Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d1c781d-b2ec-3d76-bc98-07ba105d0157.roa
File:                     2d1c781d-b2ec-3d76-bc98-07ba105d0157.roa (raw, json)
Hash identifier:          15um4mIEVnWfGPyMe9dh9TZ2VlqP1C+QrBzoJSBH4ls=
Subject key identifier:   2B:09:1B:6E:C8:1B:75:37:B5:2F:FC:9C:D8:B0:8E:06:E2:90:FF:42
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B206704C601E0C59878444080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d1c781d-b2ec-3d76-bc98-07ba105d0157.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.170.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:04:c6:01:e0:c5:98:78:44:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=a531c309-2d4d-4b63-a27f-ce752ccfc5b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e9:97:75:62:c7:27:12:03:1e:52:64:4e:54:
                    ba:96:30:a0:41:24:59:49:91:a1:86:c4:79:be:11:
                    f9:f1:5f:a5:e4:6e:6f:27:5f:98:72:7f:3d:38:e1:
                    a4:fe:9e:f9:80:f2:06:46:05:09:c2:e8:13:da:a6:
                    d8:26:a7:37:63:14:fa:8c:08:2a:23:ff:eb:05:59:
                    09:85:bf:01:46:3e:1b:34:15:c5:17:1a:f4:87:2e:
                    b1:7f:a8:ed:36:cd:e4:17:4d:22:eb:39:b6:40:c1:
                    74:1a:8f:2f:a0:d1:de:67:bd:d1:35:7a:20:60:2d:
                    d3:7f:9f:d0:f3:3a:b2:31:60:0a:d5:4a:a7:fa:80:
                    d9:c3:8e:95:86:ca:ec:3c:c5:62:0f:fc:ac:54:47:
                    22:7e:de:b8:c3:e8:da:fc:23:50:4d:9b:6f:c8:68:
                    86:a0:ba:8d:3a:ad:bc:ce:fc:5c:47:72:50:1f:be:
                    6e:5d:9b:ae:63:26:79:94:89:f2:be:2e:8f:cb:4a:
                    96:3a:f8:bd:6b:3e:47:46:37:58:54:e9:8e:bd:0c:
                    4f:4c:0b:90:bb:e9:cc:1f:1b:1f:c1:e8:5a:9c:ac:
                    01:f0:7e:39:9d:55:d4:5b:e6:64:48:26:66:9a:ee:
                    af:a0:35:7e:07:87:03:5e:98:06:36:ab:46:81:c0:
                    1b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:09:1B:6E:C8:1B:75:37:B5:2F:FC:9C:D8:B0:8E:06:E2:90:FF:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2d1c781d-b2ec-3d76-bc98-07ba105d0157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.170.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:29:01:6a:0c:0a:c1:7f:6a:b4:f9:f4:08:e2:7b:9c:00:10:
         ea:2b:2f:cf:11:00:20:bb:9c:b4:fb:ee:06:d0:34:5c:17:48:
         7c:b9:b1:29:61:f6:44:f3:b8:4f:6c:36:06:3e:85:20:4e:f4:
         22:5f:ce:1c:22:53:f2:67:ea:84:6c:e3:18:ec:87:e7:5c:bd:
         43:3c:a8:0f:ff:88:0b:0f:e1:84:a5:c7:5a:64:e0:d4:75:6c:
         e0:02:f7:1e:a7:13:a9:34:43:1c:36:d4:1c:58:38:7d:cb:ef:
         6b:c2:9a:7e:bd:9e:ec:d3:a9:12:76:6b:c1:fc:e7:39:c2:72:
         31:d1:d8:2f:5b:7d:2a:83:77:c2:82:da:62:26:48:9a:66:68:
         4a:52:0b:43:a1:00:5f:5a:6c:60:e4:2b:d4:f2:9f:36:4d:d6:
         03:4e:5e:93:3c:0d:46:cc:e9:80:df:98:ff:60:57:c5:8e:a0:
         cc:f1:e6:3b:ed:a2:3c:2b:63:36:3b:d5:ff:7c:be:3d:87:af:
         0a:ba:d1:4d:95:e6:e0:68:d7:c8:6b:70:07:df:b7:76:37:f1:
         16:01:0c:8f:f5:e0:2d:62:43:b2:52:a3:6b:28:a1:a8:72:05:
         d4:1d:ce:5f:0a:23:cb:f3:a1:9e:22:25:47:fb:fd:2f:61:b6:
         09:56:89:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 02:06:24 2025 by rpki-client