Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa948b1e-ccc1-3a17-ace7-71d0a22c873b.roa
File:                     fa948b1e-ccc1-3a17-ace7-71d0a22c873b.roa (raw, json)
Hash identifier:          44oz3MpII7TgEY6RB5gP7zQKJjL1igtCWf75av0t/wQ=
Subject key identifier:   BA:BF:E3:A5:31:5B:F2:D4:C2:D2:E7:5E:23:B6:59:C6:A2:44:14:36
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C74F7A843EA840B968980
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa948b1e-ccc1-3a17-ace7-71d0a22c873b.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.176.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:74:f7:a8:43:ea:84:0b:96:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=e0c1e8bf-189e-4956-89b0-c293e47f42d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7b:2b:ca:70:04:32:80:77:9d:33:7f:3a:ce:
                    fe:4d:d4:e3:7c:a1:7d:48:ae:31:8b:43:49:33:2b:
                    88:b6:e2:8d:1e:ba:3f:6c:83:fc:6f:e5:b0:05:80:
                    38:22:91:e1:a9:d8:50:e8:76:c3:23:31:32:dd:c1:
                    21:5e:b7:d7:fa:cd:83:85:8f:6c:50:d1:27:54:95:
                    07:f4:99:b3:17:8a:2d:27:13:87:2b:dd:c4:0d:d0:
                    c4:74:ac:73:fe:c5:f8:de:b6:6b:66:7d:ef:0b:79:
                    fe:fe:6e:61:9c:2c:fd:c3:aa:86:88:71:2b:02:72:
                    e0:fa:58:19:cb:33:db:74:81:60:7e:8d:ec:52:ce:
                    78:6d:b2:13:58:48:06:20:e3:da:0b:ec:0f:2d:2f:
                    a8:6c:05:81:ed:62:dc:e8:04:46:9f:0f:69:ed:17:
                    e3:b3:e4:7d:89:08:c8:7e:c4:38:84:db:6d:de:b0:
                    6c:31:d1:97:94:7a:46:ac:07:5d:d7:ee:1c:60:46:
                    b1:14:1e:ea:02:89:7e:51:6f:c7:b1:65:79:0c:f2:
                    20:07:ed:61:2d:ca:b0:7b:b6:f9:65:17:3c:19:b2:
                    38:fc:a2:e8:86:55:f7:35:28:73:69:e9:74:ab:c0:
                    0f:a3:c8:4f:34:4a:9f:28:1d:b3:71:f9:7a:61:2d:
                    26:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:BF:E3:A5:31:5B:F2:D4:C2:D2:E7:5E:23:B6:59:C6:A2:44:14:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fa948b1e-ccc1-3a17-ace7-71d0a22c873b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.176.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:88:0a:92:60:40:3f:2c:f0:df:b4:b5:25:db:cb:b1:a2:95:
         27:5d:ff:41:93:22:6b:90:8f:54:fc:1a:ef:a6:75:0e:b4:a1:
         69:4a:d2:67:aa:44:22:c1:35:0a:65:ea:8c:a6:0a:e9:5b:07:
         af:e3:26:64:60:dd:48:58:ff:f6:51:7a:70:da:8d:3c:12:1c:
         c7:a9:73:bd:cb:e7:e6:cb:c8:49:8e:7b:14:2a:37:1f:19:93:
         49:14:f7:f8:1d:48:cd:6a:dd:e9:bf:12:07:28:dd:a9:25:76:
         52:01:9e:18:0b:19:64:3f:e3:f6:3e:aa:14:4e:de:e6:ba:c8:
         db:2a:c7:66:95:31:ea:9e:0b:8d:a2:8b:ca:47:f9:cb:44:3a:
         91:25:e7:f0:a5:b4:5f:fa:a3:ec:2a:ef:b3:00:60:99:b3:6f:
         c7:43:ef:e7:ec:95:fa:bd:48:86:5c:23:08:00:ec:54:e7:b6:
         62:fe:3e:de:82:e9:a7:0b:9e:14:07:c8:0b:4c:48:b5:6b:bb:
         f6:e4:de:44:be:e8:76:ed:ce:47:c3:bf:43:f8:76:4a:a9:a0:
         05:0a:fb:5b:27:02:81:48:53:4e:79:e0:64:c7:70:4a:e4:26:
         b0:f7:ff:fe:1a:a8:d3:bc:ce:5c:07:70:a3:85:e6:e0:de:f3:
         5a:1f:85:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 15 21:26:52 2025 by rpki-client