Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/80a24df1-7d3d-3658-8ff1-6980f38063dc.roa
File:                     80a24df1-7d3d-3658-8ff1-6980f38063dc.roa (raw, json)
Hash identifier:          RiFgj2Q1sb0gyH2VAKtU2cZKM0C8AcChpkvWUStrNcY=
Subject key identifier:   39:3F:15:9A:61:7D:51:EF:B7:D1:46:46:A8:3C:43:16:28:3B:F1:B5
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D806EB863684BE8344BA84A60
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/80a24df1-7d3d-3658-8ff1-6980f38063dc.roa
Signing time:             Tue 14 Apr 2026 08:08:08 +0000
ROA not before:           Tue 14 Apr 2026 08:08:08 +0000
ROA not after:            Mon 13 Jul 2026 08:08:08 +0000
asID:                     22773
IP address blocks:        70.183.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Apr 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:80:6e:b8:63:68:4b:e8:34:4b:a8:4a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr 14 08:08:08 2026 GMT
            Not After : Jul 13 08:08:08 2026 GMT
        Subject: CN=57e64994-2b2f-4e5b-814e-5c8145ac8502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b3:f9:8b:9c:da:a8:38:3e:bd:5b:f9:4f:02:
                    ca:fe:58:ab:e1:fa:80:d4:28:33:9a:ec:d1:97:69:
                    f2:d9:bd:9b:28:73:36:8b:c9:50:f3:04:02:09:8e:
                    9a:b6:6a:c5:cc:4f:0a:a7:59:e7:8f:c9:a4:4f:93:
                    32:7e:12:99:48:95:16:d8:24:a9:17:83:01:7d:a4:
                    c5:cb:42:a2:7b:6b:8d:84:a8:60:e6:c5:85:08:f1:
                    7e:5f:c3:e6:ff:eb:f8:9f:d8:77:02:bb:e1:45:05:
                    d5:fc:97:04:96:fd:7c:55:58:8b:ba:75:d7:da:b9:
                    91:09:5b:b9:b8:5d:ec:69:7c:06:4e:65:2f:7c:bb:
                    17:2f:74:74:9e:7c:a1:5e:c1:8a:63:c8:6d:6e:12:
                    30:5d:85:08:53:fc:79:83:8a:fb:64:7d:82:b2:46:
                    b5:fb:1c:75:59:c3:60:de:0c:f1:b3:c9:9b:5f:e0:
                    6d:2a:47:84:7d:4b:72:94:90:04:a1:c4:dd:82:f6:
                    6b:dc:b1:81:e0:c7:f0:56:b1:ed:75:fc:ac:4f:fa:
                    04:1c:a3:5f:b8:0d:c9:94:ef:3f:b3:f2:7b:c9:72:
                    8e:da:a2:b6:cd:6d:1d:79:4e:3d:da:75:3b:57:e2:
                    bd:f9:c3:16:7c:aa:1d:73:5a:7e:16:2d:55:60:b6:
                    59:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3F:15:9A:61:7D:51:EF:B7:D1:46:46:A8:3C:43:16:28:3B:F1:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/80a24df1-7d3d-3658-8ff1-6980f38063dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.183.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ae:17:ec:d2:36:39:4f:aa:e9:0a:dd:c8:63:83:f2:2f:dc:
         09:ac:8f:43:a4:db:fc:0e:b2:8d:93:76:87:c7:b8:f3:a2:94:
         8e:bc:41:7b:f5:8a:3b:1a:d5:1d:dd:1a:17:23:07:0c:67:7e:
         36:3f:0b:22:7d:19:08:ea:e7:17:8a:81:4e:f4:c4:48:6f:44:
         8c:5b:6f:ac:91:d8:d0:5f:45:6d:2f:b7:75:d0:b4:fc:66:f8:
         df:0a:39:ec:16:63:fb:e0:1f:34:d7:39:a9:c8:46:5f:16:48:
         4b:d0:4b:14:3e:27:ac:6c:9b:b6:30:29:cc:6f:a2:8c:8c:eb:
         ba:7f:53:6c:c2:e1:4e:fd:7c:29:64:0e:f2:91:ff:17:e2:e8:
         01:92:32:a8:a9:5b:05:77:1c:82:c6:1e:d5:59:02:e9:f1:7e:
         ec:12:f3:61:4d:5d:33:ab:e1:d3:c8:ad:66:98:62:7b:ca:f9:
         a3:22:b0:8c:b3:60:f9:df:73:0a:22:24:d3:ff:f9:92:69:ac:
         a3:24:ec:00:d1:65:15:e1:7f:4c:e9:0c:32:8a:98:e0:78:db:
         85:cd:cd:50:66:18:a6:39:88:e3:5c:fd:06:32:02:4a:fe:68:
         6b:0b:c6:7f:9e:ee:66:6d:bc:0b:fa:cd:5f:c1:52:99:80:a4:
         86:c8:13:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 14:53:39 2026 by rpki-client