Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10154a48-b795-34b4-8e68-cdcb24837976.roa
File:                     10154a48-b795-34b4-8e68-cdcb24837976.roa (raw, json)
Hash identifier:          UTY3Uk0c+nR1o5SWbsHq3/E1w4x8NtGVHZfImUzT1Kw=
Subject key identifier:   24:8A:69:CB:11:7E:E7:ED:DC:1B:35:27:89:70:CD:46:54:8E:2E:C3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C5F218305F3765159C600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10154a48-b795-34b4-8e68-cdcb24837976.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.162.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:5f:21:83:05:f3:76:51:59:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=a851f3d9-8c29-4c8a-b668-2de68b2c97d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:44:8a:b2:50:89:84:2b:61:13:75:d8:de:43:
                    c5:a3:aa:ae:e5:cd:d7:cc:71:6d:59:3f:7a:42:74:
                    8d:df:bb:02:63:00:82:40:d9:64:d6:30:a4:32:01:
                    6e:e7:81:f2:14:92:6f:28:09:67:bf:e1:7e:d1:bf:
                    eb:fa:8f:0a:ea:ff:34:09:98:2c:b4:ad:29:78:06:
                    b5:09:f3:01:32:29:96:58:b7:5f:f6:1f:5d:f9:f0:
                    75:c9:8c:c4:f8:db:c9:9d:16:36:b4:dc:af:33:82:
                    c7:52:60:a1:23:81:4b:8d:31:1f:de:86:0d:ba:53:
                    d5:c5:74:cc:67:64:20:77:49:17:2d:33:bb:80:7b:
                    2f:c2:c7:f1:59:7f:74:a1:72:8c:ed:0f:7b:34:63:
                    fe:1b:55:21:ad:3b:8e:3d:c7:bd:41:d7:a1:72:cf:
                    8e:af:ec:43:66:c0:a4:7a:05:e9:c5:42:13:a0:3b:
                    cf:f3:a9:0a:16:b0:8b:db:60:89:b0:71:54:58:cc:
                    8c:49:6d:23:3f:e2:21:2f:cc:78:1d:20:d1:15:6d:
                    ac:f1:d5:28:75:31:f6:a7:3e:d3:0b:47:c3:7c:f3:
                    48:42:f3:cc:3c:97:dd:42:48:49:74:92:5e:30:76:
                    72:88:58:d8:0c:d7:b6:83:38:2a:f4:2c:f5:10:62:
                    0e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:8A:69:CB:11:7E:E7:ED:DC:1B:35:27:89:70:CD:46:54:8E:2E:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/10154a48-b795-34b4-8e68-cdcb24837976.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.162.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e7:3b:8a:cb:25:bd:74:93:45:b6:83:b9:42:2e:6d:18:63:
         cc:2c:50:84:07:8b:86:39:20:2c:a3:be:b6:0b:f7:03:a7:c6:
         99:86:1f:9e:44:9d:2d:e8:31:05:63:b1:64:48:2b:40:68:16:
         59:8e:57:33:4e:ee:6f:21:6f:4c:15:24:a9:ec:09:3c:65:0a:
         ab:53:13:73:ca:1e:ac:46:96:f0:df:94:c7:96:31:c8:55:f6:
         c1:f7:43:37:6d:00:63:0a:89:8c:8a:27:d6:1f:3c:a6:6e:37:
         a2:99:d9:0e:4d:dc:c0:3b:48:ce:df:3a:6a:89:da:c0:60:d0:
         aa:97:ae:f5:08:f6:06:2e:ae:50:3d:54:bf:86:01:32:b1:fd:
         ea:e6:af:ab:24:f5:6e:de:23:28:d2:ea:58:02:a9:36:d7:12:
         03:e8:4d:ac:02:48:a4:5e:cc:51:90:22:2b:6a:11:56:e9:f7:
         15:d8:4d:01:1d:cb:c6:11:f4:93:2e:99:e6:89:04:23:5b:98:
         a0:1c:5f:63:a0:94:40:04:d5:37:9d:56:bc:d4:0d:92:82:53:
         5b:97:9e:cd:26:97:e7:14:93:14:42:89:13:44:92:49:89:8c:
         32:49:32:2d:93:7c:d5:37:2a:eb:ab:6d:da:e4:10:c3:30:cd:
         3d:45:95:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:38:53 2025 by rpki-client