Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b16be61a-238c-3ea0-87ab-f38b754044b9.roa
File:                     b16be61a-238c-3ea0-87ab-f38b754044b9.roa (raw, json)
Hash identifier:          oPvZ45XkX7dJaB2iVBY8eViUtuyh8isDcVvLFdnwL+A=
Subject key identifier:   01:8F:FF:FD:1C:00:93:95:57:FC:7B:AE:85:22:9F:69:3F:05:3F:24
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F587BF61CA97B32C46E46D
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b16be61a-238c-3ea0-87ab-f38b754044b9.roa
Signing time:             Thu 01 May 2025 17:09:51 +0000
ROA not before:           Thu 01 May 2025 17:09:51 +0000
ROA not after:            Wed 30 Jul 2025 17:09:51 +0000
asID:                     22773
IP address blocks:        70.181.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f5:87:bf:61:ca:97:b3:2c:46:e4:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:09:51 2025 GMT
            Not After : Jul 30 17:09:51 2025 GMT
        Subject: CN=255b423a-3bbd-4888-84a0-422c50c88261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:32:60:78:f3:83:12:e5:18:38:70:0a:19:97:
                    a4:86:26:cd:54:0f:9e:b9:98:d0:e4:f0:45:86:df:
                    5b:42:c9:c5:ed:c7:d9:e9:4b:1e:30:8d:49:4b:7b:
                    d8:52:05:62:9b:9a:21:12:09:65:74:d4:2c:24:a3:
                    6d:81:0f:72:cc:99:78:90:9a:65:90:0b:53:da:9a:
                    85:e3:f1:4a:22:f2:07:75:c2:20:0c:21:56:2e:e7:
                    51:ad:11:d7:ab:79:44:1a:a9:8b:62:e9:ff:e1:0a:
                    30:1b:ef:4b:4e:c3:01:8e:08:50:79:f9:73:4f:62:
                    7d:3f:45:1e:04:ae:de:e2:fb:df:35:18:6e:5a:f0:
                    43:67:64:08:52:47:06:4f:74:7e:e9:40:c9:92:58:
                    07:fa:f2:b2:69:8d:f0:11:74:22:c6:fa:d6:8e:41:
                    bd:ff:05:fb:28:19:a4:d2:58:38:c5:3e:57:92:22:
                    a9:9f:97:62:a4:27:13:53:4a:68:cd:f7:3a:46:4d:
                    42:23:05:3a:bc:ab:31:69:62:87:29:d5:85:8d:47:
                    da:98:36:d4:71:d3:d9:d4:a7:d1:5c:65:85:83:d1:
                    5c:33:2a:e8:8f:15:6a:74:ad:33:2a:d3:a6:61:f0:
                    47:0a:ed:0f:8e:89:12:0c:37:73:58:4f:37:e4:ab:
                    0f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8F:FF:FD:1C:00:93:95:57:FC:7B:AE:85:22:9F:69:3F:05:3F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b16be61a-238c-3ea0-87ab-f38b754044b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.181.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:c3:f6:f0:25:43:ab:63:c5:dd:64:fe:60:7e:4b:74:ed:59:
         be:4b:4b:b0:f7:a2:f6:12:22:bc:4b:63:92:6a:54:df:48:25:
         f1:b9:1d:12:9b:70:77:64:ff:e2:f4:cd:c9:b7:f8:38:48:c8:
         b6:fa:a9:71:e0:76:56:57:a2:bb:45:4a:8c:d6:b3:fd:9a:3e:
         5a:b1:16:87:0f:13:47:e8:02:1e:55:52:a7:fa:2a:98:5a:e4:
         95:51:ed:30:17:2a:da:5d:e9:63:a0:22:80:29:a5:22:1b:60:
         04:97:23:88:2b:5e:19:12:2c:d6:35:a1:a4:d2:44:2c:1c:a2:
         05:1f:eb:6e:24:03:d6:cf:57:83:cf:4f:68:97:bf:36:08:15:
         69:d5:9d:43:fd:21:4b:7d:7b:d6:34:f0:a2:14:9c:30:53:3c:
         c9:af:35:96:15:ee:1c:cb:83:d2:1d:67:e0:af:a5:21:36:36:
         71:40:95:e5:98:15:11:b2:c1:dd:c9:40:cc:f2:6e:0c:d5:ba:
         bc:3a:79:41:67:d3:45:5d:6d:40:59:7c:9f:bf:07:21:de:66:
         57:d7:5b:22:12:e5:82:6a:80:f2:a3:ad:be:f3:47:f7:b5:29:
         75:d2:77:46:4a:ab:4e:68:25:66:9c:0b:b4:87:73:1f:39:9a:
         83:14:22:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 15:38:40 2025 by rpki-client