Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8c8b9c39-da90-3266-b171-cda346ca6c9d.roa
File:                     8c8b9c39-da90-3266-b171-cda346ca6c9d.roa (raw, json)
Hash identifier:          PomsPzL+IZDmaGZM8fHA4C9/+tyAdS0WH5RpseCDJZ4=
Subject key identifier:   18:B5:23:45:4C:A9:B2:C8:FE:15:A8:89:3D:9A:D7:E8:37:95:BF:B0
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DD819AFDCDBADBC18470840
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8c8b9c39-da90-3266-b171-cda346ca6c9d.roa
Signing time:             Thu 19 Jun 2025 09:20:29 +0000
ROA not before:           Thu 19 Jun 2025 09:20:29 +0000
ROA not after:            Wed 17 Sep 2025 09:20:29 +0000
asID:                     22773
IP address blocks:        70.174.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:d8:19:af:dc:db:ad:bc:18:47:08:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 09:20:29 2025 GMT
            Not After : Sep 17 09:20:29 2025 GMT
        Subject: CN=77d02ad9-8e83-435e-beee-0473a5e12f2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b4:8b:86:76:6c:bb:02:b3:78:11:76:d7:f0:
                    85:d3:59:4f:42:45:43:30:1e:35:42:b6:77:63:d6:
                    ec:10:d6:93:10:2f:f0:3b:54:29:ef:0a:f2:92:dc:
                    c5:ef:58:b7:4a:81:94:a7:f3:36:50:90:fb:a5:71:
                    cf:d4:8b:62:cc:2b:8d:ed:e0:66:df:5b:61:ac:c9:
                    01:f3:6b:08:4a:0a:db:71:df:5f:01:25:52:5c:82:
                    00:a4:af:18:79:ac:1b:47:1b:fb:36:7e:c6:09:5f:
                    c0:28:b9:51:70:4f:c2:5c:e2:8c:ff:da:a0:de:04:
                    a6:ac:dc:6a:61:9a:37:81:e1:75:62:ec:ab:01:fe:
                    c9:8d:4d:fe:43:18:00:ab:c5:ba:90:b4:7d:0f:b8:
                    48:ae:41:20:32:5f:4f:0e:5c:39:24:92:10:f9:d3:
                    f2:3f:0b:33:35:25:21:9e:d7:77:75:1c:30:b1:dc:
                    cb:8e:32:25:01:5e:19:94:bc:55:31:94:79:40:e6:
                    ab:56:ff:ac:d8:bc:a0:a8:dc:4b:76:08:fb:b2:71:
                    0a:c9:5a:bd:11:ae:99:8f:a9:81:20:94:23:99:20:
                    98:25:5c:cd:c0:43:aa:2e:b6:36:9b:9b:1b:bf:0f:
                    6a:4c:02:ab:53:69:ba:16:3f:27:bc:9e:d3:1f:1a:
                    da:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B5:23:45:4C:A9:B2:C8:FE:15:A8:89:3D:9A:D7:E8:37:95:BF:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8c8b9c39-da90-3266-b171-cda346ca6c9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.174.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:27:85:a7:f7:3d:ab:87:06:61:99:66:61:93:02:bb:04:a1:
         73:00:c1:d4:a3:68:53:a7:cd:c2:5b:1c:db:ee:0e:3c:6a:bf:
         a4:7b:3c:79:de:f3:37:b3:7b:42:17:a6:96:2d:f5:10:2f:01:
         5c:5a:f6:7b:cb:f5:42:d2:dc:af:ef:d3:ae:cc:07:51:dc:f4:
         43:63:04:51:6d:c9:1a:a4:35:df:34:68:56:ff:fc:b4:69:f3:
         59:fb:6f:e3:d4:3f:c4:a6:40:cb:da:32:31:66:a0:cf:ac:82:
         9d:ef:ac:55:af:ba:0e:94:67:f4:39:6b:48:2d:f5:d1:9c:72:
         b1:28:89:63:18:a4:54:bf:7a:2e:d8:e9:36:1c:18:d4:a5:0f:
         43:0f:fa:e7:01:c4:21:ae:d6:6e:92:d5:c4:44:19:ea:7e:b7:
         a6:0f:35:0f:99:ef:70:42:1a:d4:e4:74:6b:29:3c:54:84:07:
         83:12:4c:21:3b:47:49:f4:79:e6:bd:31:1f:cb:73:c6:f4:4b:
         7c:47:87:05:d5:f0:8a:13:f7:47:5a:83:27:97:e9:16:de:62:
         d8:9f:06:ab:14:ca:f0:69:af:28:07:ce:ac:df:9e:33:d9:c8:
         66:e5:63:0e:dd:72:6e:05:5b:c1:50:d5:24:cf:8e:af:dd:22:
         7b:28:67:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:22:40 2025 by rpki-client