Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/96476770-a246-3e5a-af97-91e8bc530de5.roa
File:                     96476770-a246-3e5a-af97-91e8bc530de5.roa (raw, json)
Hash identifier:          kMLKhWUjsqwCm4fCl3gh9YVyOiC3BjZM+n9YH1x5Fck=
Subject key identifier:   E4:AB:5B:7A:D1:1A:3F:A4:4E:5D:90:85:A6:F8:B4:DB:7D:DA:4B:53
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F01950954B685C68DF7CB20
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/96476770-a246-3e5a-af97-91e8bc530de5.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        70.190.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:95:09:54:b6:85:c6:8d:f7:cb:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=58b0d899-9685-4134-9b5f-c1317d8c9544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bd:56:29:fb:56:a2:4e:10:20:a6:71:b5:34:
                    66:3e:fe:bc:13:6e:53:ae:4d:68:a7:a9:24:6a:d9:
                    6d:a7:af:13:99:81:f6:a1:d2:7f:40:06:22:ec:d5:
                    5d:92:60:96:52:3f:12:ab:5a:b8:ca:df:34:b4:e9:
                    c5:3a:c8:d4:26:de:37:a5:b7:55:b5:af:34:50:33:
                    29:6c:9c:7a:3f:56:b5:58:2a:2c:86:e8:fe:71:ba:
                    79:5e:75:eb:4f:27:c4:80:0c:04:7f:b8:0e:e7:a4:
                    06:88:8a:e9:d3:a5:25:16:cb:7e:a5:2e:20:ea:02:
                    49:c0:04:16:3f:17:31:d0:8d:02:03:6b:b9:03:d2:
                    e8:e4:fb:fa:a9:49:47:5f:62:46:33:2c:6c:76:53:
                    07:86:eb:be:a3:5d:2e:e0:ec:2d:95:3a:11:53:7d:
                    f8:7d:16:bb:ed:c0:0c:db:68:ce:b0:ef:b2:2b:52:
                    f3:a6:51:18:00:a7:c1:11:cf:cf:41:e6:c6:97:59:
                    45:bc:f8:fe:b3:e7:c0:96:9f:e7:b7:fa:a8:a2:a9:
                    08:bd:39:a1:5b:7a:37:11:16:67:a9:ff:75:fc:9f:
                    4f:6a:2d:26:4f:6e:1e:c3:17:b2:be:e4:43:ca:49:
                    4f:f7:e9:b5:cf:da:b4:c5:ee:61:0b:20:05:a0:75:
                    fd:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AB:5B:7A:D1:1A:3F:A4:4E:5D:90:85:A6:F8:B4:DB:7D:DA:4B:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/96476770-a246-3e5a-af97-91e8bc530de5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.190.126.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:97:1b:cb:85:89:c3:06:38:5b:89:0e:3c:49:8c:14:72:6a:
         cd:1b:ec:30:b9:3e:81:05:fd:d4:2a:54:cd:d4:90:40:9b:4a:
         4d:55:a7:e7:67:8c:70:ab:3b:90:93:f7:c0:b2:f7:52:ee:b2:
         34:83:67:51:cd:ba:76:0f:1f:7f:84:b4:50:61:28:25:60:1c:
         64:fa:d3:cc:a2:8f:95:73:d7:3c:e2:39:19:12:ea:95:23:91:
         3a:37:74:9a:e9:a4:ba:ed:53:7a:d3:57:1a:7b:86:ed:8f:c4:
         8c:73:02:ba:33:ed:30:ce:38:4e:48:9c:d0:db:9b:63:4e:52:
         bb:78:11:1d:dc:3f:df:49:1f:03:8b:9d:b7:a2:e0:f2:04:54:
         bf:d0:9c:03:31:45:c0:3f:0d:99:27:b1:b8:e4:78:c7:a1:fe:
         9e:7d:8c:08:24:c0:64:55:97:ee:a6:b4:a9:c9:63:0d:f5:83:
         50:24:f3:27:4e:dd:11:02:ee:56:63:b4:8d:74:89:9f:1b:e4:
         88:1e:88:1b:88:44:56:66:2c:bd:a2:e7:a7:dc:d5:df:7f:b5:
         2f:c7:8f:bd:b2:10:84:f8:f8:02:1c:b2:8c:61:10:74:5b:22:
         6c:9d:99:ed:67:5d:b4:e9:08:fc:dd:90:c7:ce:e3:11:13:3e:
         20:16:2f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:32:02 2025 by rpki-client