Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5f7f1e43-135f-3d1f-be4f-eab97bfc09a1.roa
File:                     5f7f1e43-135f-3d1f-be4f-eab97bfc09a1.roa (raw, json)
Hash identifier:          JZ9NRN/xW4OsVhxAe4iwS6ZeEwZSQPnibhJ0Lv8Hw2E=
Subject key identifier:   DC:F0:2F:4C:AF:3A:F5:B8:D9:E1:66:16:FA:47:D0:35:B3:D5:80:E3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C7964A1ED90C388747480
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5f7f1e43-135f-3d1f-be4f-eab97bfc09a1.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.176.181.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:79:64:a1:ed:90:c3:88:74:74:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=04cece18-0f0d-4720-a4ba-53e8e8dca810
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e6:32:a1:61:a4:2a:2a:f8:38:90:78:bb:7b:
                    74:18:54:b2:4b:46:44:7d:43:fb:8a:21:61:15:87:
                    26:b5:10:6a:6b:21:94:55:3e:bc:45:62:2b:58:ce:
                    93:c3:c9:0f:5f:de:34:2c:b1:ac:e2:19:08:22:57:
                    4f:96:88:31:a6:91:9c:4c:d2:53:75:1c:5a:30:14:
                    69:d8:04:31:c4:6e:34:7a:0b:21:18:0c:ef:21:bd:
                    5f:2b:72:98:90:72:f0:9e:90:ed:da:9a:6c:58:3f:
                    42:83:0e:28:82:4d:cd:76:40:22:0b:d2:1a:3c:65:
                    4b:b5:6d:92:d7:24:39:61:53:4b:5d:c5:0b:15:a6:
                    19:64:a0:b5:97:73:e1:61:0b:15:07:31:75:87:ce:
                    a0:33:81:b2:3c:6e:87:16:e5:76:f7:bf:50:b9:f4:
                    3c:35:3a:66:c1:a6:04:41:00:fd:b4:f2:ba:1a:2a:
                    08:78:8d:6e:d4:d6:08:f0:c6:dc:e5:33:00:ea:f4:
                    41:b5:3a:dd:c8:b6:60:ab:c3:5f:94:7c:7d:a1:e9:
                    c7:51:60:30:41:b2:e2:0b:f9:a9:21:5d:f9:e7:27:
                    52:91:94:58:94:18:cf:4a:2d:21:17:ff:ee:bf:e2:
                    98:9f:c3:39:54:03:81:d6:68:ce:f7:e6:77:16:26:
                    61:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F0:2F:4C:AF:3A:F5:B8:D9:E1:66:16:FA:47:D0:35:B3:D5:80:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5f7f1e43-135f-3d1f-be4f-eab97bfc09a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.176.181.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:22:54:37:3a:c4:18:06:34:47:97:56:62:c0:be:43:99:c3:
         89:89:1a:af:ac:66:7c:1f:4b:90:0e:9c:bc:8f:9f:a1:b9:04:
         f2:f5:1f:2f:ec:cc:8e:05:f4:5f:e2:a0:91:3f:73:35:c6:08:
         7e:89:37:06:6e:ec:55:9b:4a:77:8d:79:a1:c7:dc:c9:b5:36:
         84:93:59:bb:bb:58:2d:75:e1:9d:2a:4f:82:49:17:89:e7:0b:
         a4:57:45:43:70:da:51:b5:34:3c:77:df:ba:20:45:6e:ae:cb:
         26:c6:14:46:73:ed:12:5d:a1:01:5d:ec:6a:ec:d3:64:9a:06:
         9f:20:76:b3:c3:86:12:72:77:50:77:7a:9b:6d:c4:17:07:e0:
         0a:82:56:52:7d:f9:3f:53:7c:a1:2d:6b:ec:fc:7d:0e:50:ee:
         a9:64:66:90:59:b0:b8:70:2a:8e:83:01:bf:09:6b:a9:26:e3:
         83:c0:86:d2:4d:87:3c:e2:e1:35:fc:7c:df:1d:84:d6:20:df:
         b5:a5:1a:c6:38:f8:2b:2a:cd:b4:61:86:8d:81:33:ac:a8:a8:
         6b:14:25:de:49:f1:02:32:b0:b3:c0:5a:d5:d3:f2:a8:21:cf:
         b4:3e:2f:23:18:e6:02:49:4d:35:50:e1:54:be:2a:ad:45:0c:
         a2:0a:d8:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnHlkoe2Qw4h0dIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
MDRjZWNlMTgtMGYwZC00NzIwLWE0YmEtNTNlOGU4ZGNhODEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+YyoWGkKir4OJB4u3t0GFSyS0ZEfUP7iiFh
FYcmtRBqayGUVT68RWIrWM6Tw8kPX940LLGs4hkIIldPlogxppGcTNJTdRxaMBRp
2AQxxG40egshGAzvIb1fK3KYkHLwnpDt2ppsWD9Cgw4ogk3NdkAiC9IaPGVLtW2S
1yQ5YVNLXcULFaYZZKC1l3PhYQsVBzF1h86gM4GyPG6HFuV2979QufQ8NTpmwaYE
QQD9tPK6GioIeI1u1NYI8Mbc5TMA6vRBtTrdyLZgq8NflHx9oenHUWAwQbLiC/mp
IV355ydSkZRYlBjPSi0hF//uv+KYn8M5VAOB1mjO9+Z3FiZhbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNzwL0yvOvW42eFmFvpH0DWz1YDjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNWY3ZjFlNDMtMTM1Zi0z
ZDFmLWJlNGYtZWFiOTdiZmMwOWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrC1MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJQiVDc6xBgGNEeXVmLAvkOZw4mJGq+sZnwfS5AOnLyPn6G5BPL1Hy/s
zI4F9F/ioJE/czXGCH6JNwZu7FWbSneNeaHH3Mm1NoSTWbu7WC114Z0qT4JJF4nn
C6RXRUNw2lG1NDx337ogRW6uyybGFEZz7RJdoQFd7Grs02SaBp8gdrPDhhJyd1B3
epttxBcH4AqCVlJ9+T9TfKEta+z8fQ5Q7qlkZpBZsLhwKo6DAb8Ja6km44PAhtJN
hzzi4TX8fN8dhNYg37WlGsY4+CsqzbRhho2BM6yoqGsUJd5J8QIysLPAWtXT8qgh
z7Q+LyMY5gJJTTVQ4VS+Kq1FDKIK2Ks=
-----END CERTIFICATE-----
Generated at Wed Oct 15 23:44:05 2025 by rpki-client