Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a081935-05e1-3ad6-9b89-9e728c9acfb2.roa
File:                     0a081935-05e1-3ad6-9b89-9e728c9acfb2.roa (raw, json)
Hash identifier:          Lj6ittIufi6UJXcwOLEIvisrBA9zMrzKoijSmer/l6k=
Subject key identifier:   50:AE:03:0D:D3:F8:28:79:42:40:9D:37:D4:B3:A8:EA:CC:2B:99:79
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C6ECB64FE6F1962281D00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a081935-05e1-3ad6-9b89-9e728c9acfb2.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.174.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:6e:cb:64:fe:6f:19:62:28:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=6bde62ad-6db8-4183-a3e5-2a2489336e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:91:a1:6e:2c:ad:d6:9a:bb:2f:62:cd:1c:ad:
                    06:df:15:7a:7a:04:dc:2a:2b:37:4c:63:2b:12:0b:
                    b5:90:36:89:e1:27:2c:73:6c:20:7a:b1:86:b0:dc:
                    aa:0e:e5:75:3f:30:f1:97:e1:c9:aa:5f:24:69:0b:
                    86:2d:68:90:ee:b0:e3:4f:66:ed:0a:04:24:dd:1a:
                    4d:9c:87:84:56:b0:32:b1:f6:55:a4:41:dc:e3:10:
                    6b:88:c4:cc:bb:d6:d1:04:43:d2:2e:e7:6d:e7:4a:
                    cb:b6:35:4e:00:1f:ad:ec:a3:a4:27:87:18:f2:50:
                    de:83:7c:85:85:81:73:99:15:fc:a8:31:9a:ba:ca:
                    3b:58:de:c1:01:cd:5e:6f:a4:5b:34:09:f0:86:c2:
                    d6:b6:79:fe:29:4e:58:8d:73:49:74:fd:01:c8:09:
                    b3:dd:50:a0:a3:f8:14:37:6f:72:66:92:04:34:4f:
                    44:51:8b:60:13:70:dd:6b:50:50:5d:b2:7e:3a:48:
                    61:90:87:ff:ed:e6:1c:93:2d:a3:72:8b:fd:d8:03:
                    39:b1:39:a1:b5:50:e0:8a:98:32:f4:c4:86:b5:12:
                    33:01:ef:99:fa:54:32:4a:9c:e5:ba:55:54:68:7b:
                    f2:5d:2c:27:36:1a:5c:e3:fc:25:f9:a4:8d:d9:f3:
                    db:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:AE:03:0D:D3:F8:28:79:42:40:9D:37:D4:B3:A8:EA:CC:2B:99:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0a081935-05e1-3ad6-9b89-9e728c9acfb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.174.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:0f:80:2f:22:25:52:d5:de:1d:5d:fa:91:12:6c:88:cf:93:
         f6:a2:f1:ed:72:6c:60:7b:49:68:69:99:ac:91:5c:19:27:24:
         c2:c5:02:d7:4e:ce:d6:fb:70:16:4e:94:9f:35:8b:e2:51:1b:
         b7:5d:77:26:d3:fc:d8:9c:c2:d1:92:59:ba:01:c9:89:b5:c7:
         2c:76:78:8f:a1:d1:17:50:7c:1b:52:1b:c8:b5:d4:e2:93:a4:
         d8:a9:a9:f9:e2:cb:db:34:3d:fb:8e:d7:7f:8f:e7:01:d0:33:
         fb:71:fe:73:32:54:4c:8e:0c:cf:68:07:f4:ed:f5:a1:95:95:
         7f:b2:81:d4:28:82:7d:8d:8e:38:49:f6:a4:ca:5c:8f:96:20:
         39:a1:da:4c:2a:d2:4e:7c:bd:eb:0f:5a:93:36:fd:2d:47:3b:
         2d:12:30:11:c5:89:51:bd:6f:9d:1e:ed:e3:09:18:4b:b7:a2:
         7f:8e:0e:0a:01:17:b1:9b:22:84:a5:8c:8d:6e:ce:af:e0:ed:
         be:05:98:a2:c3:08:aa:7b:df:54:5e:0e:4f:a4:37:c4:b1:d2:
         fc:bf:43:75:99:38:4a:6b:fd:60:63:a7:05:cc:87:1c:a9:33:
         ee:7d:1e:ea:84:4d:8a:19:a4:08:19:59:68:95:6d:be:8c:f0:
         43:cc:d8:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnG7LZP5vGWIoHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
NmJkZTYyYWQtNmRiOC00MTgzLWEzZTUtMmEyNDg5MzM2ZTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5Ghbiyt1pq7L2LNHK0G3xV6egTcKis3TGMr
Egu1kDaJ4Scsc2wgerGGsNyqDuV1PzDxl+HJql8kaQuGLWiQ7rDjT2btCgQk3RpN
nIeEVrAysfZVpEHc4xBriMTMu9bRBEPSLudt50rLtjVOAB+t7KOkJ4cY8lDeg3yF
hYFzmRX8qDGauso7WN7BAc1eb6RbNAnwhsLWtnn+KU5YjXNJdP0ByAmz3VCgo/gU
N29yZpIENE9EUYtgE3Dda1BQXbJ+OkhhkIf/7eYcky2jcov92AM5sTmhtVDgipgy
9MSGtRIzAe+Z+lQySpzlulVUaHvyXSwnNhpc4/wl+aSN2fPb2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFCuAw3T+Ch5QkCdN9SzqOrMK5l5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGEwODE5MzUtMDVlMS0z
YWQ2LTliODktOWU3MjhjOWFjZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARq7NMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEIPgC8iJVLV3h1d+pESbIjPk/ai8e1ybGB7SWhpmayRXBknJMLFAtdO
ztb7cBZOlJ81i+JRG7dddybT/NicwtGSWboByYm1xyx2eI+h0RdQfBtSG8i11OKT
pNipqfniy9s0PfuO13+P5wHQM/tx/nMyVEyODM9oB/Tt9aGVlX+ygdQogn2NjjhJ
9qTKXI+WIDmh2kwq0k58vesPWpM2/S1HOy0SMBHFiVG9b50e7eMJGEu3on+ODgoB
F7GbIoSljI1uzq/g7b4FmKLDCKp731ReDk+kN8Sx0vy/Q3WZOEpr/WBjpwXMhxyp
M+59HuqETYoZpAgZWWiVbb6M8EPM2Pk=
-----END CERTIFICATE-----
Generated at Wed Oct 15 23:31:31 2025 by rpki-client