Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/434bc3ee-7616-35ca-a203-7e16994ae753.roa
File:                     434bc3ee-7616-35ca-a203-7e16994ae753.roa (raw, json)
Hash identifier:          LBMcaTsnopia3Hz5HT/D13dQzjDgSAnI/G9xrR71vv8=
Subject key identifier:   0C:F2:2F:67:E0:D7:27:49:CD:CD:14:00:F4:16:D4:6D:7F:12:8C:DB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A3DD7F2020139CA85C685E980
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/434bc3ee-7616-35ca-a203-7e16994ae753.roa
Signing time:             Thu 19 Jun 2025 09:20:10 +0000
ROA not before:           Thu 19 Jun 2025 09:20:10 +0000
ROA not after:            Wed 17 Sep 2025 09:20:10 +0000
asID:                     22773
IP address blocks:        70.172.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3d:d7:f2:02:01:39:ca:85:c6:85:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 09:20:10 2025 GMT
            Not After : Sep 17 09:20:10 2025 GMT
        Subject: CN=05d14876-261a-46d8-b06f-644e228370b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:54:13:a3:cb:ac:77:cb:ea:d3:fa:f9:93:51:
                    76:1d:02:72:e7:b9:fb:c6:11:eb:23:fd:0a:d1:a8:
                    de:f8:9e:30:11:a2:b4:35:63:c9:1c:92:a4:f2:ac:
                    bd:f5:fd:87:d1:ea:6d:56:4f:40:bb:32:a1:d6:ef:
                    f3:6e:e1:db:ec:e0:1a:50:e8:87:16:03:18:e9:74:
                    e9:ec:2b:5d:a0:d4:f7:92:aa:a2:69:82:ad:12:e6:
                    c4:9f:3e:19:79:e1:c0:ef:39:ff:46:3c:42:02:3f:
                    60:7a:67:e5:7e:fa:79:30:db:97:3c:b7:bc:2f:17:
                    48:4f:bb:d5:fe:40:2a:cb:d9:0e:af:59:51:f4:38:
                    b2:6e:40:8e:e9:86:72:f7:99:30:a9:33:8c:90:4c:
                    28:47:80:0b:c0:35:8e:85:1b:5f:21:c4:ec:74:20:
                    c5:83:b8:a7:27:6e:19:b9:9f:44:0b:00:2f:e1:f3:
                    66:41:93:11:8a:84:bd:a8:30:e3:b6:d3:19:8e:c3:
                    6f:d0:f8:50:b7:4a:24:ef:f1:bc:44:2f:57:6a:62:
                    c8:7b:79:c2:31:51:81:1c:3b:42:56:eb:f5:ec:0b:
                    39:bf:e2:37:8a:4e:aa:a6:76:cd:dd:47:e5:df:d9:
                    76:69:11:51:49:8f:54:e9:87:a3:bd:13:2c:16:05:
                    11:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F2:2F:67:E0:D7:27:49:CD:CD:14:00:F4:16:D4:6D:7F:12:8C:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/434bc3ee-7616-35ca-a203-7e16994ae753.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.172.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:fe:e0:0a:6d:a1:19:b5:74:c5:2d:ec:b8:78:22:92:d0:c2:
         8a:4a:79:91:3c:cf:18:83:90:f5:20:a3:d7:7c:47:3c:18:20:
         26:5c:ec:f3:bd:4d:33:bb:5f:cc:ae:fd:cf:40:cb:5e:55:19:
         ea:ea:62:8b:76:95:ca:0c:59:16:3d:97:c0:40:a1:55:e1:2c:
         74:5b:0d:05:78:4e:ca:aa:78:53:b4:49:a8:6a:b3:ab:a6:7f:
         28:2e:58:07:01:fb:4e:89:22:b8:3c:ff:9f:29:f0:ec:d3:71:
         b9:fe:70:38:78:c7:ec:b4:8a:9d:7d:03:cf:24:b0:ed:7e:d9:
         e0:aa:5d:27:96:71:2b:f9:1f:0b:ad:88:6b:82:14:7d:28:5b:
         47:b3:ff:ed:d6:86:e4:21:3f:f1:a6:aa:6f:b5:8a:b9:23:9e:
         31:ce:be:23:ca:ad:ce:78:7a:51:e7:25:5f:14:25:42:d2:3e:
         65:5c:7b:42:b3:66:28:08:51:97:5d:a0:c2:ce:8d:3a:c3:de:
         65:17:bb:a7:22:59:6c:e6:58:34:e6:08:04:e5:14:76:63:21:
         ba:cb:fd:12:9e:6c:8e:f0:88:50:ea:2c:0a:92:33:01:ec:04:
         a4:58:f1:f7:e4:e5:bb:83:3c:b1:90:4f:94:61:0a:f3:bb:64:
         c4:e9:24:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 10:25:23 2025 by rpki-client