Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dee331ab-ecd5-3c45-8cc9-567c9570f119.roa
File:                     dee331ab-ecd5-3c45-8cc9-567c9570f119.roa (raw, json)
Hash identifier:          CqROAkRwQuHMqQHEBfNV8jypRs8JnKBcKkKLxCsJLnI=
Subject key identifier:   51:E3:DE:3B:F5:A0:B1:D7:29:C9:1F:11:11:A9:D4:98:27:EB:93:33
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F43285849B5F83BC8C56709001AB6C580
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dee331ab-ecd5-3c45-8cc9-567c9570f119.roa
Signing time:             Thu 01 May 2025 17:15:18 +0000
ROA not before:           Thu 01 May 2025 17:15:18 +0000
ROA not after:            Wed 30 Jul 2025 17:15:18 +0000
asID:                     22773
IP address blocks:        70.161.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:f8:3b:c8:c5:67:09:00:1a:b6:c5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  1 17:15:18 2025 GMT
            Not After : Jul 30 17:15:18 2025 GMT
        Subject: CN=3f16d7a5-c697-4c05-938b-443e3b6d2e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:67:49:60:d0:80:e6:ce:8a:f3:f2:2b:28:12:
                    f9:57:c6:5d:2e:8b:4c:93:63:f8:cb:3a:b9:36:17:
                    db:40:79:01:d8:15:2e:8a:a6:71:8d:4c:be:bf:e1:
                    9d:38:df:80:bf:eb:76:3b:75:08:7e:56:96:96:0e:
                    fc:12:a9:b8:69:75:57:b4:1c:62:87:9c:af:e2:96:
                    0e:22:b2:a8:a4:3c:5b:27:d9:36:8b:cf:49:3d:47:
                    e2:cd:72:47:9a:6d:10:bb:7a:fb:20:28:67:e2:e2:
                    57:15:57:f8:1d:c9:b4:28:d2:4a:24:3e:d1:18:6a:
                    34:04:a3:78:a3:b8:ee:c5:ed:43:58:c6:c4:ab:2b:
                    5e:32:68:df:89:4b:d4:3d:ec:e8:08:c5:2f:15:ff:
                    7f:89:6a:7a:32:6a:7d:14:b6:44:03:48:c0:62:5e:
                    c1:10:cd:39:6c:24:d5:99:97:52:57:95:4d:13:15:
                    43:53:f1:c3:40:99:8f:c0:f4:1f:2a:8b:29:10:e2:
                    76:55:3b:f3:dc:34:30:23:f4:8a:d4:7c:7d:0b:fa:
                    82:fd:20:67:1d:51:1e:c8:2b:85:06:d8:23:1a:e2:
                    22:b6:74:b3:95:21:c2:31:63:ee:47:b9:41:21:c8:
                    50:ef:f8:a1:1d:fc:60:95:75:37:78:b4:3c:65:3d:
                    2a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E3:DE:3B:F5:A0:B1:D7:29:C9:1F:11:11:A9:D4:98:27:EB:93:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dee331ab-ecd5-3c45-8cc9-567c9570f119.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.161.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:44:41:34:56:a0:71:5a:ed:8b:79:2e:80:1a:91:79:a8:e8:
         c5:c4:1c:54:6b:79:48:6a:04:2f:45:4d:dd:24:43:a6:65:66:
         1c:4f:95:a5:c7:fb:a4:8a:d1:af:7f:5b:65:cf:6c:39:2f:23:
         4b:a8:34:20:87:15:3b:a0:5c:29:64:9b:a3:b9:b0:34:fa:f3:
         81:75:0f:c8:9b:e0:1f:7b:f6:23:4c:fe:31:55:47:9c:a1:1b:
         a3:f2:b9:7e:4a:04:aa:79:0a:37:69:0f:db:3d:98:50:ca:55:
         ab:70:7f:f2:56:a9:92:2d:a6:87:c3:d7:c1:98:95:05:7f:41:
         19:5e:94:47:de:ec:f7:e1:25:78:ed:30:be:e9:4b:87:30:3e:
         44:af:9e:8b:3b:a8:d6:84:1d:ad:9b:6b:3e:b9:3a:d2:5e:f3:
         bc:28:57:29:1c:4d:14:0c:62:9e:bf:4d:5b:15:43:78:8c:a6:
         0c:40:ea:c1:f7:c0:5b:e8:8a:b8:7e:41:7f:9b:e8:39:b7:86:
         3f:93:c8:5d:e9:7b:96:17:a2:d6:84:fa:d8:f4:8d:15:cd:4c:
         43:7f:1c:fe:88:51:d3:fa:a6:9f:c5:18:2e:8a:a3:7f:a8:23:
         ec:7e:47:6a:af:d8:c4:a9:5d:80:26:8c:51:3e:7c:9e:b2:4c:
         00:70:dd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:40:47 2025 by rpki-client