Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3c52c97-c290-3307-892c-62205511a25b.roa
File:                     e3c52c97-c290-3307-892c-62205511a25b.roa (raw, json)
Hash identifier:          VD2v5DmgbQ+p1xbAcmG+PZ1qYa5xuFTElhTH6t0pl+U=
Subject key identifier:   88:4B:AD:05:95:ED:09:EE:AB:F2:7B:AC:08:0E:28:41:1E:6E:0D:E1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B206704A56E7A1435769AE7F8
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3c52c97-c290-3307-892c-62205511a25b.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.170.42.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:04:a5:6e:7a:14:35:76:9a:e7:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=cf649312-53e5-44fe-9d68-d39cf77a2ec9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:b5:12:36:c8:ae:2b:c7:50:10:b0:d3:53:
                    29:38:89:17:c5:6b:8c:65:ce:34:66:25:73:a2:5a:
                    5a:40:14:8c:ae:60:26:5e:9a:1c:01:c8:f0:f3:06:
                    6c:87:57:81:71:91:5e:7c:ae:bb:55:26:ca:10:6b:
                    7f:d3:63:35:a0:97:03:58:72:04:a1:ba:1e:36:dd:
                    f7:6f:03:43:79:58:45:e0:30:fc:05:0b:e1:f7:58:
                    11:c3:be:e8:94:a1:f0:fb:f6:c1:94:77:0b:dd:1c:
                    44:48:16:f6:0e:5d:e7:00:50:00:4f:81:f6:d8:2d:
                    46:b1:56:79:4a:49:9b:a5:09:27:b2:d5:7c:4a:5d:
                    f7:87:3a:13:aa:98:d1:46:ee:ae:06:00:89:70:41:
                    2f:76:e7:78:53:31:68:f3:c2:2c:6e:62:76:6f:ce:
                    48:55:e2:47:d7:ef:14:3c:0b:0c:79:32:93:cf:b1:
                    e7:29:75:20:fd:5b:15:06:1f:01:f1:5a:05:6f:82:
                    fe:52:9f:94:7f:fe:89:9e:ff:c2:52:d5:21:3f:ec:
                    64:48:b1:fa:2b:e0:76:a5:49:80:8a:46:d9:90:f8:
                    22:3e:ef:36:de:5a:11:f2:c2:f4:3d:8c:0a:70:ce:
                    74:69:67:a3:fa:d9:70:3f:81:fb:b0:dc:69:ea:d8:
                    39:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4B:AD:05:95:ED:09:EE:AB:F2:7B:AC:08:0E:28:41:1E:6E:0D:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e3c52c97-c290-3307-892c-62205511a25b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.170.42.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:37:b7:96:60:f6:91:0e:da:bf:0c:49:91:66:03:21:5b:f6:
         45:a3:fd:2c:67:5e:ef:72:a6:70:ca:55:f5:d1:0d:fc:04:23:
         f7:db:0b:93:97:07:81:37:e6:7b:e1:b3:61:fe:06:a7:b5:c9:
         1f:e6:bd:bb:b1:ca:5c:37:26:be:83:a8:75:3c:23:03:15:b6:
         fd:58:62:2c:4c:43:37:53:4e:78:58:55:59:57:a9:50:97:b8:
         a3:29:9c:1a:5e:b7:8f:52:24:5c:d5:ff:f8:c4:e9:25:b6:df:
         c1:a6:b1:ef:71:85:e4:61:6a:11:ef:f1:c7:08:44:9a:16:26:
         8c:4d:5e:b2:ca:3b:6f:e0:e9:23:62:94:d2:73:c2:61:4e:bd:
         85:1b:16:87:a4:76:9a:30:57:55:62:28:a9:f3:8a:f8:58:4d:
         9a:fe:04:ab:da:d9:22:4f:ee:8c:98:5c:25:c3:78:3f:66:4e:
         7d:c7:74:db:0d:92:ae:21:15:52:87:08:f5:9a:9e:65:08:ea:
         14:a7:c6:ce:bd:d0:68:7b:3d:a5:e8:8e:26:0b:f4:61:6c:73:
         65:a6:88:7d:f8:5d:54:e4:d3:45:4f:3c:09:26:9d:4b:c9:e4:
         22:eb:a1:e3:a6:fe:0a:84:0b:04:3a:4a:25:d7:9c:6d:b9:04:
         5c:ea:60:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 16 02:03:48 2025 by rpki-client