Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaf95949-9957-3f4d-a851-c4b5791c2d31.roa
File:                     aaf95949-9957-3f4d-a851-c4b5791c2d31.roa (raw, json)
Hash identifier:          2fsBGAUo6qPeOpsc6obDJcXHj1PIWGxqNTjmFUaTu0U=
Subject key identifier:   57:86:7E:E3:46:8D:41:1D:AD:21:9E:6B:B1:1F:B1:B5:33:AD:13:25
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C5F79503DD1A65EC81500
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaf95949-9957-3f4d-a851-c4b5791c2d31.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.162.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:5f:79:50:3d:d1:a6:5e:c8:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=457040cd-9d5f-48e5-8906-83844ff76ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dc:29:a4:30:b8:ee:06:1d:91:8e:6e:b2:fb:
                    d3:d6:f2:a8:df:f3:76:8a:e1:2d:2d:7b:be:e6:41:
                    ed:61:0a:f8:f4:a4:bf:f0:ea:6b:91:a4:29:fd:86:
                    1b:62:72:ec:73:0a:d9:08:73:83:d3:73:16:06:7f:
                    c5:7d:24:0f:75:ac:dd:2c:60:60:46:21:c1:6b:ca:
                    6c:a1:9f:9e:30:ac:09:16:94:6b:71:94:3e:a6:fa:
                    ef:89:5d:4d:50:b2:97:75:00:b8:ba:1c:86:80:ed:
                    43:c6:d7:9a:0a:84:56:66:53:79:6f:5d:86:19:b8:
                    77:e0:f5:4a:e6:f6:4b:14:3f:2b:e9:61:a6:4c:32:
                    8c:b1:9f:2d:a3:0e:60:96:c4:bb:3f:f7:bc:c0:9c:
                    3d:3b:93:02:ea:ef:c9:1f:f8:e9:9f:ee:84:fb:35:
                    1d:28:d2:64:1f:3b:da:e8:f3:c2:f6:b6:7a:b8:a2:
                    ae:f0:15:a9:0b:65:45:36:e7:a2:9b:e4:2c:d6:f9:
                    c3:00:a2:4a:d6:ab:ce:14:c5:88:72:dd:de:8f:6a:
                    de:93:1f:bd:a2:68:cf:dc:b2:41:3d:03:01:84:8b:
                    8b:58:32:cc:ef:3d:07:4d:00:4f:c3:7c:b2:0f:0a:
                    4f:29:e8:93:8e:e3:cc:c0:d4:6d:b2:d8:27:77:a9:
                    48:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:86:7E:E3:46:8D:41:1D:AD:21:9E:6B:B1:1F:B1:B5:33:AD:13:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/aaf95949-9957-3f4d-a851-c4b5791c2d31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.162.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:5d:a0:9c:a7:c8:44:b8:88:3c:4f:40:da:4b:82:0a:b4:e4:
         70:6c:fa:62:67:5c:78:a1:da:a3:36:cf:99:ce:6b:3c:5b:c6:
         4f:aa:18:cb:e6:ca:e0:fc:bd:29:d9:77:62:06:54:28:8e:48:
         0b:61:c9:21:eb:03:86:f6:2f:15:d3:4d:fe:a1:b3:1c:82:c7:
         0d:71:ed:d2:60:67:1f:6e:b4:0b:73:98:3f:c3:46:2d:72:39:
         c5:97:97:13:32:c0:5b:a7:ba:6a:36:0f:a2:ad:12:51:98:93:
         72:da:5b:63:4f:35:d4:bf:4d:06:59:56:56:78:f5:61:5b:a2:
         bc:71:f8:01:31:46:17:6a:01:90:20:9d:7c:19:39:cf:15:20:
         1b:d0:9a:ae:49:c3:73:3e:c3:5b:83:7c:21:8a:53:75:09:7c:
         f1:d4:b8:38:3d:e2:99:c7:cc:37:6d:8d:8e:37:6d:03:99:9e:
         30:85:ba:72:74:88:83:7f:6e:d3:2f:0f:d9:ea:4a:28:4d:fa:
         0e:d0:c3:8d:02:1d:59:10:a1:96:5f:db:c7:77:45:75:6f:2c:
         0e:2a:93:5d:6b:29:a9:7c:1a:cf:71:36:c6:a9:83:ed:d4:7f:
         0f:6f:c0:b7:ab:4c:3a:1c:3f:ee:15:ee:bb:8e:e9:2a:ee:66:
         96:4c:11:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 23:35:59 2025 by rpki-client