Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00ed0de7-8f7f-3526-a76f-14cdd89185be.roa
File:                     00ed0de7-8f7f-3526-a76f-14cdd89185be.roa (raw, json)
Hash identifier:          fG/BovZMM3pAblOI2Zgs3lQuv3qzuNOL/OxW6mbM/ns=
Subject key identifier:   55:21:34:F2:7F:6E:76:0E:A1:EA:89:46:F8:4E:FC:51:06:EF:4D:F7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C65520E958F3996428000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00ed0de7-8f7f-3526-a76f-14cdd89185be.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.163.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:65:52:0e:95:8f:39:96:42:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=83319cb2-9bc0-467a-899b-6f0daff776e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:3a:17:54:60:3d:5f:f8:20:e2:0a:15:d2:f8:
                    86:f5:2f:25:62:23:15:70:49:39:06:01:87:95:c6:
                    0c:e4:86:7d:e8:13:28:ec:26:ee:24:f7:b2:12:59:
                    10:03:d5:bb:e0:16:4d:5c:3e:b8:f5:70:6e:4a:3f:
                    60:61:bb:c0:eb:70:47:46:db:0f:ea:35:f2:bd:89:
                    4c:5f:07:c4:89:3a:bd:fe:c8:12:df:6c:3c:62:4d:
                    08:95:70:de:82:2c:7b:bb:91:44:01:c5:8e:57:1a:
                    68:d7:bc:b6:72:b1:ca:53:c5:10:35:9b:81:36:e3:
                    a5:0a:3c:94:d4:37:a6:8f:af:f7:a0:65:54:80:2c:
                    30:8c:c3:bf:54:c7:dc:ca:84:61:66:54:9f:e9:3a:
                    c6:63:b6:5a:52:62:7d:62:c7:75:b5:b3:47:b5:be:
                    5b:5d:82:9d:8f:3d:e4:ef:cb:0f:d0:b2:36:87:a8:
                    72:cb:93:4c:72:24:f9:72:e0:04:e3:ec:4a:4b:91:
                    aa:43:90:30:7b:1b:96:9d:09:eb:a4:93:d5:56:3c:
                    dd:a9:79:3c:ac:82:c9:e0:60:97:11:ad:5f:38:62:
                    cb:44:1e:43:43:c8:23:36:68:f7:e7:18:c5:30:7c:
                    30:d7:53:d5:5a:5f:a6:b9:bc:bf:78:9b:aa:ba:4a:
                    66:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:21:34:F2:7F:6E:76:0E:A1:EA:89:46:F8:4E:FC:51:06:EF:4D:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00ed0de7-8f7f-3526-a76f-14cdd89185be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.163.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:23:5a:90:df:e6:5f:14:40:d2:3f:2f:aa:9f:d9:65:eb:39:
         cc:5d:5a:af:f4:f2:35:5c:bc:59:19:ac:65:a5:da:cf:6e:ed:
         12:a7:82:f3:07:34:8e:c2:15:b5:64:0d:5a:8b:39:85:d7:85:
         6c:6d:70:b3:95:73:b9:fa:aa:ff:0a:8f:60:f1:79:38:b4:d7:
         58:a1:46:0f:67:78:78:d2:3c:f2:7f:21:33:81:b9:01:96:c3:
         5b:98:c2:8d:32:24:4d:5c:e4:79:cd:2c:de:b8:35:62:bc:e0:
         9d:63:66:ff:47:46:db:a2:7e:20:73:44:3a:a3:cf:47:b9:ed:
         71:5b:46:75:6e:fd:47:76:3d:09:2d:32:07:01:b9:12:f7:d5:
         da:93:62:4c:7c:9e:37:22:79:a5:01:08:88:6d:cb:93:66:bc:
         bf:25:32:19:00:40:f8:58:96:aa:e6:35:02:f7:ff:a8:70:c1:
         50:8d:75:36:1c:93:74:24:9b:47:b8:95:ec:e7:5b:fd:45:6f:
         0b:b8:5b:04:56:90:e4:5b:60:6e:b4:0f:a5:5a:cf:71:fd:3d:
         60:93:d5:a6:49:2c:10:88:df:14:ab:ec:31:94:da:a5:f4:48:
         db:94:4d:95:0c:b0:80:22:6c:75:48:c2:27:aa:97:1b:71:5a:
         1d:10:7a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 01:57:27 2025 by rpki-client