Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/831364b3-e0bd-3453-a394-414500552275.roa
File:                     831364b3-e0bd-3453-a394-414500552275.roa (raw, json)
Hash identifier:          op3rRP0DhHI7/JDJEgR3/ALb8s4vBySJtWgNS6bTek0=
Subject key identifier:   7B:5C:9D:C9:65:8D:0A:96:C7:88:A4:A0:DC:50:ED:E3:86:B6:06:76
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B206710284E52BC7C711EFE00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/831364b3-e0bd-3453-a394-414500552275.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.173.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:10:28:4e:52:bc:7c:71:1e:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=e63587eb-d079-464a-ab18-5c1fb6546f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:08:41:04:30:fd:4e:94:cd:e4:94:f3:30:9b:
                    3d:ac:9a:e0:e2:57:73:ff:04:af:b3:ae:3a:cd:23:
                    db:bc:d6:e5:36:22:21:cf:40:35:a0:8c:9c:93:5b:
                    18:00:ae:cc:20:21:fb:45:90:c7:f1:1b:1c:e6:6f:
                    8f:a8:86:df:e5:9a:37:3b:33:11:ad:92:b5:60:fa:
                    19:43:31:b4:fe:e8:e8:1c:47:a3:0d:b1:13:2f:0c:
                    0d:73:9e:f5:85:69:6e:b8:5b:1c:8e:88:c8:22:23:
                    f4:5e:b5:fb:3a:64:c3:65:bb:0f:e1:94:0d:af:4a:
                    fd:97:2e:91:d5:6b:87:4b:74:13:f4:3b:c4:f2:06:
                    bb:27:9f:57:6f:5c:6b:3a:32:d3:62:8c:e6:4b:d8:
                    82:4f:69:8d:fd:58:43:78:08:44:f9:56:e7:c7:cf:
                    22:3e:3d:e5:04:d2:9d:ce:b3:4b:91:ce:fe:ed:aa:
                    07:0f:b6:a2:8d:85:7a:c7:79:aa:38:43:39:73:51:
                    da:c0:24:fc:f2:21:b2:c6:1f:83:bf:e1:1d:0e:72:
                    12:03:60:73:4f:b9:9b:f6:bf:51:eb:a6:f5:bd:40:
                    01:4a:fb:0c:5c:cf:08:57:df:41:90:44:25:00:69:
                    b3:51:1b:92:76:1d:ba:5c:59:4d:a4:61:a4:f2:f6:
                    7e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:5C:9D:C9:65:8D:0A:96:C7:88:A4:A0:DC:50:ED:E3:86:B6:06:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/831364b3-e0bd-3453-a394-414500552275.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.173.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:54:65:89:e9:db:07:69:4e:a4:b7:d9:5e:fe:ed:b2:73:17:
         7c:9b:70:fd:4d:3c:58:58:d4:32:e7:14:a4:87:df:a3:26:9d:
         84:c6:dd:cf:c5:61:50:dc:ba:95:eb:8a:6c:de:6e:be:0a:30:
         77:4e:e3:57:b4:3f:5e:d2:60:a5:bb:92:da:f3:78:04:c1:f9:
         05:4c:ae:7b:14:4e:29:87:67:05:da:73:66:99:52:7a:bb:3e:
         d4:8d:3f:bd:6a:0a:71:b1:a5:87:c6:b6:41:29:e0:1a:2c:12:
         fd:eb:85:3c:c3:b6:65:2c:5c:a4:5f:43:00:b8:92:d0:74:48:
         09:08:6f:c8:09:2a:9f:b5:3b:74:ed:d4:09:ef:6b:24:29:f1:
         e7:1e:0c:28:18:f6:f5:ba:86:d4:27:0a:bf:5f:f5:e7:93:31:
         1d:cd:01:b5:67:f3:7d:b5:55:32:dc:07:f4:71:e2:e8:99:dd:
         35:61:70:ba:be:f6:bb:38:d0:dd:6f:de:77:84:2e:0d:30:00:
         d1:f0:d5:d5:c4:b8:7d:f0:e9:7c:8c:69:f3:44:1a:b3:f9:20:
         ff:37:3f:cf:42:da:94:72:16:dd:ea:ca:38:a2:2f:d1:d9:45:
         c4:53:ea:aa:69:27:b2:c5:74:71:8a:e4:fd:b5:00:c6:fd:21:
         dc:58:e0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:26:15 2025 by rpki-client