Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d92d8fbd-aa3d-395f-8f0f-85b2f73e2dee.roa
File:                     d92d8fbd-aa3d-395f-8f0f-85b2f73e2dee.roa (raw, json)
Hash identifier:          1LNQZxcfYwqxkPEuNP8z16yj17Jt3R3+yLWMJL6k8/s=
Subject key identifier:   69:2E:2C:A5:C2:9C:09:AC:98:6B:26:BD:DE:4A:3E:CC:F6:FD:0C:74
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A40A8565374296B49E3361040
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d92d8fbd-aa3d-395f-8f0f-85b2f73e2dee.roa
Signing time:             Fri 20 Jun 2025 09:31:41 +0000
ROA not before:           Fri 20 Jun 2025 09:31:41 +0000
ROA not after:            Thu 18 Sep 2025 09:31:41 +0000
asID:                     22773
IP address blocks:        70.173.32.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:40:a8:56:53:74:29:6b:49:e3:36:10:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 20 09:31:41 2025 GMT
            Not After : Sep 18 09:31:41 2025 GMT
        Subject: CN=e4d4017c-694d-4cde-b609-94a5c9d5a2a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:42:af:0d:3d:1d:ad:f8:2d:b6:90:9e:df:ce:
                    f0:cf:d5:ca:0f:c8:75:1c:59:74:f2:76:cc:79:5c:
                    4d:38:9d:7a:e9:8e:15:7a:7c:bd:80:83:6d:14:60:
                    0d:8c:4d:df:b7:9c:35:c2:b5:3e:f8:aa:e9:74:81:
                    6b:a6:4a:c8:dd:80:89:80:18:fa:c6:e8:90:cd:6b:
                    f3:2b:f0:e2:8c:0a:81:d3:94:0a:78:48:fc:12:8a:
                    44:1f:1a:1d:a0:7e:45:2e:f7:10:f2:15:1f:ab:90:
                    6d:f3:bc:5b:a3:8c:dc:65:2d:29:43:ca:56:71:67:
                    5b:2c:41:9f:ce:f4:52:03:38:6d:10:4e:65:3e:7b:
                    4c:87:31:77:53:66:34:14:fb:33:42:7f:47:67:93:
                    12:ab:64:1b:a1:50:1f:ac:9d:f1:92:9a:8a:1a:0f:
                    f9:21:d1:99:52:83:d4:df:c4:08:61:95:a2:66:5d:
                    e3:e5:45:a8:12:73:f6:24:80:0f:d3:a3:60:60:ff:
                    36:25:e6:67:00:36:ee:a7:ca:d4:88:83:07:ef:bc:
                    f9:ae:52:c0:22:64:59:eb:54:1c:69:55:ae:58:fe:
                    29:5d:1b:6a:b5:82:bc:ff:35:73:e2:33:7b:21:40:
                    ae:4f:cd:fb:02:a3:27:7d:6f:80:2a:7d:9d:34:df:
                    ea:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2E:2C:A5:C2:9C:09:AC:98:6B:26:BD:DE:4A:3E:CC:F6:FD:0C:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d92d8fbd-aa3d-395f-8f0f-85b2f73e2dee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.173.32.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:18:67:ad:66:a8:3d:04:d7:4c:79:6c:59:93:a6:6a:70:33:
         f1:05:fe:a0:78:8d:34:e9:d5:66:9b:24:9c:9f:7b:c9:a5:2b:
         8f:6b:70:77:0f:bc:23:a8:fc:2c:ef:24:2c:a7:5f:db:74:2c:
         e0:43:a3:00:b0:3b:67:83:4a:a6:f5:90:82:da:af:cd:82:a4:
         61:bc:b7:2d:b0:69:b2:de:ce:13:91:09:b6:fe:7b:6a:02:e9:
         8e:4a:08:c8:29:c3:a7:82:25:4e:f0:e1:42:33:24:b6:10:64:
         cf:ea:6f:7f:93:a7:ca:aa:02:a3:87:23:08:0e:54:33:f3:cc:
         b6:f9:90:06:60:25:85:ad:34:d3:e6:1c:35:ff:fd:6d:ab:f5:
         ca:82:c7:cf:60:f2:bb:22:8c:ae:87:83:a7:ae:49:03:47:6c:
         37:2c:97:c4:26:1e:7b:ec:0e:11:fe:5a:bd:23:c1:73:f1:c0:
         df:7f:55:c9:81:76:86:00:48:d3:83:d4:11:dd:1f:06:f8:62:
         66:bf:d8:ec:d0:ff:f8:c1:73:eb:7e:09:8a:1b:82:6a:4a:76:
         39:a4:b7:52:b8:b4:db:b8:31:f4:75:c7:4d:9f:34:c5:fe:86:
         5a:74:62:82:19:58:fa:fc:2f:0a:03:4c:46:2a:00:96:28:1d:
         8c:e8:14:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:57:38 2025 by rpki-client