:E0:4D:C5:95:F2:2D:08:3B:28:62:DD:6F:87:19:7B:25:72:9B:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/470073f3-fcfa-3e53-a2f8-4acadbae4d89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.180.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:1a:7f:05:41:26:89:09:06:8b:72:97:8b:5a:66:c8:87:ec:
         40:92:e4:96:10:4d:13:64:bf:29:05:5d:6c:2a:35:0d:f0:7f:
         69:eb:65:6f:8b:80:0c:10:b7:c9:ae:9b:ad:72:fc:6e:e8:0a:
         2f:19:d8:e9:f7:dc:3d:19:0e:1b:e3:bb:9a:73:27:7c:ec:0a:
         c4:56:e0:54:68:89:95:07:f0:a4:81:4b:3d:d0:e1:d5:06:3b:
         54:80:04:07:fc:84:af:ed:cd:7f:d4:a2:07:bc:d8:88:c6:74:
         13:b8:16:f4:e5:9f:ae:1e:e8:67:2b:51:65:54:71:9e:1f:00:
         6a:ff:3c:ca:d3:3c:96:d7:b6:12:20:97:66:e5:00:0c:f1:e8:
         b2:05:72:14:c5:c8:57:5c:8e:66:a6:7d:e0:ef:d0:21:c9:3d:
         83:98:11:bf:0c:45:3d:cd:1d:07:a1:02:f2:34:16:77:b0:66:
         c3:de:7b:58:58:91:78:e9:6c:25:4e:aa:5d:de:c0:76:3b:a1:
         b1:a4:c5:b8:30:c9:95:12:88:5f:02:5f:94:87:36:98:a0:e3:
         15:84:12:3c:36:1f:e7:e4:1f:50:3b:87:15:d0:d0:e2:96:56:
         18:18:47:87:e4:71:c6:dc:cf:ec:a2:e2:d2:fd:1b:75:b2:de:
         c0:cd:2a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:34:35 2026 by rpki-client