Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c8b25094-b608-3e2e-8348-a2df1249e0c9.roa
File:                     c8b25094-b608-3e2e-8348-a2df1249e0c9.roa (raw, json)
Hash identifier:          qMfWQYPtq1z5P5jggn4F3o1iGV7VpnTRhjJ55aWY+2g=
Subject key identifier:   50:01:B5:39:52:6D:B6:FA:92:4F:B2:14:0D:BC:D8:D6:05:FC:1C:2F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B20670EA428BC481B82820F80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c8b25094-b608-3e2e-8348-a2df1249e0c9.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.173.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:0e:a4:28:bc:48:1b:82:82:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=a04d3440-eba7-4fae-add4-c2e93c0bb486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1c:19:38:96:13:6b:5f:9b:6b:1d:33:f9:26:
                    23:2b:40:37:c2:51:2c:aa:db:af:c6:f8:d5:0b:01:
                    2f:87:29:36:40:0d:de:16:53:54:1d:f6:00:32:06:
                    8a:71:86:dd:e9:5a:40:70:11:c3:d8:57:b9:1d:36:
                    9d:cc:94:75:3b:87:b5:a0:e5:d1:e9:b0:f2:13:a1:
                    ea:78:8c:c6:73:0f:f8:10:b6:60:08:79:00:cc:ce:
                    9b:0f:09:80:e0:a4:a7:f9:c8:92:f2:1f:02:ca:4e:
                    17:e9:12:7d:c4:b7:54:dd:b7:3c:76:7f:28:e8:c2:
                    76:c1:52:28:fc:29:de:04:ae:3b:c8:4e:e5:89:2f:
                    44:9b:4e:70:c1:fd:c8:86:d2:fb:c6:3f:2e:9c:90:
                    84:d0:96:b3:31:e1:f5:eb:fa:fe:89:ee:d9:70:e5:
                    71:73:51:54:ba:d6:1a:d9:d7:92:04:35:f3:78:15:
                    45:36:7c:6c:61:9d:c7:9b:15:c1:40:e1:e2:e3:64:
                    87:e0:c4:d7:92:5f:56:ce:3f:78:3b:5f:1a:c5:15:
                    3a:b0:a8:20:fb:50:cf:e8:c9:d1:19:9f:fb:b0:f1:
                    14:5b:1c:f9:7d:17:c9:cc:df:ff:f4:ec:a7:2c:61:
                    1d:08:b6:6f:1e:f6:dc:65:a3:ab:d7:cb:e0:38:a6:
                    79:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:01:B5:39:52:6D:B6:FA:92:4F:B2:14:0D:BC:D8:D6:05:FC:1C:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c8b25094-b608-3e2e-8348-a2df1249e0c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.173.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:ef:58:98:77:5b:ea:6c:d3:18:c8:c1:8a:ae:68:d0:50:59:
         19:fa:23:a5:bc:31:c2:94:43:c2:30:5e:5f:24:84:79:92:35:
         09:30:e7:8f:34:3d:62:64:02:0d:09:6e:61:d0:64:44:5e:d0:
         a0:7e:49:84:0a:97:e0:0f:b4:eb:0c:84:c1:4d:e6:21:ec:01:
         63:e6:c3:d4:4a:64:b0:8d:4a:cd:36:70:89:ba:19:ad:ae:70:
         14:39:83:99:7a:56:04:7b:f4:d3:66:26:ff:3d:39:15:84:ee:
         0c:c5:75:ce:5f:a6:31:2e:8c:33:01:86:18:7f:5a:f9:fb:ae:
         c3:ae:35:32:1e:9a:73:07:f7:5a:21:20:a5:9c:29:2e:5b:1b:
         e0:17:cc:4b:42:84:aa:19:4e:16:be:45:ad:84:78:83:39:c7:
         84:9d:bd:aa:95:06:69:24:e4:24:45:22:ac:e1:1a:a3:a7:e6:
         c2:40:b8:92:84:95:c1:59:d2:07:7f:12:5a:d7:c4:e8:a7:ba:
         bd:44:be:68:df:25:93:cf:b8:58:69:98:da:96:83:d8:6a:58:
         8e:fe:9f:c0:5d:a5:b8:2b:54:d6:3f:01:09:1d:8e:94:7d:ef:
         95:66:27:d2:25:df:d2:8d:cd:de:d9:ac:f3:db:39:7e:45:cd:
         53:7b:d3:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 02:03:48 2025 by rpki-client