Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9b8a500-ff4c-363a-a164-81965b953f22.roa
File:                     c9b8a500-ff4c-363a-a164-81965b953f22.roa (raw, json)
Hash identifier:          T4aHFmtzjACETA6ODiZ5Z7buF3NIBbiyqisTp+xR3w8=
Subject key identifier:   4B:95:6C:6F:51:68:10:16:A1:0E:3F:B7:9E:80:8B:DF:FC:AD:F3:01
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D359F7F071202DE03C76CAB40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9b8a500-ff4c-363a-a164-81965b953f22.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        70.186.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:7f:07:12:02:de:03:c7:6c:ab:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=c4182292-5716-45b0-a495-034f81468036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7f:8a:20:66:c1:71:10:9a:4d:b4:23:fd:3b:
                    ed:7f:dc:94:5d:c7:cd:52:f7:1f:29:26:70:a6:5b:
                    44:4f:6f:47:64:9b:ba:09:0a:7c:ea:73:8d:67:cb:
                    80:cc:e3:2d:40:25:ff:e6:2c:75:59:ae:26:48:cd:
                    84:8c:3a:bf:ee:be:2e:ca:55:14:e2:64:91:b0:40:
                    5d:df:22:90:8a:6d:0a:1b:34:b6:7c:39:ce:65:0f:
                    de:12:82:bd:b2:58:de:98:10:b8:92:52:c0:d2:ee:
                    d1:51:0c:6a:b2:14:e5:08:ab:0d:bb:ef:23:ba:9f:
                    98:aa:40:ec:8b:e9:62:98:c6:b7:c6:cf:88:b7:7f:
                    29:2f:9d:a3:6a:1b:52:4f:9d:c5:e7:21:c9:69:11:
                    43:61:c2:ff:1e:ed:79:fc:27:aa:f7:c9:2b:56:95:
                    c0:1f:46:1f:91:23:40:ac:5e:e6:98:85:6d:83:72:
                    f2:a6:ce:f1:ae:2f:55:e4:fc:14:9b:1a:ad:99:42:
                    e3:3c:aa:6a:96:9d:f3:0f:24:0e:c3:2b:a4:8a:ae:
                    f3:10:75:52:c6:5c:85:e5:dc:ff:5d:b3:cd:72:de:
                    ab:f6:11:6b:63:c4:6f:47:40:f1:12:3e:73:16:d1:
                    36:57:6b:17:8c:2c:8e:cd:6c:80:ac:3f:06:2a:61:
                    3f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:95:6C:6F:51:68:10:16:A1:0E:3F:B7:9E:80:8B:DF:FC:AD:F3:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/c9b8a500-ff4c-363a-a164-81965b953f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.186.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:e4:50:fc:75:22:c7:5b:62:3a:00:90:b4:4b:4f:50:0b:0c:
         bc:01:70:1e:5e:ea:da:94:e5:3c:7e:b2:f1:22:78:82:35:be:
         40:40:61:e4:f9:9f:09:2d:07:a2:0d:db:82:ca:1c:12:43:94:
         eb:d5:0a:66:79:1a:c8:a9:fd:aa:5f:8f:ad:cf:34:c2:7d:9f:
         53:9b:4a:a6:22:12:65:28:33:0c:be:81:fb:76:85:4b:43:32:
         9c:99:8f:4b:d2:b9:74:44:fc:fb:89:40:2e:c4:6c:97:7f:77:
         f4:e3:5e:f3:fe:b3:a1:74:75:70:67:3a:f7:6a:d5:1b:55:a6:
         82:8c:23:78:a7:d5:ee:27:4c:66:ea:6f:03:32:61:b1:5b:e1:
         7d:20:4a:00:0e:00:8d:d7:f5:a3:62:cf:69:aa:9b:17:ee:e3:
         02:a4:ab:f3:17:4b:92:19:1e:c8:9d:00:71:4e:af:6e:3d:38:
         65:14:9c:62:ae:48:d8:16:c8:10:da:fc:96:a3:25:ea:d5:ec:
         9b:bc:4b:08:90:1d:5e:96:ff:ba:b9:76:82:01:e3:ac:00:2c:
         5f:c7:0d:15:97:f3:8e:a7:88:9c:a9:56:83:c1:20:3b:d4:6d:
         7a:26:37:84:e8:53:0f:4d:88:b2:ce:f2:66:f7:e1:b7:aa:48:
         7f:49:60:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 05:40:17 2026 by rpki-client