Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/91805369-ef9f-3d49-a426-0f0e3b157999.roa
File:                     91805369-ef9f-3d49-a426-0f0e3b157999.roa (raw, json)
Hash identifier:          wnlNHBoiID706h1N71C0Mr+rhc04Rmac7cm2fAfIzMo=
Subject key identifier:   98:E2:4A:E4:9F:92:C8:DB:38:A6:BA:F4:39:63:35:6B:46:5D:73:6C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A40A847E366C4A569E88F6A20
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/91805369-ef9f-3d49-a426-0f0e3b157999.roa
Signing time:             Fri 20 Jun 2025 09:31:34 +0000
ROA not before:           Fri 20 Jun 2025 09:31:34 +0000
ROA not after:            Thu 18 Sep 2025 09:31:34 +0000
asID:                     22773
IP address blocks:        70.170.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:40:a8:47:e3:66:c4:a5:69:e8:8f:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun 20 09:31:34 2025 GMT
            Not After : Sep 18 09:31:34 2025 GMT
        Subject: CN=9631ac20-06ac-4d35-8168-9856766721ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:29:4f:0f:40:be:25:19:23:ce:c2:57:b7:95:
                    25:8d:7c:d1:b7:21:1b:66:eb:08:30:6f:35:3b:0e:
                    2b:c5:77:bc:41:b3:b2:8b:27:3c:ae:55:84:a1:31:
                    1b:59:70:b9:9d:f8:1d:36:90:fd:b6:2f:fc:b4:5c:
                    ac:f4:1f:de:8f:53:2b:eb:9f:46:b3:fc:7f:b3:29:
                    ea:d7:5a:9e:2c:55:83:35:46:cb:d0:71:6e:3c:01:
                    20:5a:80:9f:57:c1:fc:5b:c6:f6:92:f8:e8:fa:58:
                    4d:22:dc:62:07:8a:d4:f8:ea:41:38:b9:d3:37:9b:
                    18:bf:fa:cf:c4:90:ed:98:43:49:98:7a:08:a7:85:
                    e3:8f:d3:97:8c:4a:a1:61:e5:3b:f5:1b:d6:b9:66:
                    db:85:1d:52:a3:ea:da:23:79:28:5e:7c:9e:41:97:
                    33:7f:e6:73:05:4f:9d:40:ec:73:49:04:7f:70:a0:
                    06:01:86:4d:f4:0e:4e:0d:d8:d1:d0:a7:c2:a1:0f:
                    92:b7:56:34:25:4c:19:a5:8c:1e:03:38:24:1e:14:
                    29:2d:42:3a:1f:7c:4f:ff:bd:75:ec:0f:4a:ae:bb:
                    8f:f8:7c:ea:4b:0e:e4:35:d7:a9:b1:f8:1a:85:d6:
                    07:03:6a:17:2d:37:45:33:5f:40:46:95:8b:88:f8:
                    7b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E2:4A:E4:9F:92:C8:DB:38:A6:BA:F4:39:63:35:6B:46:5D:73:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/91805369-ef9f-3d49-a426-0f0e3b157999.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.170.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:81:b1:14:bc:90:9e:1b:b9:db:8c:2b:ed:01:69:7d:c6:df:
         2e:3b:bd:d8:ce:2f:61:ec:ab:75:14:df:4e:9d:f6:c6:dd:03:
         57:51:c5:51:1a:47:52:4c:8a:d4:fc:8c:ef:be:a7:18:e7:7b:
         47:5b:d5:04:49:77:a1:e6:5d:18:01:70:45:74:f8:69:d9:64:
         16:af:fd:dc:f5:45:39:25:d0:f6:72:62:fb:71:a1:32:1e:45:
         45:4f:80:75:ea:3a:73:81:a4:d4:62:db:d4:b0:13:3e:3b:3a:
         9f:89:36:c4:fb:d7:69:b0:cc:b0:11:5b:fc:53:d0:bb:b5:b1:
         fd:4c:c7:2f:63:8b:58:e5:ca:4d:de:50:71:dd:c2:0f:85:e2:
         14:1f:b7:47:94:dd:95:9e:cb:58:7f:19:1d:b7:a0:e5:fe:6d:
         0b:89:2e:f2:4a:e6:e6:91:06:ac:db:07:20:62:7a:e7:f0:ce:
         51:a9:0d:91:c9:bc:f7:a1:59:a8:fe:d4:8f:89:9f:f1:e0:1d:
         b1:2f:f8:46:f0:65:3c:3f:41:2e:4d:24:f5:96:b5:0f:05:e4:
         62:30:99:d4:fa:d6:97:05:06:3b:0d:ca:8d:4d:21:d8:fe:e1:
         ba:a7:e6:49:ea:e6:04:aa:c0:51:b9:8d:62:35:30:65:4b:7b:
         3f:5e:b9:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 14:31:23 2025 by rpki-client