Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7dfc7fd8-be3a-3c5b-bf87-4d3e3ec3198f.roa
File:                     7dfc7fd8-be3a-3c5b-bf87-4d3e3ec3198f.roa (raw, json)
Hash identifier:          xIvLIzfCy8HiIyeTnTIp0i1CjhGcr7OVa4OwdUzsUG0=
Subject key identifier:   FC:DE:7F:49:23:69:96:C2:D7:2B:11:8F:70:79:6B:E0:77:85:10:67
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B821E1F12FF7CA67354199940
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7dfc7fd8-be3a-3c5b-bf87-4d3e3ec3198f.roa
Signing time:             Mon 13 Oct 2025 13:00:36 +0000
ROA not before:           Mon 13 Oct 2025 13:00:36 +0000
ROA not after:            Sun 11 Jan 2026 14:00:36 +0000
asID:                     22773
IP address blocks:        70.182.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:82:1e:1f:12:ff:7c:a6:73:54:19:99:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct 13 13:00:36 2025 GMT
            Not After : Jan 11 14:00:36 2026 GMT
        Subject: CN=c9375ba7-9d5a-479c-a39a-eac42963dc86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:de:20:d6:4c:a6:a0:5a:21:98:6d:e7:3e:8d:
                    b7:08:52:d4:08:f3:a0:d6:27:f6:b2:7b:17:8a:4f:
                    5a:56:f9:07:6b:b9:c7:e6:3d:c4:a4:c4:b8:bc:9c:
                    78:af:a7:68:39:45:d3:b5:f7:8f:1a:9a:79:13:61:
                    ba:bf:6d:c1:74:31:0b:17:45:ec:20:17:de:35:a5:
                    52:03:cd:24:ab:cc:c3:12:3b:14:e4:b8:20:78:9b:
                    ca:cf:0e:d2:70:6a:11:05:6a:53:f5:f6:34:4f:74:
                    d5:d9:94:3d:ff:ea:fb:df:4e:b7:86:06:d4:43:f1:
                    70:f7:af:90:89:bb:fa:85:56:f2:39:8d:cf:f1:77:
                    b8:6d:5a:4e:30:b2:40:3a:a1:3f:23:1b:66:3d:77:
                    86:73:99:19:e5:38:c7:ea:19:f2:e0:4c:e4:56:ff:
                    f7:6c:86:4a:0a:24:15:d6:41:ea:11:60:c5:3e:88:
                    cb:fd:de:b6:45:ee:b9:25:c5:8b:54:1f:b2:12:cf:
                    22:05:ce:5d:c4:bc:bb:e4:b7:65:ea:9a:80:5e:6d:
                    71:04:0f:8e:8d:7b:dc:64:32:ff:2c:34:4c:80:31:
                    66:01:3a:14:08:6f:78:02:49:30:e1:a5:94:3b:4b:
                    25:b5:5f:32:e5:79:a2:c3:ca:b7:c1:91:9e:24:01:
                    a4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DE:7F:49:23:69:96:C2:D7:2B:11:8F:70:79:6B:E0:77:85:10:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7dfc7fd8-be3a-3c5b-bf87-4d3e3ec3198f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.182.70.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:9d:23:0f:f5:61:8c:94:04:36:bf:32:91:f9:e8:66:f5:d0:
         9d:e4:e5:9e:b3:32:3f:5d:1e:d4:9d:52:e1:1f:8d:84:f9:53:
         75:cf:1e:ca:31:5f:60:32:47:3b:e0:00:40:92:fd:e7:2c:58:
         36:db:81:32:40:57:1c:1f:d8:16:26:0e:64:a2:f2:64:20:c6:
         94:a1:20:f6:7e:9b:1c:de:33:fe:7b:db:2f:eb:29:9e:6f:b9:
         e9:62:9c:9c:6f:37:4d:97:83:84:5c:8a:6e:e3:c9:92:cb:b3:
         61:ab:6b:47:35:bc:f0:06:ba:fd:66:6d:6c:f4:ce:c0:07:fb:
         3b:4e:04:db:63:5f:a9:f7:17:cf:ed:b0:a1:17:db:c9:b4:ed:
         93:b7:bb:1e:dc:8c:fc:0d:4a:7d:de:f9:8c:7c:51:25:ba:f5:
         e9:f4:8d:16:02:7c:e2:b5:d9:8a:67:07:9e:e1:0d:09:67:03:
         cd:08:2e:11:a0:c7:92:e3:fc:19:d8:f4:ea:cc:70:4b:3c:7a:
         06:f9:2e:80:aa:6a:0c:f0:8e:9e:e5:7b:d4:d9:e1:02:63:4c:
         84:7d:7c:4d:97:bd:0e:5e:91:8a:e1:8d:f3:1b:4e:63:32:0a:
         22:a9:69:d4:cb:af:13:23:b1:24:b7:a6:35:c4:de:d1:3f:e9:
         a2:3c:30:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:35:39 2025 by rpki-client