Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36e7c97b-48c5-3f43-bcd4-35a41d01696d.roa
File:                     36e7c97b-48c5-3f43-bcd4-35a41d01696d.roa (raw, json)
Hash identifier:          YrZYo4GO2hvaPAhURJfDI8QK14dCUcwCC6w5Dl6dNAo=
Subject key identifier:   6F:30:2B:84:A5:2B:A0:38:65:E5:73:FB:47:AC:69:A1:09:AD:9D:C0
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B76F248CE666FAC60865F5AE0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36e7c97b-48c5-3f43-bcd4-35a41d01696d.roa
Signing time:             Thu 09 Oct 2025 13:00:38 +0000
ROA not before:           Thu 09 Oct 2025 13:00:38 +0000
ROA not after:            Wed 07 Jan 2026 14:00:38 +0000
asID:                     22773
IP address blocks:        70.179.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:76:f2:48:ce:66:6f:ac:60:86:5f:5a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  9 13:00:38 2025 GMT
            Not After : Jan  7 14:00:38 2026 GMT
        Subject: CN=ccd96422-5944-4d02-80c7-5c1f229a9c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d7:87:a7:be:ce:5b:6a:bd:59:46:86:4c:31:
                    8f:ac:72:d1:d3:02:e4:14:d2:1a:12:f9:45:6b:95:
                    b0:d3:f0:8f:e0:7d:c0:b4:71:43:ac:6e:78:d8:73:
                    d2:f6:b1:a4:68:b7:d5:21:e4:49:58:e0:c0:b0:9a:
                    65:f8:06:0c:bc:be:28:fa:72:de:c7:92:b4:7e:2b:
                    17:fc:34:31:2e:5b:5d:c2:2b:3b:c1:56:a6:77:09:
                    a0:cc:97:15:78:2d:d9:4e:d3:b7:a4:f2:b2:48:3f:
                    e1:36:62:5b:aa:4e:f6:be:58:45:a7:d8:87:48:b9:
                    57:04:ce:c8:f9:25:13:91:89:8c:ab:c5:a7:43:4a:
                    a1:c6:d2:3a:83:e5:ee:af:7a:2e:65:ba:7d:79:1d:
                    fd:7f:2c:a5:2b:df:64:ac:72:ba:13:a4:43:51:cd:
                    cf:c0:b2:57:52:38:9c:90:dd:f7:b4:cc:4d:46:7d:
                    08:6b:b9:1a:1b:39:8f:62:84:4f:4d:fa:f9:90:9f:
                    fb:e2:a4:f6:29:f4:b2:6f:de:81:bf:78:cd:79:e9:
                    20:3c:d9:fb:fe:34:85:2d:b2:5f:9b:1f:65:c0:00:
                    43:bd:c1:77:8d:c7:9c:93:8e:31:5f:1a:69:e3:c2:
                    b7:4d:0c:6a:58:5b:4b:8e:d7:44:ad:fc:37:ff:55:
                    0b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:30:2B:84:A5:2B:A0:38:65:E5:73:FB:47:AC:69:A1:09:AD:9D:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/36e7c97b-48c5-3f43-bcd4-35a41d01696d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.179.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:62:73:df:cf:3e:f4:55:c2:a0:c1:39:af:16:00:ec:1c:49:
         4d:e1:fa:92:a9:88:73:11:f3:33:22:32:b4:3c:32:5f:ab:67:
         d4:4b:86:4e:c9:27:fd:b4:45:7c:ec:d9:5e:18:cb:96:57:41:
         e4:46:c6:49:c0:3e:02:42:a3:45:6a:8d:55:b2:29:2c:de:98:
         2c:9f:93:88:cd:57:90:b9:d0:d7:d0:ca:8f:55:48:b2:11:47:
         a2:d5:de:39:d3:ce:3e:72:de:63:e7:90:a2:f7:e1:b7:ae:cd:
         45:44:eb:0c:3b:59:f2:81:49:b9:f6:30:46:29:21:ed:69:fd:
         9a:51:2f:0e:e5:ca:4c:ae:32:67:89:5b:5b:4e:c8:3a:52:4d:
         23:b5:95:0b:be:0e:91:e7:e2:7b:b3:74:ca:19:43:81:bb:9c:
         ca:75:e3:0b:64:fd:7c:e1:10:c7:ac:6b:1a:96:34:d3:d9:d3:
         7a:f4:18:0b:59:6a:f7:f5:af:7f:7b:33:e2:b3:51:84:43:f4:
         b3:79:23:3d:fe:1a:7b:cb:41:74:c1:42:18:3e:e9:68:3a:c4:
         a2:96:6e:96:c1:b6:3b:29:14:50:79:7b:45:28:22:a9:0b:d5:
         89:15:16:36:1c:5e:cb:99:a3:54:fa:c1:e4:cd:51:62:77:b2:
         8e:ed:95:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 01:57:26 2025 by rpki-client