Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e994f65b-516b-3847-af17-40f1feab3951.roa
File:                     e994f65b-516b-3847-af17-40f1feab3951.roa (raw, json)
Hash identifier:          8PSeI25kQGxz2jeooJTu7UW6JUqeqSS/oVVz7LQJdFk=
Subject key identifier:   63:83:D7:07:F3:49:25:97:2C:13:C3:A3:32:C6:7A:F2:2C:81:F9:06
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DD7BD7DDE34F131812B6080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e994f65b-516b-3847-af17-40f1feab3951.roa
Signing time:             Thu 19 Jun 2025 09:19:46 +0000
ROA not before:           Thu 19 Jun 2025 09:19:46 +0000
ROA not after:            Wed 17 Sep 2025 09:19:46 +0000
asID:                     22773
IP address blocks:        70.163.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:d7:bd:7d:de:34:f1:31:81:2b:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 09:19:46 2025 GMT
            Not After : Sep 17 09:19:46 2025 GMT
        Subject: CN=c999001d-8786-42ad-8d0d-66ee4b517d61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5f:67:53:55:70:5f:b0:5c:f0:8b:18:62:38:
                    89:45:96:fe:ee:c4:69:dc:ab:c8:d0:b2:16:27:6d:
                    8a:3b:cf:bc:47:a4:89:fc:92:17:3a:c7:9e:5b:16:
                    5b:5d:65:5f:e8:14:21:de:0f:f1:78:eb:9e:9f:23:
                    a3:a2:2f:22:09:ef:b2:f3:0e:39:e1:b9:e0:af:7a:
                    56:4d:88:29:2c:33:6a:03:82:20:3c:a2:df:9d:c1:
                    8a:17:86:7d:a9:f5:31:75:fc:a8:c1:1f:2f:9b:e6:
                    fb:aa:30:62:3e:36:8c:cb:57:1f:c2:df:03:af:e9:
                    9a:e6:88:9c:f5:b6:d1:65:84:10:7e:45:8f:47:ab:
                    3e:2f:47:79:a3:3d:3d:69:24:e4:c1:c5:44:d8:a9:
                    2d:bd:33:15:79:7f:fe:89:39:99:5c:40:87:b1:c2:
                    a6:70:66:40:95:e8:50:ab:a8:6f:8e:bb:ed:ee:8c:
                    f2:da:65:d0:b7:5e:4d:ab:c7:38:16:58:c8:33:4f:
                    36:bd:3b:d4:d2:e1:44:da:8e:5d:8d:13:34:10:f9:
                    1f:97:63:9a:12:54:97:29:0e:1e:08:13:3c:34:d1:
                    82:66:d1:a1:07:4b:35:e2:58:4f:9b:58:75:5e:0b:
                    ed:7f:3b:70:50:27:4c:73:be:ea:5a:a7:a5:7b:55:
                    b1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:83:D7:07:F3:49:25:97:2C:13:C3:A3:32:C6:7A:F2:2C:81:F9:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e994f65b-516b-3847-af17-40f1feab3951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.163.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:9f:1e:69:ff:01:31:d8:c4:3a:c7:b6:03:5a:a7:40:6e:ee:
         00:7d:fb:b8:b2:38:d5:a2:74:64:a8:b0:66:d4:a0:aa:c7:ea:
         1c:dc:29:9f:4b:1b:15:94:1c:6f:18:fe:60:65:37:02:06:31:
         ef:09:b3:36:0f:f0:b7:a0:a7:b8:95:15:0e:1c:7b:8b:05:75:
         4d:b5:7f:7b:e3:4c:b0:e8:85:b9:e9:2a:81:17:ce:9a:ff:fb:
         08:bf:ab:db:73:6a:f5:17:fd:04:43:c5:5a:b2:be:51:92:78:
         53:70:16:70:07:32:77:d2:0f:ef:c3:db:0f:9c:9f:76:3c:a8:
         dd:60:aa:d3:40:3c:01:e0:f7:1c:97:80:55:64:3f:63:cb:0f:
         21:6e:ba:f0:23:05:1e:f0:66:9b:63:bc:4e:cc:0a:e8:45:fa:
         fa:53:2c:7b:5c:ab:a5:70:1f:8b:47:03:60:fd:36:33:22:42:
         62:91:5f:17:44:cd:5a:ec:af:27:2b:22:aa:8c:29:a8:b0:47:
         5e:34:73:19:49:50:36:5f:cb:be:d9:42:a4:57:6c:8d:a9:ec:
         4b:a8:76:7f:b1:16:bf:d9:e1:73:17:ad:33:31:15:56:fa:8c:
         27:71:98:03:10:6c:75:2f:97:fc:96:42:e5:2e:5c:df:d6:e1:
         8d:7d:db:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo917193jTxMYErYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDYxOTA5MTk0NloXDTI1MDkxNzA5MTk0NlowLzEtMCsGA1UEAxMk
Yzk5OTAwMWQtODc4Ni00MmFkLThkMGQtNjZlZTRiNTE3ZDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF9nU1VwX7Bc8IsYYjiJRZb+7sRp3KvI0LIW
J22KO8+8R6SJ/JIXOseeWxZbXWVf6BQh3g/xeOuenyOjoi8iCe+y8w454bngr3pW
TYgpLDNqA4IgPKLfncGKF4Z9qfUxdfyowR8vm+b7qjBiPjaMy1cfwt8Dr+ma5oic
9bbRZYQQfkWPR6s+L0d5oz09aSTkwcVE2KktvTMVeX/+iTmZXECHscKmcGZAlehQ
q6hvjrvt7ozy2mXQt15Nq8c4FljIM082vTvU0uFE2o5djRM0EPkfl2OaElSXKQ4e
CBM8NNGCZtGhB0s14lhPm1h1XgvtfztwUCdMc77qWqele1WxCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGOD1wfzSSWXLBPDozLGevIsgfkGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTk5NGY2NWItNTE2Yi0z
ODQ3LWFmMTctNDBmMWZlYWIzOTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRqPQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI+fHmn/ATHYxDrHtgNap0Bu7gB9+7iyONWidGSosGbUoKrH6hzcKZ9L
GxWUHG8Y/mBlNwIGMe8JszYP8Legp7iVFQ4ce4sFdU21f3vjTLDohbnpKoEXzpr/
+wi/q9tzavUX/QRDxVqyvlGSeFNwFnAHMnfSD+/D2w+cn3Y8qN1gqtNAPAHg9xyX
gFVkP2PLDyFuuvAjBR7wZptjvE7MCuhF+vpTLHtcq6VwH4tHA2D9NjMiQmKRXxdE
zVrsrycrIqqMKaiwR140cxlJUDZfy77ZQqRXbI2p7Euodn+xFr/Z4XMXrTMxFVb6
jCdxmAMQbHUvl/yWQuUuXN/W4Y192yo=
-----END CERTIFICATE-----
Generated at Wed Jul 2 12:25:04 2025 by rpki-client