Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/986bedf2-146c-3a6c-bb6a-54c5379ced92.roa
File:                     986bedf2-146c-3a6c-bb6a-54c5379ced92.roa (raw, json)
Hash identifier:          JBLv599poW3RTsDrJzZv15ORNSWpnTii/aTfjpXJCMY=
Subject key identifier:   73:39:CF:02:4F:B0:9A:29:96:9E:1C:00:B1:52:94:93:49:45:A9:17
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B20670AEDE45A5A4D47EC9C00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/986bedf2-146c-3a6c-bb6a-54c5379ced92.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.173.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:0a:ed:e4:5a:5a:4d:47:ec:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=18d781eb-61f0-41c0-a141-59f452736bd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:20:0a:88:7a:cb:4b:8c:a3:38:dc:0d:72:
                    b8:0b:88:66:37:14:f7:00:cc:e8:a7:4c:23:b5:10:
                    f4:e2:ab:68:09:c2:f4:c4:16:76:92:97:c1:7d:25:
                    b2:a0:5d:e9:cf:5c:8a:82:e6:46:a5:6f:73:3b:e2:
                    fb:6f:dc:32:0b:e5:3c:b7:0c:ec:a8:10:e6:fa:89:
                    cd:49:3b:30:51:f4:a1:24:89:97:7b:cf:4d:42:cc:
                    9c:9f:92:1f:6b:ec:1e:ec:6b:89:70:cb:3d:45:fa:
                    db:fa:4d:f6:41:f9:67:c3:31:c8:b0:a1:cb:44:c1:
                    2c:fd:ff:88:84:e5:90:9f:64:87:5e:88:65:d3:56:
                    39:76:ce:70:aa:9c:ea:4d:6d:44:dc:07:14:c5:57:
                    24:5c:a3:26:77:3a:58:3b:21:7c:81:12:6c:fe:0b:
                    65:d4:dc:dd:76:fc:77:6c:19:d5:88:35:c2:fa:50:
                    eb:a6:38:14:8a:e2:02:e5:25:85:8f:7b:57:5f:22:
                    d9:3c:37:96:e6:70:7e:20:71:dc:31:cb:f8:d6:3d:
                    93:47:a5:bd:2c:29:7d:43:cb:60:09:70:ab:14:6b:
                    85:2a:10:f2:b7:16:0b:a8:ad:5e:33:41:01:38:3f:
                    a0:4f:7a:65:aa:b0:6f:6b:0f:52:7d:de:50:ef:a8:
                    fe:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:39:CF:02:4F:B0:9A:29:96:9E:1C:00:B1:52:94:93:49:45:A9:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/986bedf2-146c-3a6c-bb6a-54c5379ced92.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.173.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:8b:66:ad:9d:d1:6c:73:03:95:53:79:9f:3b:0d:c8:94:e5:
         2a:42:51:c7:05:81:e1:d8:32:d8:c7:d0:33:94:23:4c:34:ab:
         41:a0:82:67:2c:81:be:b8:74:35:99:01:33:b2:f7:19:47:fc:
         4d:84:88:1c:2f:8f:a0:66:3e:0d:49:c7:32:f1:bc:8b:f4:a0:
         88:e7:1a:9b:f0:c1:77:87:66:7e:85:70:dd:04:7d:e9:5d:3a:
         99:9e:40:c8:41:db:87:16:de:5e:9f:bc:dd:15:07:fc:bf:5b:
         b2:82:6c:68:c1:2a:e2:a4:82:34:8b:da:79:85:c1:a5:90:39:
         49:20:e1:2d:c2:f9:83:14:a4:6e:52:ba:f0:7e:a1:0b:c5:61:
         77:13:d6:76:30:19:f7:97:a1:3a:b8:01:96:27:55:a8:db:82:
         86:b2:f3:26:4a:e3:0a:58:f4:89:b0:88:42:45:2f:a5:10:35:
         d2:aa:3f:d7:64:cd:fe:f6:74:58:c1:54:86:04:29:e1:23:68:
         40:1d:0e:51:a1:1e:98:67:31:54:6c:4d:c3:ab:56:a4:53:50:
         b5:97:e5:fa:76:ec:35:80:51:53:ca:1c:75:bc:01:ca:8d:3f:
         c6:e4:ed:9b:bc:40:f2:dc:ec:eb:cc:0a:e0:fd:de:a3:7e:21:
         46:fd:c6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:22:05 2025 by rpki-client