Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/887b17a0-fde6-3bc8-aedf-663ce3282d89.roa
File:                     887b17a0-fde6-3bc8-aedf-663ce3282d89.roa (raw, json)
Hash identifier:          ymLZyubGfUqon7dmgYn5PkyqB4eqdIhPeZ10UBEZkcU=
Subject key identifier:   B5:6B:05:EB:AE:4B:5E:E5:5D:E0:12:23:3A:2B:7C:3F:7A:E5:8D:8F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3E750FEDAC5A7302798322C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/887b17a0-fde6-3bc8-aedf-663ce3282d89.roa
Signing time:             Thu 19 Jun 2025 14:36:45 +0000
ROA not before:           Thu 19 Jun 2025 14:36:45 +0000
ROA not after:            Wed 17 Sep 2025 14:36:45 +0000
asID:                     22773
IP address blocks:        70.190.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:75:0f:ed:ac:5a:73:02:79:83:22:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 14:36:45 2025 GMT
            Not After : Sep 17 14:36:45 2025 GMT
        Subject: CN=bf90d61d-44aa-4fea-9d01-d8ceaaefdbe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:86:1a:00:84:a8:18:01:c1:f9:da:37:51:8b:
                    78:85:8a:42:f0:e9:c4:ec:a3:40:a0:cd:ec:a5:d3:
                    f8:b3:af:9b:46:da:86:92:fa:5e:49:6b:76:2b:b4:
                    7b:e5:df:2b:68:f0:b4:1e:10:2c:49:f9:30:78:3e:
                    8c:51:e1:12:74:3d:e3:31:1a:78:28:cc:52:7f:a8:
                    4a:9b:8d:cb:ba:92:36:95:c8:83:b9:4e:1f:56:55:
                    44:4b:19:de:0a:e0:89:56:a4:c7:fc:60:76:f4:00:
                    24:88:fa:10:fd:f4:5b:39:4c:4e:7b:6f:30:4f:9b:
                    7a:f7:70:b8:bf:80:8c:f5:57:ad:34:c8:bf:8c:f4:
                    a3:58:c8:57:da:93:dd:3f:ae:e6:46:65:0c:0d:51:
                    50:f2:e7:ee:b3:86:4b:cf:01:e1:91:f9:6a:13:d4:
                    41:21:57:5c:dc:d7:6c:91:71:eb:99:72:58:26:d8:
                    b4:cc:a5:21:cd:a8:38:a9:82:0d:fa:9a:8b:6b:29:
                    98:c8:7f:f5:1c:c8:c0:a1:7b:9c:c6:1d:dc:3f:6a:
                    6b:b9:7f:d3:61:91:19:89:7c:e3:d6:6b:a5:c9:6c:
                    f8:ac:7b:7b:09:7a:86:75:a1:bd:51:aa:17:2b:1a:
                    1e:88:c3:e2:b5:b7:95:9b:85:ae:f4:7f:75:27:3a:
                    ed:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:6B:05:EB:AE:4B:5E:E5:5D:E0:12:23:3A:2B:7C:3F:7A:E5:8D:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/887b17a0-fde6-3bc8-aedf-663ce3282d89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.190.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:d7:a0:27:fa:86:56:9d:3b:a4:75:5c:48:be:d8:5d:f2:60:
         84:1b:b8:54:67:61:fb:57:a2:f6:58:20:17:de:c5:1d:38:7a:
         4d:60:c1:0d:38:3e:4f:39:d8:f6:3e:ee:22:17:10:ad:e2:fa:
         c1:7b:7c:78:93:a7:4b:93:fe:7c:5d:d7:b4:25:9a:e4:ca:ec:
         17:ab:ea:44:bc:ba:d0:15:be:6b:0e:3d:7d:79:25:74:25:7e:
         b8:8b:c0:d4:2b:91:f5:14:87:1d:0c:cc:58:a0:31:14:53:bb:
         69:8a:30:f6:1e:24:e4:4c:1e:7d:78:c6:57:ac:ae:ab:45:51:
         01:00:6a:f7:a5:17:03:27:6e:f0:6a:de:d3:46:6b:73:99:19:
         77:ef:31:f6:5a:8a:d6:c3:26:37:95:63:93:6d:0e:51:06:86:
         58:00:b0:ff:43:95:58:ce:ae:ec:86:da:ed:75:91:8a:f6:64:
         41:82:12:99:89:da:1d:e4:39:b9:40:91:a8:97:f2:1a:db:19:
         b1:bc:6f:33:f0:44:1f:e8:fe:5c:e1:cc:31:42:f3:d0:e2:7f:
         86:7a:f2:64:7a:2e:c0:ee:42:d2:b4:b7:6b:d4:61:4c:24:97:
         be:72:8a:a3:f3:87:dd:9e:f0:51:cb:3e:a2:bd:1b:2c:93:6e:
         4b:29:62:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+dQ/trFpzAnmDIsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDYxOTE0MzY0NVoXDTI1MDkxNzE0MzY0NVowLzEtMCsGA1UEAxMk
YmY5MGQ2MWQtNDRhYS00ZmVhLTlkMDEtZDhjZWFhZWZkYmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYYaAISoGAHB+do3UYt4hYpC8OnE7KNAoM3s
pdP4s6+bRtqGkvpeSWt2K7R75d8raPC0HhAsSfkweD6MUeESdD3jMRp4KMxSf6hK
m43LupI2lciDuU4fVlVESxneCuCJVqTH/GB29AAkiPoQ/fRbOUxOe28wT5t693C4
v4CM9VetNMi/jPSjWMhX2pPdP67mRmUMDVFQ8ufus4ZLzwHhkflqE9RBIVdc3Nds
kXHrmXJYJti0zKUhzag4qYIN+pqLaymYyH/1HMjAoXucxh3cP2pruX/TYZEZiXzj
1mulyWz4rHt7CXqGdaG9UaoXKxoeiMPitbeVm4Wu9H91JzrtOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLVrBeuuS17lXeASIzorfD965Y2PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvODg3YjE3YTAtZmRlNi0z
YmM4LWFlZGYtNjYzY2UzMjgyZDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr5gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJbXoCf6hladO6R1XEi+2F3yYIQbuFRnYftXovZYIBfexR04ek1gwQ04
Pk852PY+7iIXEK3i+sF7fHiTp0uT/nxd17QlmuTK7Ber6kS8utAVvmsOPX15JXQl
friLwNQrkfUUhx0MzFigMRRTu2mKMPYeJORMHn14xlesrqtFUQEAavelFwMnbvBq
3tNGa3OZGXfvMfZaitbDJjeVY5NtDlEGhlgAsP9DlVjOruyG2u11kYr2ZEGCEpmJ
2h3kOblAkaiX8hrbGbG8bzPwRB/o/lzhzDFC89Dif4Z68mR6LsDuQtK0t2vUYUwk
l75yiqPzh92e8FHLPqK9GyyTbkspYmg=
-----END CERTIFICATE-----
Generated at Tue Jul 1 08:17:42 2025 by rpki-client