Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/837873a7-1437-3f98-8d3e-c510fbcf599d.roa
File:                     837873a7-1437-3f98-8d3e-c510fbcf599d.roa (raw, json)
Hash identifier:          A7QC0SC7Lq2h7bXfvl3GPQNoP3MFCNbfALzt0VoNuaM=
Subject key identifier:   35:FD:CA:67:38:E3:6A:35:1A:AB:2F:00:26:0C:50:98:99:86:58:36
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B20671757AAC3516A5D0F75C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/837873a7-1437-3f98-8d3e-c510fbcf599d.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.180.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:17:57:aa:c3:51:6a:5d:0f:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=088a0f58-714e-44f1-abcd-539cd46af042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e2:15:28:81:c7:fc:36:c2:df:bf:1c:f0:f2:
                    89:c5:02:a0:01:85:e4:d5:9b:1b:b4:2a:b2:56:2d:
                    15:5e:59:43:84:86:f8:80:91:d8:7b:46:b7:5e:77:
                    73:d3:82:41:1d:c0:ab:1f:5c:74:7f:0f:1f:76:c4:
                    70:db:b4:82:c8:fb:c5:57:01:3c:42:9f:e4:1e:3e:
                    e8:a3:fb:f4:b0:95:81:17:84:47:3b:8e:bf:d6:12:
                    83:4c:09:16:51:95:5c:c9:f1:96:54:a3:c6:1c:49:
                    0f:42:23:0e:ec:76:6c:e9:72:3e:59:5f:c5:e0:d7:
                    6c:5a:c4:6e:53:92:8f:db:67:61:77:e1:95:bf:62:
                    e2:5c:38:5b:49:cc:46:c0:f8:e4:bd:ad:9b:76:61:
                    da:0b:ea:71:24:82:14:9c:de:cb:c8:ab:4e:3d:36:
                    5b:71:18:8a:66:be:c1:6d:e0:b3:0f:1f:87:55:36:
                    c1:d8:11:9d:fc:bd:62:d3:6d:a7:28:7c:ff:9f:5b:
                    d6:13:24:62:8e:92:c3:88:da:8f:80:a8:cf:ab:33:
                    22:eb:98:04:7d:74:92:24:16:18:8d:e1:2e:92:ec:
                    85:22:10:90:48:5a:64:62:46:e5:66:e1:11:11:07:
                    1b:c4:d3:dd:7a:59:09:25:7d:19:26:96:b4:b0:04:
                    b5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:FD:CA:67:38:E3:6A:35:1A:AB:2F:00:26:0C:50:98:99:86:58:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/837873a7-1437-3f98-8d3e-c510fbcf599d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.180.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:9a:df:b7:3e:1a:fa:9f:bf:a8:4f:8c:a1:7e:2f:42:a5:8c:
         55:36:08:e0:82:33:99:c9:55:a3:13:04:a8:c0:48:a3:c3:bc:
         f8:f5:3e:13:72:16:e2:cd:73:4f:37:09:ea:be:71:28:1d:d9:
         99:34:ef:72:f8:57:d1:b9:3b:13:3e:13:56:72:49:23:dd:7c:
         11:68:46:ef:6a:0c:41:48:18:d7:38:94:47:c7:a3:b9:c0:22:
         3c:53:9c:c9:87:fa:8c:7e:01:ea:5d:95:06:fa:06:34:bd:46:
         7f:1f:8a:b8:ee:8e:bb:ce:80:a5:f7:79:ab:08:ab:2b:e0:fb:
         7d:81:f4:8f:07:a9:fb:c8:ad:68:c0:10:f3:46:14:e4:bb:76:
         69:b9:49:2b:9a:dc:0d:2e:da:e4:30:e7:44:c7:54:1c:d5:97:
         00:75:76:08:40:0f:12:1c:3f:a4:40:5c:51:b1:ad:93:4b:71:
         66:40:f7:5f:ee:28:ff:0a:90:54:9e:8c:99:67:55:56:15:35:
         5c:b4:9c:ed:9b:79:58:61:24:ce:44:f3:71:d0:c9:a7:56:ac:
         36:0e:b8:17:0d:34:bd:8c:5c:aa:15:7c:4b:3e:a4:06:b0:cc:
         b2:87:1c:a4:0f:03:a3:b1:f9:83:85:40:3f:43:75:e6:4a:d1:
         e5:65:af:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:22:46 2025 by rpki-client