Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f78ef954-2fdb-3707-9f5d-69a5ba48a9c4.roa
File:                     f78ef954-2fdb-3707-9f5d-69a5ba48a9c4.roa (raw, json)
Hash identifier:          dV2IogaiCSA/m66gklEZls+WMVkc0TYwRNmSyrAaqGU=
Subject key identifier:   B6:1E:61:55:BF:B8:41:95:61:40:DD:48:3C:EC:5C:26:28:3C:CA:C7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B20670408CC5F8B8BA758CA00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f78ef954-2fdb-3707-9f5d-69a5ba48a9c4.roa
Signing time:             Mon 08 Sep 2025 13:00:41 +0000
ROA not before:           Mon 08 Sep 2025 13:00:41 +0000
ROA not after:            Sun 07 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.170.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:20:67:04:08:cc:5f:8b:8b:a7:58:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  8 13:00:41 2025 GMT
            Not After : Dec  7 14:00:41 2025 GMT
        Subject: CN=f75fb7a6-7312-4044-a792-e4a253e8ad64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:e9:81:a5:80:a3:10:0a:45:2f:05:5f:ad:93:
                    2c:c5:ce:e8:9a:33:4f:8f:4c:bf:82:fa:ac:27:17:
                    e4:4b:66:2e:ee:da:62:7b:5c:9e:0d:f0:72:2d:f8:
                    50:7d:aa:57:23:52:88:e1:b9:cc:1a:ad:da:fa:72:
                    f7:49:3b:96:4d:3d:12:e8:85:30:a9:83:9b:66:65:
                    c5:2c:8a:27:20:95:8b:d8:1f:9c:e4:52:18:b3:dd:
                    ba:d8:db:75:74:e4:6e:be:0b:84:04:a6:57:66:65:
                    13:6a:e9:e6:9f:95:4f:9b:bf:15:53:55:8d:58:bf:
                    d6:db:ef:d3:66:68:ec:58:2a:b8:69:2a:56:06:b0:
                    fa:d8:ad:f6:e3:c4:c0:b1:26:1a:1f:80:fc:9f:e6:
                    f6:e1:d9:bb:1d:b2:66:ec:f6:d8:92:34:b5:38:a9:
                    fc:3f:c2:c5:0d:00:e3:c6:a8:15:88:34:b4:ed:cf:
                    64:89:02:90:68:93:23:9e:57:33:a9:82:32:7b:20:
                    8f:02:18:9d:aa:de:23:56:e9:78:d4:78:20:6d:dd:
                    a8:a1:fe:0d:15:bd:d3:f2:58:69:f5:79:83:c9:36:
                    fa:14:dc:88:91:b5:cd:7d:a4:3f:15:95:2c:78:76:
                    bc:9e:c5:d1:43:6b:3c:40:de:ae:e0:fe:2b:3c:68:
                    96:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:1E:61:55:BF:B8:41:95:61:40:DD:48:3C:EC:5C:26:28:3C:CA:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f78ef954-2fdb-3707-9f5d-69a5ba48a9c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.170.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:0a:24:1d:ba:47:06:c9:57:05:b5:05:61:83:b8:11:be:5b:
         92:ac:5c:99:f7:7a:11:00:76:81:9f:50:35:fd:9f:b6:b0:f7:
         92:4c:89:6c:40:e3:bb:18:ef:5d:82:ea:2e:46:d7:5d:bd:b3:
         b2:4b:4f:3c:ed:93:17:9f:3f:8f:78:0c:06:1d:7c:80:90:ae:
         2a:48:35:9e:4d:7e:4c:4c:7a:90:c1:61:16:a7:38:da:c4:97:
         97:09:24:bc:47:ee:b9:4f:45:62:79:2a:c0:46:38:b1:1d:ac:
         8f:57:63:f5:cd:d0:b2:e3:e2:ac:2f:a3:fb:e7:2d:75:8d:f2:
         a3:04:f8:15:9c:48:db:18:b1:45:5a:dc:4f:6b:70:ac:15:36:
         d4:36:81:58:da:1f:21:7c:c6:2a:69:e3:53:33:c2:8f:70:f6:
         00:9e:8f:4e:5e:b3:a9:7f:3b:33:b8:23:6d:80:92:5b:9f:eb:
         c2:84:8f:cb:ad:a8:72:70:05:bf:92:71:de:82:08:2f:82:f9:
         69:76:61:dc:b6:13:64:41:84:59:7e:33:c7:aa:0b:bc:69:5f:
         6e:ff:95:83:e6:48:9d:b9:0d:2f:29:9e:e3:26:67:e8:6a:c3:
         8c:57:f4:eb:ac:75:61:ff:f4:25:ae:9e:ae:67:16:e3:35:0f:
         86:37:70:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:19:54 2025 by rpki-client