Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5559d8a6-e69c-386e-8c81-3b780ddf1582.roa
File:                     5559d8a6-e69c-386e-8c81-3b780ddf1582.roa (raw, json)
Hash identifier:          HHp+UIvN6WtTY3/GwWsR2Mr485AB0G2QIT1h7tJrmUc=
Subject key identifier:   C6:7C:65:6D:3E:A8:24:2A:CF:17:16:92:9E:80:60:19:88:DE:05:A8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E3A2F74A3720FF626CA972A00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5559d8a6-e69c-386e-8c81-3b780ddf1582.roa
Signing time:             Fri 19 Jun 2026 21:00:12 +0000
ROA not before:           Fri 19 Jun 2026 21:00:12 +0000
ROA not after:            Thu 17 Sep 2026 21:00:12 +0000
asID:                     22773
IP address blocks:        70.173.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 22 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:3a:2f:74:a3:72:0f:f6:26:ca:97:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 19 21:00:12 2026 GMT
            Not After : Sep 17 21:00:12 2026 GMT
        Subject: CN=25428728-7040-4a0b-8f8b-1d5b91030d3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:66:0a:17:fa:5c:f6:93:5e:ec:f8:5f:fa:94:
                    63:0e:cd:9f:a9:d3:c7:8e:f2:82:e5:cd:b5:2e:39:
                    cd:be:fc:9d:aa:f1:62:a6:8b:9a:5d:8b:e5:eb:8d:
                    34:20:5e:05:fa:80:14:97:d3:dc:18:04:85:66:47:
                    ca:e4:7b:15:49:a5:d9:84:9e:c4:80:72:35:c2:a6:
                    40:ee:1e:4a:ac:20:bc:92:72:49:d7:fe:d5:87:20:
                    8d:98:15:c1:c4:c1:5b:22:2d:54:58:06:a9:1d:43:
                    17:74:dc:ec:ee:94:01:32:ca:b8:bf:23:18:84:e6:
                    ed:67:83:c5:22:14:01:03:b1:d4:38:c6:c4:f4:81:
                    79:d0:52:36:f4:c0:65:b1:15:51:2a:f6:eb:0f:65:
                    11:0b:34:88:2f:a6:8f:d1:45:3e:a4:41:04:0b:72:
                    8e:56:63:e9:17:18:fa:bd:a4:9a:dd:19:9d:93:f3:
                    1b:ab:e9:a8:3e:ea:db:bf:50:f7:9f:35:50:c3:15:
                    88:c8:e9:18:a4:67:d8:94:32:3c:dc:27:aa:55:08:
                    53:64:71:d9:3a:5a:49:a4:9a:b9:0e:3c:71:04:33:
                    21:7a:79:59:c4:8f:fb:ec:e6:1d:6a:03:d8:63:da:
                    82:81:1d:0a:f3:57:05:f2:39:62:1f:c1:2c:75:86:
                    34:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7C:65:6D:3E:A8:24:2A:CF:17:16:92:9E:80:60:19:88:DE:05:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5559d8a6-e69c-386e-8c81-3b780ddf1582.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.173.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:d1:a4:02:5d:18:ac:61:cc:5d:69:1a:0a:e7:09:4d:07:eb:
         b8:e4:e4:6a:41:cd:04:3f:87:b9:3c:c3:43:71:e9:c1:21:6b:
         10:07:0c:c3:42:39:3b:b4:43:4d:90:ce:f3:93:a4:40:f0:1d:
         dd:b0:4d:87:20:ea:f6:3c:e8:52:e0:f7:db:33:c4:d8:a6:72:
         6d:d0:f5:77:e7:62:f8:47:cd:55:9d:2a:53:9d:48:dc:29:c5:
         ac:c5:17:03:b1:10:61:47:48:fd:39:1f:6b:6b:be:da:6b:b4:
         d7:12:b7:a4:3e:b7:d2:24:b9:48:9d:30:c9:10:6e:7a:55:21:
         88:18:96:fe:3b:36:1b:cb:5a:d0:54:77:48:3f:23:84:b1:4f:
         d8:44:17:9e:e4:02:da:e4:14:02:91:5e:13:12:89:02:91:73:
         67:f6:d4:78:90:d5:2e:49:38:f8:10:2f:1b:2c:dc:41:ce:b7:
         0b:d0:00:7a:96:14:02:99:38:6b:60:02:f0:27:fd:82:7e:75:
         4d:21:81:ba:80:f5:b7:c0:13:71:2d:7f:47:af:93:13:e7:76:
         60:0e:49:09:3c:67:67:65:e1:65:e8:e4:a7:c3:95:67:e9:18:
         35:2e:c6:72:9f:74:88:b5:35:dd:1c:c7:c5:b9:62:95:f8:0f:
         b0:49:e7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 06:24:10 2026 by rpki-client