Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b29b065-5ce5-3424-a42e-2c05511fb92b.roa
File:                     3b29b065-5ce5-3424-a42e-2c05511fb92b.roa (raw, json)
Hash identifier:          xeyBx2xOsm1bCDnK1ylSQTNfQEzuyn/EBS93UzJ+CyI=
Subject key identifier:   00:F7:27:74:D4:A8:D7:84:ED:14:E8:C0:12:94:BF:23:6E:D3:C1:15
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F94D31416B66A7D5DA5FE6650
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b29b065-5ce5-3424-a42e-2c05511fb92b.roa
Signing time:             Thu 22 Oct 2026 01:00:12 +0000
ROA not before:           Thu 22 Oct 2026 01:00:12 +0000
ROA not after:            Wed 20 Jan 2027 02:00:12 +0000
asID:                     62957
IP address blocks:        70.165.144.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:94:d3:14:16:b6:6a:7d:5d:a5:fe:66:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct 22 01:00:12 2026 GMT
            Not After : Jan 20 02:00:12 2027 GMT
        Subject: CN=b7f8ffb6-ee76-455f-9024-5b99123dfe93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:03:fb:2f:fa:61:65:df:18:6e:a8:fd:64:
                    92:f6:0a:c3:c8:57:d0:17:29:44:e8:96:05:68:a0:
                    70:cd:1d:9c:48:88:ac:39:fd:4e:37:29:24:0c:0e:
                    10:fa:7f:35:11:6f:ce:31:f3:1d:74:8c:f9:8c:1c:
                    69:83:13:86:98:b3:76:de:cd:47:cf:09:6d:d0:b2:
                    4e:65:e7:aa:e8:21:3f:4d:18:f0:00:33:f8:3a:47:
                    aa:1f:08:b2:d4:0f:28:b4:3e:f0:b5:e1:86:21:8d:
                    5a:71:10:b1:83:b3:73:58:18:7c:09:af:51:19:a4:
                    f9:5a:6d:fe:77:f0:84:28:16:53:5f:7d:75:2c:ec:
                    51:d6:a3:3c:b8:69:e3:cc:7a:13:b0:98:5a:4a:68:
                    ce:fe:41:4c:75:15:71:7d:ec:cb:f3:ac:0c:23:d7:
                    82:5e:31:69:7c:87:e5:93:85:e2:bf:01:0f:50:f9:
                    43:28:33:e7:9a:c2:db:18:02:0d:6a:90:34:8a:af:
                    86:0b:dd:b9:4a:ad:47:67:82:58:86:c6:c0:84:91:
                    07:18:8a:b2:96:be:22:39:8e:fc:c4:39:fd:87:42:
                    9c:8d:bb:dd:a1:2a:4d:27:ab:2f:3a:70:bc:cd:ab:
                    57:26:e6:c0:57:7a:a5:6c:f7:89:e2:ec:36:8f:2f:
                    87:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F7:27:74:D4:A8:D7:84:ED:14:E8:C0:12:94:BF:23:6E:D3:C1:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b29b065-5ce5-3424-a42e-2c05511fb92b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.165.144.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:19:2f:8b:c5:2e:bd:03:2b:48:93:9d:f9:e5:b1:d0:5d:ff:
         1e:4c:fa:3d:48:24:c9:aa:a0:f4:d4:3c:a0:53:ad:25:7f:1b:
         5e:fb:cc:93:28:83:82:d9:1e:0b:ce:44:8d:08:52:c3:50:e5:
         08:46:a7:11:16:11:60:7c:40:bf:47:12:e9:9f:7a:d5:1a:bc:
         76:de:88:a8:9d:f1:d7:8c:bd:46:54:d9:3f:95:da:69:cd:60:
         fb:55:18:8a:72:32:49:f9:d4:9a:98:4e:22:15:07:ea:a7:fd:
         fa:66:12:fb:b6:79:8d:7b:6b:00:65:25:ce:3e:db:33:6b:5a:
         a3:73:7d:52:75:c8:34:17:3e:9d:c6:0f:e7:e6:33:21:05:10:
         3b:f4:90:59:3e:db:7b:1c:93:dd:66:bd:ca:b4:7f:f7:bb:2a:
         17:ee:01:a7:1e:84:f6:f4:c5:f6:5e:5f:06:75:14:6e:b0:38:
         e4:22:53:d3:44:cc:de:78:81:36:9f:c6:81:0b:61:9d:a7:8b:
         6d:e4:5f:1a:71:f4:2e:fd:b6:77:0e:06:b4:3d:67:ff:e5:69:
         75:9e:2a:29:ea:48:fe:46:ef:b1:50:fe:ca:00:c1:23:82:05:
         10:9a:55:87:1b:82:8e:7d:d6:2b:36:48:d4:60:2f:29:bd:d5:
         b3:7f:c3:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U0xQWtmp9XaX+ZlAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk
YjdmOGZmYjYtZWU3Ni00NTVmLTkwMjQtNWI5OTEyM2RmZTkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFAD+y/6YWXfGG6o/WSS9grDyFfQFylE6JYF
aKBwzR2cSIisOf1ONykkDA4Q+n81EW/OMfMddIz5jBxpgxOGmLN23s1Hzwlt0LJO
Zeeq6CE/TRjwADP4OkeqHwiy1A8otD7wteGGIY1acRCxg7NzWBh8Ca9RGaT5Wm3+
d/CEKBZTX311LOxR1qM8uGnjzHoTsJhaSmjO/kFMdRVxfezL86wMI9eCXjFpfIfl
k4XivwEPUPlDKDPnmsLbGAINapA0iq+GC925Sq1HZ4JYhsbAhJEHGIqylr4iOY78
xDn9h0KcjbvdoSpNJ6svOnC8zatXJubAV3qlbPeJ4uw2jy+HTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAD3J3TUqNeE7RTowBKUvyNu08EVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvM2IyOWIwNjUtNWNlNS0z
NDI0LWE0MmUtMmMwNTUxMWZiOTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRqWQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEkZL4vFLr0DK0iTnfnlsdBd/x5M+j1IJMmqoPTUPKBTrSV/G177zJMo
g4LZHgvORI0IUsNQ5QhGpxEWEWB8QL9HEumfetUavHbeiKid8deMvUZU2T+V2mnN
YPtVGIpyMkn51JqYTiIVB+qn/fpmEvu2eY17awBlJc4+2zNrWqNzfVJ1yDQXPp3G
D+fmMyEFEDv0kFk+23sck91mvcq0f/e7KhfuAacehPb0xfZeXwZ1FG6wOOQiU9NE
zN54gTafxoELYZ2ni23kXxpx9C79tncOBrQ9Z//laXWeKinqSP5G77FQ/soAwSOC
BRCaVYcbgo591is2SNRgLym91bN/w00=
-----END CERTIFICATE-----
Generated at Wed Nov 4 02:45:38 2026 by rpki-client