Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c690eadd-067a-36aa-9bc9-1c98566dc60d.roa
File:                     c690eadd-067a-36aa-9bc9-1c98566dc60d.roa (raw, json)
Hash identifier:          gCTi3Y4c20t/fdEYO3vlX7iTDZBg3bpO9ydfDjl39eA=
Subject key identifier:   B9:88:86:E0:57:B5:09:EA:9D:58:21:8C:8C:BA:3D:A8:D0:13:0F:8D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D359FB7B8C08EF9E38F2DD800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c690eadd-067a-36aa-9bc9-1c98566dc60d.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        174.70.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:b7:b8:c0:8e:f9:e3:8f:2d:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=3050126c-7f4d-4c77-b5ac-826d7a73e5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:66:ea:18:59:b7:e8:50:b6:96:ed:ef:8a:e9:
                    fd:9b:58:6e:7a:66:ac:8d:99:63:a9:c9:e6:48:b4:
                    92:35:f5:72:3b:ac:20:a7:c7:5b:9f:6c:8b:ca:59:
                    32:a1:18:63:7c:84:2f:c2:5d:88:dd:f3:77:e9:9e:
                    ca:97:df:df:ab:2f:00:97:5d:09:2f:65:36:ec:89:
                    c6:a7:42:0f:a2:17:84:0e:2b:97:b9:be:be:bf:72:
                    94:eb:8f:d7:4a:2b:09:6b:1e:79:84:f2:24:38:ff:
                    97:8b:a4:1e:a5:96:1c:d9:a8:fc:57:26:e5:0a:f1:
                    87:21:e8:8c:6c:74:f6:d1:dc:52:2c:b4:03:c9:69:
                    3a:47:c1:5a:84:51:db:cb:cc:4d:1c:24:ef:15:09:
                    2d:80:a2:30:86:f1:5d:0b:99:29:59:21:b2:3f:0e:
                    50:ba:4d:3e:dd:68:52:40:26:7d:87:9e:98:43:c1:
                    0c:46:f6:69:1a:cb:31:91:ff:e8:74:e3:b1:0a:ae:
                    b8:50:c0:1c:e9:6c:22:14:0b:d2:b6:db:c0:9d:0c:
                    48:8b:92:ae:2c:e3:a1:63:86:a8:00:dc:af:6b:bb:
                    fa:90:85:f9:8a:59:b9:b2:9b:c3:e2:1e:a0:1a:82:
                    ed:fa:ff:a9:19:ac:c6:26:f0:64:f3:96:d6:5d:a3:
                    9e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:88:86:E0:57:B5:09:EA:9D:58:21:8C:8C:BA:3D:A8:D0:13:0F:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c690eadd-067a-36aa-9bc9-1c98566dc60d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.70.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:20:c5:c9:48:aa:46:eb:38:2a:34:12:8d:b5:34:b5:f0:4c:
         70:39:43:52:7e:d7:2d:c5:bf:3a:5d:ea:a1:97:09:48:b6:02:
         e3:9f:79:cf:70:1f:f5:a4:8d:0d:f5:1a:f5:61:aa:d8:9d:60:
         8b:69:5b:f8:33:6d:fe:b5:97:e5:9c:e2:6b:c1:7f:d0:86:e3:
         b7:1d:f9:be:1e:8e:61:02:52:a6:83:b4:cc:0b:be:db:2c:a3:
         70:9f:fd:2c:43:a5:af:0a:1b:28:45:de:c4:69:f1:5a:c9:a4:
         58:e4:e8:3d:66:03:e6:55:26:07:69:6c:a8:97:ea:51:21:d9:
         e0:fb:f4:e8:3b:ce:d1:91:e3:2e:ff:40:93:f0:fa:3d:07:58:
         88:f8:7a:59:24:7e:a8:ef:a1:5e:d9:d8:0d:4d:7f:f9:98:b3:
         dc:06:83:83:e9:77:09:80:73:d0:17:f6:c3:8c:d1:2e:4f:14:
         a0:db:81:f6:61:c2:d4:ac:86:28:42:14:96:c4:b7:a2:17:a2:
         c7:e2:7c:af:70:4c:3a:57:f4:93:4f:48:db:17:33:4d:59:0a:
         ba:d9:e4:41:8f:d2:29:3b:17:ff:8b:48:8a:a0:3f:13:9f:b4:
         70:ae:ec:20:08:f2:66:af:dd:41:81:89:2e:de:31:de:45:88:
         a2:c1:68:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n7e4wI75448t2AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk
MzA1MDEyNmMtN2Y0ZC00Yzc3LWI1YWMtODI2ZDdhNzNlNWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2bqGFm36FC2lu3viun9m1huemasjZljqcnm
SLSSNfVyO6wgp8dbn2yLylkyoRhjfIQvwl2I3fN36Z7Kl9/fqy8Al10JL2U27InG
p0IPoheEDiuXub6+v3KU64/XSisJax55hPIkOP+Xi6QepZYc2aj8VyblCvGHIeiM
bHT20dxSLLQDyWk6R8FahFHby8xNHCTvFQktgKIwhvFdC5kpWSGyPw5Quk0+3WhS
QCZ9h56YQ8EMRvZpGssxkf/odOOxCq64UMAc6WwiFAvSttvAnQxIi5KuLOOhY4ao
ANyva7v6kIX5ilm5spvD4h6gGoLt+v+pGazGJvBk85bWXaOeIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLmIhuBXtQnqnVghjIy6PajQEw+NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYzY5MGVhZGQtMDY3YS0z
NmFhLTliYzktMWM5ODU2NmRjNjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrkb4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC0gxclIqkbrOCo0Eo21NLXwTHA5Q1J+1y3Fvzpd6qGXCUi2AuOfec9w
H/WkjQ31GvVhqtidYItpW/gzbf61l+Wc4mvBf9CG47cd+b4ejmECUqaDtMwLvtss
o3Cf/SxDpa8KGyhF3sRp8VrJpFjk6D1mA+ZVJgdpbKiX6lEh2eD79Og7ztGR4y7/
QJPw+j0HWIj4elkkfqjvoV7Z2A1Nf/mYs9wGg4PpdwmAc9AX9sOM0S5PFKDbgfZh
wtSshihCFJbEt6IXosfifK9wTDpX9JNPSNsXM01ZCrrZ5EGP0ik7F/+LSIqgPxOf
tHCu7CAI8mav3UGBiS7eMd5FiKLBaCs=
-----END CERTIFICATE-----
Generated at Thu Mar 19 07:04:57 2026 by rpki-client