Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cabe750-c8d9-3339-981f-55fd86bbd9ae.roa
File:                     3cabe750-c8d9-3339-981f-55fd86bbd9ae.roa (raw, json)
Hash identifier:          5t7AW5HJ5vZB09JHFnlK8afkPVCo5I4bKGmcEMDLFUc=
Subject key identifier:   EE:24:97:01:B6:9D:86:27:DA:33:1C:99:4E:50:0B:FE:17:46:0E:C2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D1C7F4C4B84EB9A145033F500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cabe750-c8d9-3339-981f-55fd86bbd9ae.roa
Signing time:             Mon 09 Mar 2026 13:00:40 +0000
ROA not before:           Mon 09 Mar 2026 13:00:40 +0000
ROA not after:            Sun 07 Jun 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        70.182.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:1c:7f:4c:4b:84:eb:9a:14:50:33:f5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar  9 13:00:40 2026 GMT
            Not After : Jun  7 13:00:40 2026 GMT
        Subject: CN=83093714-6371-4481-b826-bfb2764b26e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:60:e9:ab:56:29:24:81:cd:c8:7f:c4:3f:a0:
                    f2:94:ec:7c:05:97:95:89:cc:20:c8:19:f6:8c:cb:
                    0e:b7:05:7a:8f:de:30:a3:74:0a:0e:71:11:90:57:
                    50:3d:a8:88:78:36:25:e1:74:5f:97:bc:5b:5d:ad:
                    5d:20:09:0d:dc:c9:a5:97:72:15:ba:17:61:4a:a3:
                    27:93:de:77:c9:14:e7:92:32:54:8d:43:c8:52:9e:
                    ff:99:fc:4e:2a:52:b0:9c:77:f3:18:63:f8:a5:97:
                    16:e6:0f:4d:10:91:b5:da:56:bd:b9:cb:38:e5:09:
                    a5:57:6c:fe:53:2c:86:6d:a6:7e:19:54:d1:c1:a7:
                    20:9f:b3:48:37:89:97:ea:2c:45:99:99:05:1f:b1:
                    5f:a1:42:d7:27:76:4a:a9:1a:37:f7:11:cf:d8:f5:
                    ac:cd:92:67:ec:87:16:43:d2:78:06:7f:99:ff:0e:
                    3a:0d:c1:78:ea:ad:41:75:1d:c5:9a:62:ec:7a:d5:
                    8e:20:2d:0d:65:0c:de:ec:76:51:74:15:49:b9:46:
                    47:45:0e:ce:22:d5:73:cd:44:8b:15:e9:eb:a2:ff:
                    99:91:00:46:41:8a:b0:d0:de:97:28:d9:5a:d6:be:
                    68:d4:1b:07:63:fd:b1:1a:f7:37:ed:a8:77:77:48:
                    23:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:24:97:01:B6:9D:86:27:DA:33:1C:99:4E:50:0B:FE:17:46:0E:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3cabe750-c8d9-3339-981f-55fd86bbd9ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.182.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:ce:98:ed:0d:ef:0e:1e:b6:21:00:33:ac:c9:64:73:6d:21:
         b0:32:33:d7:b4:1b:e6:1d:ce:f9:3a:62:66:66:2d:20:76:ad:
         9a:61:ab:03:d9:55:bb:5d:b8:65:3d:a1:e9:5f:47:4f:91:6c:
         0b:33:79:3f:39:56:f7:27:52:73:54:33:a9:d6:80:6d:88:39:
         c7:63:51:ab:2d:d1:cf:ed:1d:39:6b:47:7a:d3:2c:38:24:25:
         78:63:03:f7:54:3b:5e:ed:c8:dd:0d:5d:89:ef:8b:d6:f5:a7:
         57:3f:98:5c:57:37:ca:37:bc:f9:7d:68:ae:e3:8f:24:25:23:
         22:84:ba:73:8d:3c:40:d2:e6:85:fa:f9:0c:3a:d2:82:6a:8b:
         bd:81:8a:74:39:12:c9:70:fa:cb:a9:2c:13:75:aa:88:50:bf:
         e2:8e:7e:e9:4c:7e:7b:6e:d1:21:df:07:8f:65:cd:12:fd:e8:
         eb:c9:5b:80:e1:ec:b5:7b:f6:69:8e:57:ad:9f:a8:30:bc:16:
         31:e5:82:1c:81:6b:e1:dc:86:1e:ff:0a:32:c1:d7:4a:27:e6:
         ae:65:60:61:ab:ae:f5:51:92:cf:b5:7e:c8:15:7b:27:79:d6:
         f9:7e:26:ba:b1:fd:5a:e2:c0:e4:90:88:f0:b6:58:b1:b5:4e:
         eb:4f:49:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 06:58:35 2026 by rpki-client