Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2997f9d3-7a33-3b2a-8ad0-da24e20eebe5.roa
File:                     2997f9d3-7a33-3b2a-8ad0-da24e20eebe5.roa (raw, json)
Hash identifier:          /2IbUq/CucC0oE5zKzJ/yzdVRU3nuZ1PUAcfK5gM9FI=
Subject key identifier:   3D:FA:31:4C:5D:27:29:97:55:51:2B:03:E6:22:E0:FE:9A:F6:6E:9D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D359F8DFB5DCE7382814C8180
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2997f9d3-7a33-3b2a-8ad0-da24e20eebe5.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        70.160.100.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:8d:fb:5d:ce:73:82:81:4c:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=4246e4f8-cee4-4a57-8402-ec170de19787
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:9b:7d:cf:5c:32:53:05:53:07:30:bc:ca:d6:
                    7e:cf:80:35:40:e6:9c:e6:b6:8e:86:ec:d0:3c:9a:
                    f1:af:68:0b:2e:fb:29:04:09:a1:2a:7f:44:66:10:
                    ee:12:8d:65:41:dc:4b:0e:9a:92:b4:58:b9:3b:c1:
                    7b:50:be:04:a9:47:aa:0b:f5:66:4a:f4:fc:84:3e:
                    96:80:47:46:55:36:ad:71:9d:f8:4d:51:3f:25:98:
                    8c:30:f5:f4:52:04:3f:b9:b4:51:4b:fa:73:2c:78:
                    47:69:6d:33:3c:77:62:95:2d:60:03:9b:4d:3a:3d:
                    49:13:0e:ba:19:40:0b:db:3a:e1:16:70:81:f6:bb:
                    82:95:ef:ca:1d:32:cc:2e:d6:9f:41:36:4a:a2:74:
                    20:8b:5a:f8:36:c6:ed:7c:bb:01:ba:b4:e6:6a:eb:
                    af:7d:67:9c:b8:3f:5a:2d:5b:0f:1f:e9:22:4c:97:
                    31:84:62:fc:e0:c8:47:d7:cb:ab:7e:59:50:25:d0:
                    46:7e:47:26:93:24:02:44:98:2c:dd:08:8e:bc:0f:
                    62:72:39:dd:c3:3e:8a:b0:8d:cf:48:2e:32:df:5c:
                    86:19:bd:a9:f1:7f:3d:c7:58:13:25:af:f4:5c:0c:
                    49:9a:9a:e7:ea:19:f7:4d:75:b1:80:d3:5d:48:9b:
                    0d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:FA:31:4C:5D:27:29:97:55:51:2B:03:E6:22:E0:FE:9A:F6:6E:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2997f9d3-7a33-3b2a-8ad0-da24e20eebe5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.160.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:3a:c7:72:8d:59:71:13:00:6c:89:a0:1c:bc:5d:fb:ee:62:
         91:0a:37:3e:92:d3:4b:f6:b6:07:13:8a:73:de:13:69:f9:1c:
         01:e8:4a:67:a4:59:93:7e:34:ad:04:33:a8:3c:25:c4:49:15:
         f5:50:47:0d:b4:aa:4a:97:d8:71:72:c9:4c:5d:2e:4d:5d:16:
         94:e7:d3:ef:52:3c:9f:f5:29:a2:33:a6:e2:f1:b2:ac:0b:ef:
         20:5b:82:be:c1:d2:99:c9:b6:0a:d2:53:4d:50:2b:0c:61:cd:
         fb:87:85:b1:e9:1c:31:4d:ab:ca:cc:40:94:e2:af:d2:9a:c3:
         30:4f:90:34:9f:aa:4c:e2:c4:fb:03:b8:73:4e:d1:21:1d:80:
         09:87:50:9c:7b:cf:15:e5:ac:a7:02:c1:c8:0a:5d:0f:1c:d2:
         b4:e7:e7:cd:cc:a6:a5:c5:c8:48:d1:f5:c1:ab:80:f1:04:65:
         71:ac:9b:28:4d:51:2b:04:1a:92:58:4f:44:46:5f:c8:f5:ae:
         99:f3:65:ae:46:a8:91:fe:6d:cb:c9:74:d8:9e:52:a0:a6:c5:
         43:18:f2:05:8e:73:0c:45:f3:fd:93:90:31:23:27:e5:44:1a:
         f8:87:d9:a8:9a:52:57:d6:25:98:f4:d7:1b:cd:5a:bf:4a:11:
         30:fd:d3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 06:56:45 2026 by rpki-client