Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f844521b-589c-3728-bf8d-602f0a4cc0f0.roa
File:                     f844521b-589c-3728-bf8d-602f0a4cc0f0.roa (raw, json)
Hash identifier:          eE7hurKFXczdJK7GavJl/woOZ/lpj2njvqDToZIcuk0=
Subject key identifier:   84:64:6F:09:A4:EB:14:3B:FA:37:43:6D:3A:6C:D4:27:27:D6:CF:81
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C6F90B66C02CDE3779C88
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f844521b-589c-3728-bf8d-602f0a4cc0f0.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.175.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:6f:90:b6:6c:02:cd:e3:77:9c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=72793a4f-1916-4b71-bab7-740c9249c5cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:24:a1:fb:9d:7f:ad:86:0f:8a:04:3e:87:83:
                    0e:06:8b:50:33:7e:6c:23:3d:48:42:8a:e7:1c:19:
                    2c:fa:ad:47:56:65:1a:e9:3d:d1:26:3b:66:50:f8:
                    81:7b:0e:7d:0d:0d:34:5b:a6:06:b2:6e:7e:62:af:
                    62:60:c2:f9:cd:d7:83:b2:da:0f:e5:03:2f:83:5f:
                    1e:98:bd:ba:d1:ef:a0:63:28:d9:3c:3d:11:12:50:
                    42:03:fc:1a:66:37:9b:0b:ab:17:ed:e7:6b:92:15:
                    a0:81:b9:b0:6e:49:b4:5f:82:d4:08:53:73:e0:ba:
                    53:32:2a:7d:99:64:a9:f6:13:c3:ba:27:f1:3d:3f:
                    27:24:ea:04:ee:4e:eb:6e:1c:c9:65:3e:59:58:b4:
                    bc:c3:88:bc:ef:fa:70:42:e8:83:77:3b:1f:25:9b:
                    93:ea:96:fe:d3:2b:f9:a5:b9:12:ea:96:b3:f1:79:
                    63:15:2d:b8:70:26:de:59:7a:50:8f:d9:52:1b:74:
                    dd:61:52:6e:6c:8d:06:6b:30:c2:d5:14:b4:19:f4:
                    4d:07:1d:0e:36:83:4e:c4:82:fb:6b:4a:34:6a:f0:
                    fa:88:2a:bd:6d:98:44:01:cd:f5:ff:d2:96:fc:b8:
                    a5:b6:7d:a1:b3:2c:a2:4e:6d:06:bf:d0:f5:d9:c2:
                    10:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:64:6F:09:A4:EB:14:3B:FA:37:43:6D:3A:6C:D4:27:27:D6:CF:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f844521b-589c-3728-bf8d-602f0a4cc0f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.175.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:dd:d7:11:64:57:64:96:04:c3:6e:c3:ed:28:a9:f2:14:c0:
         07:aa:3e:60:14:80:1d:65:60:1f:59:7d:a2:f7:40:7b:3b:37:
         12:58:b5:b0:06:dc:a0:58:45:a6:9d:d7:b9:ca:63:e7:25:62:
         88:77:21:44:a0:d5:32:8a:fb:9f:8a:92:ee:95:10:38:71:d7:
         bd:57:ff:91:6f:38:b3:6a:b4:ab:0d:d6:18:83:4b:c6:7c:f7:
         d4:5b:03:9e:94:e2:6e:db:e6:dd:0f:6f:f1:3e:85:77:19:b9:
         f7:93:41:cb:c6:d1:ab:d6:11:c5:b2:dc:96:fb:35:68:2b:b9:
         96:4d:99:73:df:2c:1c:7b:c3:c5:a9:be:81:56:d5:74:4c:db:
         7d:88:bc:e3:51:fb:df:4b:61:41:e3:a6:ad:9e:24:67:ca:0c:
         a5:a7:a3:d6:08:85:15:a4:c0:90:02:c3:a7:c1:2e:a2:03:41:
         e4:ae:d4:0e:1d:4a:39:58:34:a7:af:0c:6f:f0:d7:e0:fc:11:
         00:3b:ab:19:47:63:77:8d:ef:58:a3:ff:3f:21:0a:dd:c6:dd:
         f5:27:2f:88:65:44:81:62:7a:4a:b1:b6:f0:3d:29:5d:a0:79:
         fb:94:f8:31:50:e9:b9:f0:4f:8d:a1:e2:42:0b:2e:bf:72:f4:
         4a:86:ae:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:25:04 2025 by rpki-client