Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17a877b0-9db1-3ecf-827b-f00e027750df.roa
File:                     17a877b0-9db1-3ecf-827b-f00e027750df.roa (raw, json)
Hash identifier:          ZvWTUDsp64aHAaFy1oZHniN9OlBoTDCcpEKArED7T4k=
Subject key identifier:   EB:EB:03:01:ED:32:2F:83:9D:A1:A8:C4:FA:B7:FD:8F:91:E2:BB:42
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B206703E7BD1FF38014EEBF80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17a877b0-9db1-3ecf-827b-f00e027750df.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.170.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:03:e7:bd:1f:f3:80:14:ee:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=21d163cd-6478-496a-bf3e-504ff22384c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:88:20:24:0f:8b:41:7b:b4:07:21:a7:3f:c8:
                    b4:a2:e0:ca:a1:93:6b:81:9d:b9:92:ba:e8:b4:e4:
                    6a:6b:dd:af:f7:1f:11:21:69:5b:69:5e:a0:34:30:
                    d0:a2:69:81:2a:53:de:3b:88:7b:03:42:78:be:2a:
                    3e:40:19:bc:1e:16:f2:bb:27:40:7d:b8:64:45:c6:
                    d2:ae:b1:39:fc:ba:d3:99:d0:da:f4:79:f8:6e:d3:
                    78:24:19:6f:34:84:e8:b8:01:f4:ea:f5:6b:7b:04:
                    3d:6e:d9:6f:b5:69:57:52:3b:5a:db:3d:22:66:19:
                    be:8c:0a:5e:14:b1:ed:cf:91:51:08:bb:4b:bf:1a:
                    51:c5:73:2d:af:df:f8:10:86:21:92:86:3a:c0:e1:
                    02:09:23:fa:01:e0:a8:3e:5d:0f:23:3d:70:4f:a7:
                    a3:b1:42:a9:e6:15:31:bf:41:3b:1d:9c:de:48:8b:
                    5d:c5:0d:40:c2:86:fe:40:77:ba:24:d5:d8:79:80:
                    f7:e6:9f:25:b5:b7:bb:65:81:1f:a3:cb:69:ec:65:
                    bd:4a:a8:93:a7:ae:18:e3:9a:79:5e:cd:c1:79:86:
                    d2:f0:1b:77:18:ba:c6:d3:03:cb:84:1d:dc:b5:bf:
                    9c:98:ff:03:2a:56:2f:40:07:52:54:bd:86:df:35:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EB:03:01:ED:32:2F:83:9D:A1:A8:C4:FA:B7:FD:8F:91:E2:BB:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/17a877b0-9db1-3ecf-827b-f00e027750df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.170.19.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:00:c5:b4:33:b0:30:7b:1e:b9:bd:01:1f:8d:24:fc:fb:ed:
         be:7f:c4:4f:8d:dd:12:a8:35:10:8f:e2:c0:89:c2:8f:c8:d2:
         c5:74:fb:95:9f:af:c0:2f:53:2d:90:66:06:57:ba:de:e1:9b:
         6b:f9:80:31:d9:c7:df:87:83:1e:aa:c9:69:34:9c:2a:e0:43:
         f3:f2:a5:ce:7d:ca:ee:b1:47:be:54:5c:52:50:2f:03:0c:e9:
         f5:57:e5:fb:be:4d:8a:39:b5:3f:07:54:11:d5:a8:d7:98:ea:
         9d:14:dc:56:0f:14:0a:ea:12:7d:28:62:83:07:b7:17:f4:a1:
         b1:47:d5:81:4d:23:ef:82:b8:39:fa:5c:8a:46:88:d6:07:a5:
         7e:90:7b:20:7b:cd:b4:30:46:32:41:20:1c:52:47:63:2a:6c:
         dd:06:f1:c6:51:15:a2:c1:8b:f2:0d:2a:47:a9:42:9d:62:d7:
         68:cf:50:62:b9:1e:4b:3f:cc:f4:29:7d:c0:f5:22:27:e1:6a:
         c9:25:25:77:94:11:79:da:5c:ac:56:78:a4:e7:e3:ea:dd:1b:
         6f:73:e6:f1:04:1e:7d:4d:b1:49:0a:49:56:fe:ee:17:2d:c9:
         d9:34:d2:52:31:6f:dc:ce:22:84:33:8c:df:14:36:dd:6b:d7:
         e9:41:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:48:02 2025 by rpki-client