Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/22deac1c-1bbd-3dd2-a475-ad60fd202cea.roa
File:                     22deac1c-1bbd-3dd2-a475-ad60fd202cea.roa (raw, json)
Hash identifier:          PVSg1IcQ3lsmcf7++qUknPupZOoxO6WNzvUZWVSiOy8=
Subject key identifier:   4A:13:D2:55:C0:64:B3:F8:03:5F:B9:A1:89:E2:5E:A0:3E:8F:E1:3A
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584E640FC9794C10811993903300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/22deac1c-1bbd-3dd2-a475-ad60fd202cea.roa
Signing time:             Sat 04 Jul 2026 21:00:12 +0000
ROA not before:           Sat 04 Jul 2026 21:00:12 +0000
ROA not after:            Fri 02 Oct 2026 21:00:12 +0000
asID:                     577
IP address blocks:        70.53.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:64:0f:c9:79:4c:10:81:19:93:90:33:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Jul  4 21:00:12 2026 GMT
            Not After : Oct  2 21:00:12 2026 GMT
        Subject: CN=c63d1fd5-ecf9-49df-863d-68aa6fa3a6b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:0e:2f:69:f5:25:9b:b9:dc:25:6b:ba:e9:
                    80:91:e3:d8:6a:24:d0:ee:77:51:ec:cc:c4:58:e3:
                    b9:68:26:53:6f:2d:ed:be:83:9e:9c:25:4a:72:3b:
                    e5:04:c8:e3:31:06:0b:d2:7a:d1:9a:32:7f:5a:17:
                    99:59:67:43:f1:66:a1:e4:af:d8:ec:a3:13:fe:cd:
                    a9:81:66:a7:e4:15:a4:22:69:15:e9:db:41:c4:36:
                    e4:31:a8:ee:10:ef:15:ef:c1:ed:75:3a:26:09:41:
                    03:c3:af:27:0d:99:8a:72:04:db:83:dd:30:75:7b:
                    e9:b0:c4:84:de:fc:04:3d:80:5d:b5:a0:3d:8d:ba:
                    18:e6:84:41:e3:51:7a:da:75:e9:c5:fa:56:b0:90:
                    17:23:29:8a:fd:38:12:64:55:61:ad:2d:fd:a2:34:
                    7b:e6:ab:cf:28:77:9a:ff:a4:08:28:3d:79:ee:14:
                    59:0f:de:bd:e4:c0:5b:b9:f2:59:a7:36:75:a3:34:
                    48:34:3f:a2:2f:3c:a0:42:a0:01:72:79:9b:5f:4b:
                    47:7f:d0:dd:96:08:d4:8d:2c:b4:6c:c0:55:97:ad:
                    ca:25:d6:19:36:12:b2:7b:54:4b:50:b7:6e:b7:e9:
                    74:9a:fc:86:c7:ef:08:f1:0d:2f:a0:be:a3:e2:f7:
                    3e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:13:D2:55:C0:64:B3:F8:03:5F:B9:A1:89:E2:5E:A0:3E:8F:E1:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/22deac1c-1bbd-3dd2-a475-ad60fd202cea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.53.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:a1:8a:24:1b:ec:39:85:8e:68:52:4f:b4:c5:ea:7e:e4:31:
         8d:b7:c7:19:6a:db:33:7a:7f:ae:0a:1a:e1:f7:f7:7e:c4:56:
         4a:e1:86:6d:e5:14:b0:19:ae:b0:eb:3c:aa:a8:67:e1:d9:53:
         b1:42:fc:b1:12:44:1a:16:ac:fd:f4:66:8b:e0:92:40:af:e0:
         a7:0b:f3:93:bf:cc:b4:f0:da:62:3b:28:a0:fe:18:25:4c:19:
         2e:bc:1d:d4:5d:0e:60:08:30:e7:ee:54:fd:6d:52:00:e2:1f:
         1c:7b:59:39:a3:52:0d:ce:b8:05:94:ea:60:33:d3:1b:92:8b:
         92:ab:57:d2:16:79:7c:4f:70:33:37:2b:6c:c4:77:0f:0b:8b:
         c1:8e:bf:f2:51:74:14:76:72:5c:db:20:9e:89:35:64:28:db:
         87:c7:ae:e2:5a:8d:e2:65:83:d5:df:82:1d:ce:f9:0f:d8:b4:
         cf:e3:61:d5:b8:01:ce:b1:1b:bb:20:7f:02:48:92:e1:fa:d5:
         1d:77:de:b7:67:e0:a5:52:de:3f:c1:43:ad:44:07:f2:15:e7:
         2f:49:56:79:d8:03:65:71:d7:69:bb:c2:99:a0:2f:66:a9:f1:
         79:5f:7b:04:e5:f6:66:75:e5:fe:41:23:72:ef:fb:af:59:fe:
         14:d6:09:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 09:53:45 2026 by rpki-client