Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e0954a7-c101-350a-91b1-82f5d5695bca.roa
File:                     2e0954a7-c101-350a-91b1-82f5d5695bca.roa (raw, json)
Hash identifier:          YIAS3j3wxSDKx11Cg+WMAa9tUk/VNwpjxTY/FV3NXr4=
Subject key identifier:   AB:78:3F:FB:FD:70:52:37:DA:22:66:1F:04:0C:73:FA:71:84:38:53
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C6EA833BD8B351CA0A000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e0954a7-c101-350a-91b1-82f5d5695bca.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.174.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:6e:a8:33:bd:8b:35:1c:a0:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=c1a8ac31-c992-4d2e-b025-9833aa9d8c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d5:76:3f:b6:52:1d:25:cd:dd:4d:4f:c8:cc:
                    76:a2:63:b9:30:9c:ca:61:6e:3c:dd:af:ff:37:77:
                    ec:fe:92:79:07:15:f3:89:20:77:5d:66:63:55:95:
                    f9:58:38:22:33:08:8e:07:6c:8d:af:46:95:d5:88:
                    6b:78:12:b5:4e:d7:b7:d9:28:d6:26:eb:db:8e:f1:
                    5d:5f:63:43:77:0a:c8:df:f4:2d:92:3a:5f:60:66:
                    e2:c2:32:dd:8b:b1:56:b6:d4:90:05:00:d5:16:b0:
                    5a:c7:ca:03:ce:cb:84:76:fc:b6:3a:5a:c9:d1:9f:
                    53:ee:de:b8:a7:40:f9:a4:5c:48:66:42:f6:54:cd:
                    7e:a5:62:b3:88:ca:1d:cf:88:d1:da:38:0c:c0:eb:
                    34:3d:95:2b:64:64:60:60:e0:48:f1:bc:79:8b:09:
                    29:24:b6:0f:ea:db:d1:6c:b6:09:4d:40:ec:8e:77:
                    69:a7:08:e1:21:b6:fd:50:73:72:e1:2d:e4:96:79:
                    4a:49:78:21:44:37:f9:e8:a7:b6:10:69:e9:4d:f4:
                    f7:8b:b7:de:b1:da:24:bf:dd:19:d4:66:59:3b:4e:
                    98:e9:31:f2:2b:ad:d4:b4:cb:aa:57:6f:59:f7:e3:
                    5d:36:0f:5a:1f:6e:21:39:60:eb:44:35:8e:ea:09:
                    ac:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:78:3F:FB:FD:70:52:37:DA:22:66:1F:04:0C:73:FA:71:84:38:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2e0954a7-c101-350a-91b1-82f5d5695bca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.174.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:f4:75:8a:5f:64:cd:03:c8:a3:f4:29:74:91:c5:fb:02:6c:
         2e:d8:04:0d:d5:63:71:8b:51:27:49:bf:e3:19:96:d2:ea:c5:
         76:9a:5c:13:d5:0a:b2:ad:05:fa:b2:96:b0:24:c8:b0:7b:4d:
         c2:59:a7:45:d0:83:54:47:d7:f6:74:31:4c:06:03:88:0c:dd:
         e4:9f:41:f5:97:11:22:3b:36:d5:08:c1:78:98:a3:2e:d0:22:
         d8:43:b0:a2:f6:8e:bf:36:6e:11:56:0e:ea:a8:92:84:9e:40:
         bf:a9:d1:78:48:8d:d1:ef:19:27:c7:67:00:4d:d1:57:7e:18:
         1a:65:f2:c9:de:3e:9b:9b:d4:95:e1:df:fa:52:23:43:d1:0a:
         15:fa:fd:60:3a:6e:76:dd:94:e0:c2:9e:1a:37:84:0a:4e:98:
         ed:ab:a1:2a:dd:93:ba:fd:9b:93:5a:18:ef:f5:8b:f3:d4:0a:
         3d:7c:a3:15:02:d8:61:88:d1:b3:0a:97:f0:f1:ba:0f:55:8a:
         b5:33:1b:60:06:f7:63:7f:eb:43:30:fa:df:71:84:ba:27:9e:
         a1:4c:cf:70:aa:7d:c0:0d:ba:2c:fc:0d:d7:16:04:93:71:9e:
         7a:aa:24:5c:f6:cb:12:27:41:46:02:93:8b:a0:4f:fc:d0:22:
         27:db:5c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:29:24 2025 by rpki-client