Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4df1945d-b175-3358-9728-8d5d1393d953.roa
File:                     4df1945d-b175-3358-9728-8d5d1393d953.roa (raw, json)
Hash identifier:          vU4luoBZYLUxxeEhtceS+h4KnhO5lLeAttsbKjxWiDc=
Subject key identifier:   19:73:D2:D7:E2:DB:D3:15:E1:BA:1E:F9:56:11:2F:45:B4:A5:64:EA
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4112BFD985ECFEA7F1BC590D
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4df1945d-b175-3358-9728-8d5d1393d953.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        70.176.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:bf:d9:85:ec:fe:a7:f1:bc:59:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=b4353d21-00d8-4b59-bdeb-69e1ff3b330a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:d2:87:21:f6:c2:f6:93:49:55:99:12:b7:f9:
                    bf:67:e8:f7:65:10:46:9f:9b:2c:e6:77:da:0f:5d:
                    c2:48:54:35:8a:ec:b5:dc:af:85:d3:65:28:a5:7a:
                    b2:4b:6f:1d:98:c4:75:42:f5:64:73:42:53:55:87:
                    98:d2:d7:fe:85:41:03:52:4b:bd:a8:90:77:e9:08:
                    df:72:6a:ee:cb:61:db:34:aa:c8:39:e9:5a:3f:f5:
                    a7:f8:91:2a:d6:c8:03:17:81:3e:7e:d4:ac:71:d8:
                    1a:bb:f0:70:9c:72:3a:81:84:68:39:4e:c0:48:6f:
                    18:be:36:38:58:ff:80:22:ff:75:38:68:6c:f6:85:
                    1b:3c:b3:02:76:43:f9:c6:3e:96:e6:e2:50:36:b5:
                    aa:41:14:f9:38:d5:1c:dc:35:1e:ad:72:a0:52:30:
                    4b:54:f2:d5:21:cb:cd:3c:6f:26:b6:8f:04:35:1e:
                    db:80:40:6f:a9:73:56:08:f3:17:77:9d:81:71:46:
                    b0:b6:98:4f:2a:24:f2:ef:f4:c6:8b:50:ad:0a:28:
                    42:d2:0c:1f:2c:02:c9:fd:6b:20:ad:f2:0f:18:9f:
                    47:87:5b:3a:8c:86:e3:47:50:3d:84:de:50:b5:38:
                    bd:7b:b0:6c:13:05:9a:73:65:bf:d1:ed:42:03:5b:
                    b8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:73:D2:D7:E2:DB:D3:15:E1:BA:1E:F9:56:11:2F:45:B4:A5:64:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4df1945d-b175-3358-9728-8d5d1393d953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.176.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:78:6b:5d:f1:69:a1:01:eb:73:d0:29:c9:b3:d7:ac:f1:b7:
         bc:8d:a5:b1:23:f6:e8:00:38:22:7e:c8:f2:03:e5:b9:47:8b:
         85:00:50:56:b3:dd:9e:c5:a1:f3:71:91:71:9c:50:25:98:62:
         43:bd:4d:7c:28:15:19:fe:92:a6:b7:6b:3f:d1:03:34:a6:8e:
         07:49:45:39:80:b3:55:1d:76:bd:f7:7b:e5:60:de:9c:64:a3:
         cf:88:11:77:6f:dc:3a:d7:a6:d8:01:75:24:18:88:80:6b:69:
         a7:87:d8:c7:41:ed:72:e5:7b:b7:66:bd:d1:04:74:59:6a:c1:
         8e:66:7a:13:ec:70:8e:5b:4b:cb:e1:b2:e0:f4:e4:d0:3c:3b:
         34:c7:b5:2c:63:ca:57:f9:ce:0a:dc:ae:e9:40:4e:af:69:23:
         4b:d6:7b:5d:bf:48:47:f1:03:54:a0:85:87:06:46:fa:87:38:
         48:c8:ca:8b:8a:da:5e:9e:9f:dc:29:18:86:4c:5f:97:0d:a4:
         4f:0e:87:f7:f7:e3:dc:4c:87:ce:32:9c:a5:97:b5:ac:58:e5:
         6a:e9:39:1b:4f:c6:86:b6:05:d9:97:5f:0f:dc:f7:4f:28:a3:
         10:5f:1c:5d:5e:91:7a:44:85:3a:bd:d3:57:ba:8f:94:d6:f6:
         fb:ad:e9:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 18:00:38 2026 by rpki-client