Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9fc52457-da99-3bc2-9282-2b66facd675e.roa
File:                     9fc52457-da99-3bc2-9282-2b66facd675e.roa (raw, json)
Hash identifier:          Fnsj6MTdgGPk9iQ0Fu2yV89xugIxEMHaV0DV5RJlrRA=
Subject key identifier:   89:E9:73:8C:6E:07:94:11:54:23:AF:BD:72:26:62:CE:C3:2C:42:0F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1F018D282BF928227FA81640
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9fc52457-da99-3bc2-9282-2b66facd675e.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     22773
IP address blocks:        70.185.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:8d:28:2b:f9:28:22:7f:a8:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=d1a017e1-2503-4371-9e40-cf2bcc54098f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9e:8b:82:4e:5e:b6:ce:d4:b5:9a:87:64:9a:
                    56:63:6c:ad:b4:08:8e:04:99:45:84:3a:e3:b9:27:
                    a3:a0:5b:25:8e:68:cd:88:9b:cb:b3:33:09:7a:99:
                    81:8d:dc:f1:fd:97:a7:27:13:0c:66:ce:8a:b1:12:
                    7d:f3:c4:1e:39:b3:b6:f4:83:b0:cb:0d:e2:1f:0a:
                    b8:b5:c1:cc:e5:55:9d:18:52:71:20:3a:ab:82:83:
                    6d:b2:fb:74:ae:17:8b:e9:f1:e1:6d:8f:cc:fd:ea:
                    81:00:ac:81:62:a2:4c:f1:78:33:8b:08:b2:c0:23:
                    bb:37:09:ce:eb:61:4e:03:e1:cd:54:35:91:57:13:
                    86:69:20:af:26:32:79:4e:50:a2:30:9d:ce:b8:c5:
                    09:07:58:09:d3:03:33:87:5a:c0:6d:27:3c:da:72:
                    ad:0a:77:57:13:25:e6:4b:d3:6b:ee:5e:e1:cc:df:
                    6a:e3:a9:77:58:c9:c6:ee:1c:fa:a8:cb:85:4c:30:
                    78:58:4c:0f:a8:41:dc:7e:12:2e:65:38:3c:92:ff:
                    34:d7:a0:a7:ea:cc:80:28:c9:7d:04:58:55:31:00:
                    2e:5c:51:43:34:38:fd:f6:4f:c8:6a:98:b5:62:47:
                    6a:3f:5e:cb:e8:b1:62:7d:22:af:e7:59:02:4e:68:
                    15:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E9:73:8C:6E:07:94:11:54:23:AF:BD:72:26:62:CE:C3:2C:42:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9fc52457-da99-3bc2-9282-2b66facd675e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.185.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:db:63:15:0c:c1:e7:7a:24:af:93:df:f7:9e:d3:f7:5b:f3:
         b6:6c:0d:9e:da:05:21:78:a9:02:62:17:42:12:cf:54:6c:88:
         03:b6:4f:3c:20:ec:a2:9f:56:4f:c5:51:10:b8:c4:28:47:3b:
         a0:85:5d:5d:92:b2:77:20:95:4f:51:0c:f7:12:39:8f:0b:82:
         7b:34:0e:1c:1b:6d:cd:d9:00:e9:e9:ac:51:5e:26:34:3d:97:
         d6:82:42:bb:f4:3b:66:58:bd:b5:38:cf:f5:30:87:49:03:1d:
         52:38:1d:fd:62:7e:05:6c:f7:24:1c:b1:e3:12:81:69:20:1a:
         31:58:1a:5f:5a:7b:45:d2:ac:6f:a7:f9:e1:e5:a1:66:44:72:
         d2:f7:b5:ee:6d:11:91:e5:36:28:f3:13:a7:cd:a1:2e:bc:06:
         e8:24:d7:36:39:30:5a:74:f3:eb:ac:f1:c1:23:59:a0:74:16:
         1c:67:d5:02:9e:79:7a:9c:f9:be:64:ce:ac:5f:ad:1f:b1:86:
         14:b2:67:cb:44:cd:8d:08:65:23:9d:66:86:11:f6:7d:a2:93:
         2f:76:2b:c1:71:e5:80:ca:d7:56:06:99:dc:99:fb:c3:94:76:
         f7:7d:3b:30:d9:79:56:bf:c9:dc:85:89:2d:25:5a:28:34:6a:
         a2:d3:e9:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAY0oK/koIn+oFkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
ZDFhMDE3ZTEtMjUwMy00MzcxLTllNDAtY2YyYmNjNTQwOThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl56Lgk5ets7UtZqHZJpWY2yttAiOBJlFhDrj
uSejoFsljmjNiJvLszMJepmBjdzx/ZenJxMMZs6KsRJ988QeObO29IOwyw3iHwq4
tcHM5VWdGFJxIDqrgoNtsvt0rheL6fHhbY/M/eqBAKyBYqJM8XgziwiywCO7NwnO
62FOA+HNVDWRVxOGaSCvJjJ5TlCiMJ3OuMUJB1gJ0wMzh1rAbSc82nKtCndXEyXm
S9Nr7l7hzN9q46l3WMnG7hz6qMuFTDB4WEwPqEHcfhIuZTg8kv8016Cn6syAKMl9
BFhVMQAuXFFDNDj99k/Iapi1YkdqP17L6LFifSKv51kCTmgVUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFInpc4xuB5QRVCOvvXImYs7DLEIPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvOWZjNTI0NTctZGE5OS0z
YmMyLTkyODItMmI2NmZhY2Q2NzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRrkiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTbYxUMwed6JK+T3/ee0/db87ZsDZ7aBSF4qQJiF0ISz1RsiAO2Tzwg
7KKfVk/FURC4xChHO6CFXV2SsncglU9RDPcSOY8Lgns0Dhwbbc3ZAOnprFFeJjQ9
l9aCQrv0O2ZYvbU4z/Uwh0kDHVI4Hf1ifgVs9yQcseMSgWkgGjFYGl9ae0XSrG+n
+eHloWZEctL3te5tEZHlNijzE6fNoS68Bugk1zY5MFp08+us8cEjWaB0Fhxn1QKe
eXqc+b5kzqxfrR+xhhSyZ8tEzY0IZSOdZoYR9n2iky92K8Fx5YDK11YGmdyZ+8OU
dvd9OzDZeVa/ydyFiS0lWig0aqLT6dA=
-----END CERTIFICATE-----
Generated at Wed Oct 15 23:35:13 2025 by rpki-client