Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bbd6453-0b0c-3165-866e-e56f9fb65a0c.roa
File:                     3bbd6453-0b0c-3165-866e-e56f9fb65a0c.roa (raw, json)
Hash identifier:          OkUA2bVSG8i95BhrgAcllAEY1w24Z+Ttk6WBcTB7jys=
Subject key identifier:   50:18:03:96:B4:9F:3C:AC:2C:69:63:50:03:1B:28:EB:B2:43:DE:30
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F53A03C57D3FBEC060C853F00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bbd6453-0b0c-3165-866e-e56f9fb65a0c.roa
Signing time:             Mon 28 Sep 2026 16:30:24 +0000
ROA not before:           Mon 28 Sep 2026 16:30:24 +0000
ROA not after:            Sun 27 Dec 2026 17:30:24 +0000
asID:                     22773
IP address blocks:        70.167.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:a0:3c:57:d3:fb:ec:06:0c:85:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 28 16:30:24 2026 GMT
            Not After : Dec 27 17:30:24 2026 GMT
        Subject: CN=53327454-4a03-4836-aea6-b11c212562fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:37:99:27:2e:cf:92:1e:f4:9a:8d:9c:75:8d:
                    a7:4a:23:ae:61:e4:ed:96:7f:d1:cc:57:4e:d2:d4:
                    61:41:20:7d:15:73:8c:a9:07:cb:1c:5f:6d:08:1e:
                    2c:98:7d:d8:26:7f:89:3c:f9:44:f6:d3:f7:d3:e1:
                    8c:b8:fb:b6:f3:93:23:0b:bf:f9:47:c6:60:6f:2e:
                    db:0a:1e:92:ce:f7:02:6d:13:ba:e5:02:82:1e:c3:
                    bd:3b:88:b9:e1:7b:08:67:1b:a6:f4:20:dc:b7:9a:
                    d1:f7:ac:03:4d:34:ed:7d:75:86:f6:d2:8d:96:b1:
                    b0:54:9a:a9:2f:78:68:9d:77:3f:57:08:d7:1d:27:
                    dc:75:85:80:33:66:8f:7e:6f:24:b4:14:ab:35:39:
                    c5:d9:5b:23:1f:6d:5a:76:b9:67:68:32:e3:58:8a:
                    d5:7f:58:12:77:ec:77:3e:b9:fe:6a:9d:33:e9:4d:
                    62:16:b8:d4:08:4b:7a:33:0e:38:5d:4a:d0:e8:6c:
                    7f:1d:fa:d5:07:0a:73:f5:ac:74:67:c1:49:b5:3e:
                    b1:23:55:13:a7:f1:51:09:43:02:85:69:3b:26:1c:
                    7c:77:5d:4a:90:55:71:c3:1b:3f:37:05:67:05:c3:
                    fc:8c:12:8b:4c:93:6f:e6:fd:d9:34:ab:f8:08:9d:
                    a1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:18:03:96:B4:9F:3C:AC:2C:69:63:50:03:1B:28:EB:B2:43:DE:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3bbd6453-0b0c-3165-866e-e56f9fb65a0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.167.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:8c:37:35:88:b4:2e:71:01:9c:ed:8e:e5:ca:3a:54:00:cd:
         b7:4f:20:07:26:80:d8:f1:4f:53:9c:69:27:c4:e6:8e:c3:a1:
         06:bd:74:3d:f0:6d:e4:72:98:5a:a3:28:7e:67:ac:9f:4f:f2:
         55:79:a3:64:2b:8f:02:af:44:d2:01:aa:69:cf:ac:ab:ea:e8:
         9c:8c:7b:18:ec:66:b6:31:d5:f6:b5:ad:ef:b8:40:2e:10:41:
         68:ef:84:5d:7e:1d:b0:bf:0e:92:69:92:66:fc:ee:8e:04:4f:
         ba:31:df:ca:fe:f9:8d:1d:72:6d:c0:e0:f1:fb:ed:af:8b:45:
         e1:34:dc:b1:60:53:2c:bf:6b:b4:42:5a:33:a7:2c:7b:34:28:
         34:7c:35:ff:06:5a:7e:d8:b1:f0:ce:75:d5:73:d6:72:7c:70:
         8e:51:4d:2b:dd:f2:41:f8:5f:73:60:c7:1a:d9:b7:a1:6c:76:
         36:9a:1e:d6:5a:a2:33:36:b0:c5:00:23:35:65:87:98:7a:74:
         e4:0d:1c:5c:e6:a5:a1:c7:5d:d2:d0:ce:27:0f:12:01:c4:84:
         f6:9b:3b:b5:da:83:61:97:03:bd:63:5b:5f:56:6e:8e:89:13:
         08:3c:74:8d:a0:48:db:d9:60:a9:60:ce:b1:4e:6e:b0:51:16:
         6e:e4:91:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:50:07 2026 by rpki-client