Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/55fc3886-29a9-3748-b438-8f5d658f87a1.roa
File:                     55fc3886-29a9-3748-b438-8f5d658f87a1.roa (raw, json)
Hash identifier:          fT9SYbDL16F0Xod3JeeyzP0qLXLnrm56y8lXEdnt1iA=
Subject key identifier:   15:FE:93:7B:69:5D:9E:A3:D8:EF:CC:76:E1:6D:D5:1D:4D:42:FC:26
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A40A8A768800952AA17315690
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/55fc3886-29a9-3748-b438-8f5d658f87a1.roa
Signing time:             Fri 20 Jun 2025 09:32:19 +0000
ROA not before:           Fri 20 Jun 2025 09:32:19 +0000
ROA not after:            Thu 18 Sep 2025 09:32:19 +0000
asID:                     22773
IP address blocks:        70.175.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:40:a8:a7:68:80:09:52:aa:17:31:56:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 20 09:32:19 2025 GMT
            Not After : Sep 18 09:32:19 2025 GMT
        Subject: CN=f0b0cbd8-6db6-40cb-a173-006b0f45d5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:43:55:4d:29:90:64:76:d3:5a:30:57:72:dd:
                    b2:13:53:95:f9:b3:91:01:6c:25:f5:91:90:09:da:
                    4e:94:f6:48:35:7b:e9:f7:86:ad:35:24:63:ff:37:
                    5d:0f:ae:42:ee:cc:eb:e1:38:33:c8:2f:5a:7f:85:
                    3e:2a:bf:73:7b:42:5b:33:47:8f:cf:87:cd:e3:ee:
                    5f:46:44:86:2f:28:72:83:e6:cd:59:70:db:f1:2a:
                    98:f1:17:bd:fd:68:59:7a:a2:88:38:e8:03:9e:74:
                    ee:81:3b:06:d4:7e:90:cf:89:48:b6:19:64:1c:41:
                    76:f0:a0:16:38:82:d2:31:bd:45:9f:af:76:af:8d:
                    eb:70:1e:2a:57:79:16:25:1d:42:e4:20:26:75:e5:
                    ad:f7:c6:4d:e5:89:5b:11:d8:fc:38:d0:19:63:02:
                    f6:bb:03:8e:58:b3:5f:2a:3e:0b:4d:b2:5d:a9:6a:
                    7c:a0:1f:73:7b:bc:ea:a8:33:d2:0e:fb:f0:60:e9:
                    cb:25:f3:e5:eb:ed:e1:e9:53:57:4f:e9:fd:fe:61:
                    89:9f:34:0e:72:ad:09:ac:e9:46:67:c0:40:3d:91:
                    be:12:3b:7d:5c:7b:de:55:e5:3b:25:62:78:8b:49:
                    f4:c4:79:1f:3a:2a:ee:57:9c:90:f0:d8:6d:18:6c:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:FE:93:7B:69:5D:9E:A3:D8:EF:CC:76:E1:6D:D5:1D:4D:42:FC:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/55fc3886-29a9-3748-b438-8f5d658f87a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.175.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:3d:dc:f8:25:d4:d3:69:b8:ba:c3:25:a8:54:10:f8:5c:26:
         ec:05:df:c6:4e:de:a1:4e:bb:cd:1d:80:57:69:70:61:d5:dd:
         d9:b3:6e:d0:8b:b0:e9:46:20:2e:12:36:32:aa:f4:d6:ed:fa:
         9a:01:84:50:1b:20:f2:d2:18:a0:06:aa:8b:fc:44:13:3d:c7:
         07:0e:5b:cd:78:f5:17:fb:46:96:3d:30:87:1c:5e:85:ac:20:
         4d:36:cd:cf:4e:32:10:42:ca:22:1c:46:77:43:92:18:8f:ce:
         d7:f7:fa:a4:18:a7:6f:df:aa:94:2f:50:29:de:4a:ae:b7:50:
         38:cb:52:28:8b:e7:01:b6:0c:21:d3:cb:3c:88:51:71:11:5d:
         16:6e:26:6d:fb:05:4f:1d:26:38:88:f0:a2:ea:07:8f:9b:89:
         d3:15:54:a4:48:b1:2d:c5:f1:e3:b6:0a:d0:9c:f5:f0:8d:cd:
         45:56:61:a7:13:fb:5c:05:32:1f:26:5c:0f:2e:18:c3:21:46:
         fd:1f:a2:e3:f6:89:0b:ab:95:a6:7d:63:83:0d:1a:c2:6f:da:
         9a:02:63:d9:7e:44:b3:c5:3d:fd:45:8d:7a:96:6f:36:be:c6:
         ea:ee:df:96:e7:48:8f:10:c2:04:ee:0f:b2:f2:93:0f:fc:1a:
         08:b2:b1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 07:28:07 2025 by rpki-client