Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/019d30fc-7030-39c8-aae6-962dcf80ea35.roa
File:                     019d30fc-7030-39c8-aae6-962dcf80ea35.roa (raw, json)
Hash identifier:          we+177dsRxipHo2HBWA2EJ2Np6mAnKVoluQSLtLxvGc=
Subject key identifier:   85:22:8F:6F:39:3F:D5:CD:82:6E:22:9E:E5:1E:E3:D9:EE:B5:54:F1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F539FD7559A0F2AD4CBCC7580
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/019d30fc-7030-39c8-aae6-962dcf80ea35.roa
Signing time:             Mon 28 Sep 2026 16:29:36 +0000
ROA not before:           Mon 28 Sep 2026 16:29:36 +0000
ROA not after:            Sun 27 Dec 2026 17:29:36 +0000
asID:                     22773
IP address blocks:        70.163.76.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:9f:d7:55:9a:0f:2a:d4:cb:cc:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 28 16:29:36 2026 GMT
            Not After : Dec 27 17:29:36 2026 GMT
        Subject: CN=2750cea6-9b8c-4273-889a-a9a72011a8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f7:3b:1d:2d:23:1a:e2:4b:86:a0:af:7c:da:
                    7d:d9:f0:1b:2e:2f:0d:92:43:5d:18:db:b5:2c:6b:
                    7c:14:70:45:30:04:a4:5a:3d:78:52:ac:0b:78:ed:
                    ea:04:f8:54:f1:c2:e5:88:a1:6b:aa:ac:e5:d6:0c:
                    5b:c7:4e:e3:38:43:b5:80:af:75:35:20:08:38:f5:
                    e6:9e:23:25:84:d1:6c:1b:f5:f5:27:59:69:39:28:
                    cb:a5:40:2d:0f:02:73:0e:cd:4d:02:fe:41:60:2f:
                    36:85:7c:0f:60:77:f5:4c:46:02:12:a0:42:9f:d3:
                    f0:5d:ec:b9:7a:dd:a9:7d:2f:14:d6:6c:3f:ae:c0:
                    ec:c7:d6:fb:c2:52:06:89:6f:97:14:f4:a8:79:c8:
                    82:91:4b:73:ea:02:42:84:d9:d9:56:35:ea:05:1e:
                    46:f6:72:1e:78:7a:8f:5e:b6:43:df:49:61:ae:b0:
                    2f:bf:84:1f:af:b4:df:65:bf:5d:57:89:3a:43:8f:
                    d5:93:c2:b3:83:d3:b7:b9:c7:83:7b:79:b5:87:5f:
                    42:52:7f:fa:10:01:b2:83:b9:70:52:4b:5c:4a:ac:
                    c4:12:65:d8:ef:c2:cd:cd:2f:78:37:87:57:44:63:
                    f5:ab:7c:7c:71:ed:b2:2f:aa:22:ee:96:82:6a:0a:
                    35:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:22:8F:6F:39:3F:D5:CD:82:6E:22:9E:E5:1E:E3:D9:EE:B5:54:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/019d30fc-7030-39c8-aae6-962dcf80ea35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.163.76.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:24:d9:16:c3:57:fe:f1:3f:15:c8:2b:03:86:97:b3:a2:60:
         06:ac:8e:b7:e4:75:5d:6c:68:71:6b:fb:f0:82:71:f5:55:24:
         a5:7c:ab:18:75:f7:a2:3d:a2:e7:fa:93:d9:40:ed:72:22:b1:
         99:e1:4b:0e:3e:a5:89:c2:6d:a1:89:60:ff:b6:13:19:a7:bd:
         14:33:c6:16:17:a3:6f:ea:20:12:3d:45:42:85:36:a1:06:d2:
         5f:15:ca:4e:e3:a3:ca:ef:88:fb:bb:fb:d2:d5:d0:2d:dc:8e:
         fb:76:b5:1f:6a:af:14:0e:01:01:53:8f:2f:97:ad:3c:6f:52:
         9f:df:23:1c:d4:5f:24:27:b9:8a:00:9d:f0:40:0f:ff:f1:84:
         1e:14:2c:5f:aa:28:aa:b3:3a:2d:08:72:01:cc:0e:bc:83:0a:
         e8:f6:61:e7:32:dd:95:74:90:47:ca:cd:b2:ec:94:b4:e5:6d:
         fc:dd:f4:c3:8c:19:cb:d5:d9:df:2f:b7:97:5a:65:d7:ff:07:
         61:0b:df:be:46:74:24:da:f8:14:f1:1f:60:57:fe:45:4e:60:
         22:aa:b9:53:14:ee:d2:a7:94:9a:d7:fc:a1:4e:fd:1b:ff:7a:
         1d:98:54:96:2f:f2:d3:a2:b2:3e:26:b8:e1:2e:cb:79:2e:fb:
         7b:ee:8e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:59:33 2026 by rpki-client