Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25fccc5b-d599-3b7e-8aee-b969b09cf35a.roa
File:                     25fccc5b-d599-3b7e-8aee-b969b09cf35a.roa (raw, json)
Hash identifier:          +Wtt8lgtMgsweS+LQfPN3rnWr4qImyvezdS6wA1GxUY=
Subject key identifier:   7F:28:6A:64:08:F6:50:DD:48:41:64:B9:CB:B2:75:4E:EF:15:87:38
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EFE122FB2F9195444A52522A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25fccc5b-d599-3b7e-8aee-b969b09cf35a.roa
Signing time:             Sat 29 Aug 2026 01:00:12 +0000
ROA not before:           Sat 29 Aug 2026 01:00:12 +0000
ROA not after:            Fri 27 Nov 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        70.174.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fe:12:2f:b2:f9:19:54:44:a5:25:22:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug 29 01:00:12 2026 GMT
            Not After : Nov 27 02:00:12 2026 GMT
        Subject: CN=f89491f6-3a80-4632-9de7-e204d61c373b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9c:9f:64:d7:b1:a5:de:45:87:0d:d7:d9:03:
                    28:cc:ac:8f:66:0a:16:a0:c4:94:b5:ea:d1:3e:18:
                    5d:1d:e7:57:64:99:eb:4a:c1:4f:30:ba:2e:f9:06:
                    32:59:67:73:ae:0f:bd:0b:89:22:f8:03:c5:b9:bb:
                    dd:cc:fe:62:b1:c3:0b:bb:00:52:14:d5:69:2a:b5:
                    5a:81:58:06:f8:ad:0c:f7:ca:f6:e8:bc:18:97:8f:
                    e8:a4:8f:29:d4:8f:4c:7d:18:e2:ec:8e:2c:fd:0c:
                    d3:6e:1b:44:35:af:d1:46:26:1d:85:e6:88:23:dc:
                    d9:61:09:16:59:9d:ae:b8:f1:f3:0b:8f:91:67:78:
                    29:09:e6:ce:99:0e:a3:0a:08:59:f7:b8:90:53:62:
                    6b:15:e1:ab:d6:bb:88:ca:b6:7e:33:5d:b8:fe:6f:
                    ec:01:53:87:7b:21:9a:52:13:21:bb:2a:07:8b:79:
                    7d:21:ca:07:85:33:35:a0:7a:a0:f1:f6:5d:ef:2d:
                    01:32:79:61:9f:b9:94:b4:4d:a3:3b:f9:c1:d9:7b:
                    36:4b:0d:f9:3b:be:16:b5:7c:59:64:be:b4:a2:60:
                    f8:41:e8:45:ae:aa:32:98:94:1b:53:07:b9:4e:0b:
                    be:5e:fb:d1:e8:68:f0:6e:ba:3f:2d:99:fc:a6:93:
                    1d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:28:6A:64:08:F6:50:DD:48:41:64:B9:CB:B2:75:4E:EF:15:87:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25fccc5b-d599-3b7e-8aee-b969b09cf35a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.174.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:12:17:91:1b:bb:65:4f:3c:cf:40:21:eb:42:d0:56:6c:39:
         4b:82:56:f6:84:04:1a:c1:21:be:24:9d:0f:e5:08:d3:c1:c6:
         be:b4:be:02:aa:ee:e4:e6:c2:ea:19:c5:67:0a:7e:9b:4d:3d:
         2e:7f:a3:3a:39:40:27:a5:02:21:93:a3:20:ad:d8:65:f7:6d:
         c6:ab:d2:25:96:5a:91:c6:a4:07:e4:e2:d0:53:57:36:6d:01:
         6d:9f:78:a9:b6:1c:11:fd:73:16:c4:d6:26:90:b6:66:5b:62:
         f0:6f:9a:6d:c6:2e:23:14:dc:9b:38:a9:90:b6:7d:80:22:ef:
         09:1e:07:c8:c4:e0:0a:ee:02:1f:64:ab:e6:99:9e:45:36:6e:
         8b:eb:0e:c3:60:1f:e4:ea:9f:9c:a8:eb:fb:4c:fd:58:94:47:
         f5:43:7e:b4:30:db:ca:9a:d6:83:45:85:97:49:6d:7a:91:b2:
         d0:2b:4c:26:af:d0:3f:f1:1e:42:11:38:c0:4f:40:82:f6:e5:
         d9:ce:34:2b:ad:6a:4b:3a:58:01:7a:6c:df:05:0a:6a:76:06:
         71:df:6d:5a:52:66:75:d7:32:34:21:0e:23:01:e6:2d:af:8d:
         c8:53:47:13:71:c8:ce:94:fc:30:36:81:8f:ea:84:ac:34:8e:
         85:07:3d:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+Ei+y+RlURKUlIqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk
Zjg5NDkxZjYtM2E4MC00NjMyLTlkZTctZTIwNGQ2MWMzNzNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJyfZNexpd5Fhw3X2QMozKyPZgoWoMSUterR
PhhdHedXZJnrSsFPMLou+QYyWWdzrg+9C4ki+APFubvdzP5iscMLuwBSFNVpKrVa
gVgG+K0M98r26LwYl4/opI8p1I9MfRji7I4s/QzTbhtENa/RRiYdheaII9zZYQkW
WZ2uuPHzC4+RZ3gpCebOmQ6jCghZ97iQU2JrFeGr1ruIyrZ+M124/m/sAVOHeyGa
UhMhuyoHi3l9IcoHhTM1oHqg8fZd7y0BMnlhn7mUtE2jO/nB2Xs2Sw35O74WtXxZ
ZL60omD4QehFrqoymJQbUwe5Tgu+XvvR6Gjwbro/LZn8ppMdXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH8oamQI9lDdSEFkucuydU7vFYc4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjVmY2NjNWItZDU5OS0z
YjdlLThhZWUtYjk2OWIwOWNmMzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq6uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADcSF5Ebu2VPPM9AIetC0FZsOUuCVvaEBBrBIb4knQ/lCNPBxr60vgKq
7uTmwuoZxWcKfptNPS5/ozo5QCelAiGToyCt2GX3bcar0iWWWpHGpAfk4tBTVzZt
AW2feKm2HBH9cxbE1iaQtmZbYvBvmm3GLiMU3Js4qZC2fYAi7wkeB8jE4AruAh9k
q+aZnkU2bovrDsNgH+Tqn5yo6/tM/ViUR/VDfrQw28qa1oNFhZdJbXqRstArTCav
0D/xHkIROMBPQIL25dnONCutaks6WAF6bN8FCmp2BnHfbVpSZnXXMjQhDiMB5i2v
jchTRxNxyM6U/DA2gY/qhKw0joUHPck=
-----END CERTIFICATE-----
Generated at Fri Sep 18 13:49:36 2026 by rpki-client