Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42becd31-02e4-37ed-9f47-cc50db78cc58.roa
File:                     42becd31-02e4-37ed-9f47-cc50db78cc58.roa (raw, json)
Hash identifier:          PT4vXRC04a3idJAd4D+8DEPi4vQJ+87Uzyz27n2igSE=
Subject key identifier:   81:0C:A7:F9:46:CD:77:EC:59:6D:EE:D0:72:C8:B3:57:CC:8F:CE:58
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EC20C7B3F3ECD27EC4F9FA980
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42becd31-02e4-37ed-9f47-cc50db78cc58.roa
Signing time:             Fri 07 Aug 2026 13:00:11 +0000
ROA not before:           Fri 07 Aug 2026 13:00:11 +0000
ROA not after:            Thu 05 Nov 2026 14:00:11 +0000
asID:                     19905
IP address blocks:        70.165.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c2:0c:7b:3f:3e:cd:27:ec:4f:9f:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug  7 13:00:11 2026 GMT
            Not After : Nov  5 14:00:11 2026 GMT
        Subject: CN=fd5a5c3e-5afa-465c-8f09-c9f34af7e09f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:85:a0:d0:2b:8b:1f:00:23:99:3a:ff:f9:54:
                    28:fe:09:20:f1:28:5e:e8:2c:ad:09:22:09:c8:20:
                    89:bc:e2:7a:a4:da:dd:70:14:51:f1:78:01:01:8f:
                    b9:2e:17:93:23:16:87:00:7b:7d:da:c8:4d:84:a6:
                    4b:96:f9:09:ee:a8:dd:bd:8a:61:e1:48:f0:63:41:
                    29:b0:ef:65:9d:71:b1:eb:7a:92:b6:3f:60:eb:1f:
                    08:28:a9:7f:5d:ad:0b:9e:29:79:af:c6:ae:71:3b:
                    0c:d0:7e:c1:84:42:36:bc:a9:1a:b5:ad:60:3b:eb:
                    6c:75:bd:56:f4:df:70:89:81:fe:5d:4e:3f:57:a6:
                    a5:ed:ae:e6:78:36:b4:24:6b:65:66:24:77:0c:a0:
                    4f:5f:3d:dc:45:04:fe:5c:91:41:f5:ea:db:56:f0:
                    59:e2:32:86:c9:15:88:bc:7f:fd:64:b8:da:84:a8:
                    54:b6:8a:1a:3c:7b:ca:28:dc:ef:ae:95:b8:3b:80:
                    13:2c:0e:c7:af:3e:e8:cb:05:e4:2d:65:55:27:20:
                    ad:53:a5:40:65:18:52:4a:44:0e:ed:76:25:e1:c0:
                    32:6e:45:da:d8:fb:c8:67:cd:c8:0e:e7:03:93:46:
                    be:df:ea:91:7d:37:5e:73:e8:ec:26:99:83:36:46:
                    67:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0C:A7:F9:46:CD:77:EC:59:6D:EE:D0:72:C8:B3:57:CC:8F:CE:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/42becd31-02e4-37ed-9f47-cc50db78cc58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.165.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:51:c4:c2:1d:9d:9d:eb:74:cb:c6:61:2f:63:8c:12:0e:03:
         84:96:a7:fa:cf:d4:7e:67:cf:3b:dd:99:11:4b:c6:39:e2:d6:
         11:79:2c:0f:28:c7:6a:03:b9:cd:08:e5:6d:8c:84:97:ce:0f:
         c4:38:77:21:70:df:d4:b6:16:81:03:53:07:cb:6a:82:8b:66:
         e4:21:3a:d3:74:46:47:69:51:79:30:c1:2b:3e:b1:09:ba:c3:
         28:d4:75:14:f5:44:06:21:31:48:25:ef:94:84:1b:11:12:13:
         64:76:4c:83:a5:23:3f:f3:a0:89:04:5d:9b:47:8c:76:42:85:
         32:d7:aa:fc:c6:00:09:db:3b:5d:b2:43:91:64:55:c9:89:06:
         cf:6c:2b:11:14:c5:63:57:61:c1:48:e2:80:63:eb:5e:6b:56:
         ac:56:be:22:e2:32:45:ee:ed:97:fb:08:cb:54:38:50:e1:51:
         17:36:e7:ec:67:be:70:9d:ac:92:b9:0e:9b:1a:6e:db:1d:e0:
         22:b0:eb:da:97:09:9d:05:81:51:ce:a6:9b:73:73:87:fd:95:
         66:36:e4:76:60:2c:2b:a4:eb:05:64:54:fb:8e:ba:36:81:fa:
         98:90:06:84:88:80:50:2e:56:a0:38:17:8e:e6:d7:a3:eb:0d:
         ec:7d:b0:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7CDHs/Ps0n7E+fqYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDgwNzEzMDAxMVoXDTI2MTEwNTE0MDAxMVowLzEtMCsGA1UEAxMk
ZmQ1YTVjM2UtNWFmYS00NjVjLThmMDktYzlmMzRhZjdlMDlmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYWg0CuLHwAjmTr/+VQo/gkg8She6CytCSIJ
yCCJvOJ6pNrdcBRR8XgBAY+5LheTIxaHAHt92shNhKZLlvkJ7qjdvYph4UjwY0Ep
sO9lnXGx63qStj9g6x8IKKl/Xa0Lnil5r8aucTsM0H7BhEI2vKkata1gO+tsdb1W
9N9wiYH+XU4/V6al7a7meDa0JGtlZiR3DKBPXz3cRQT+XJFB9erbVvBZ4jKGyRWI
vH/9ZLjahKhUtooaPHvKKNzvrpW4O4ATLA7Hrz7oywXkLWVVJyCtU6VAZRhSSkQO
7XYl4cAybkXa2PvIZ83IDucDk0a+3+qRfTdec+jsJpmDNkZn5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIEMp/lGzXfsWW3u0HLIs1fMj85YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDJiZWNkMzEtMDJlNC0z
N2VkLTlmNDctY2M1MGRiNzhjYzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqXUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD5RxMIdnZ3rdMvGYS9jjBIOA4SWp/rP1H5nzzvdmRFLxjni1hF5LA8o
x2oDuc0I5W2MhJfOD8Q4dyFw39S2FoEDUwfLaoKLZuQhOtN0RkdpUXkwwSs+sQm6
wyjUdRT1RAYhMUgl75SEGxESE2R2TIOlIz/zoIkEXZtHjHZChTLXqvzGAAnbO12y
Q5FkVcmJBs9sKxEUxWNXYcFI4oBj615rVqxWviLiMkXu7Zf7CMtUOFDhURc25+xn
vnCdrJK5Dpsabtsd4CKw69qXCZ0FgVHOpptzc4f9lWY25HZgLCuk6wVkVPuOujaB
+piQBoSIgFAuVqA4F47m16PrDex9sCY=
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:08:24 2026 by rpki-client