Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fc19fe35-00ae-3ae0-a1d9-38609da55159.roa
File:                     fc19fe35-00ae-3ae0-a1d9-38609da55159.roa (raw, json)
Hash identifier:          mO6+e4LUG8ljkYA6Y+jy9B55VcX3aXFnAeZmkjQZYQY=
Subject key identifier:   2D:6E:60:ED:2E:4E:86:21:9D:FD:51:64:25:6F:CA:AF:FA:BF:53:57
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584B1D9C73D6B09D65DB0AB999C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fc19fe35-00ae-3ae0-a1d9-38609da55159.roa
Signing time:             Sun 07 Sep 2025 13:00:41 +0000
ROA not before:           Sun 07 Sep 2025 13:00:41 +0000
ROA not after:            Sat 06 Dec 2025 14:00:41 +0000
asID:                     22773
IP address blocks:        70.176.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 17 Oct 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1d:9c:73:d6:b0:9d:65:db:0a:b9:99:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep  7 13:00:41 2025 GMT
            Not After : Dec  6 14:00:41 2025 GMT
        Subject: CN=9d6f5afd-80bc-4871-bf92-715160b22a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:bb:29:c9:47:8d:7a:4c:01:f4:b2:f4:c7:
                    d3:78:3a:1c:87:9c:b7:35:1b:eb:15:dc:b8:14:2a:
                    20:73:5e:78:a8:fa:93:a7:31:37:2d:87:42:e3:43:
                    34:15:e7:60:d4:61:95:b7:7d:ac:06:c4:de:7e:ce:
                    9e:aa:88:4b:f9:81:2a:6a:73:d1:af:46:e0:30:ac:
                    1f:ce:7c:1c:69:3b:cb:63:70:17:9b:a2:9e:e6:39:
                    9b:68:eb:2b:24:92:7a:56:0b:e4:c8:76:71:19:47:
                    0b:af:27:77:ab:d0:93:cd:67:ce:c7:04:95:1b:bc:
                    99:a9:d4:42:77:e2:c4:24:30:e9:c0:8a:c8:9a:2d:
                    62:97:09:4b:44:e0:62:c4:03:5d:6d:69:a2:3a:14:
                    00:17:97:bf:96:49:c3:11:e5:77:43:f0:99:c1:7d:
                    93:20:4c:54:61:10:4d:d0:aa:14:03:59:27:c3:d4:
                    75:7f:3c:b6:3b:fc:0c:a4:60:60:70:06:44:75:40:
                    0c:09:ec:56:2f:da:0d:2d:65:83:c0:83:ee:69:4c:
                    ee:18:66:bd:0f:9f:ef:cd:e1:9d:84:50:a3:f7:8b:
                    b0:d3:5c:98:31:61:76:77:46:db:4e:95:52:e7:10:
                    e9:24:ed:97:34:b0:ab:ca:26:35:bc:4b:64:d2:06:
                    b3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:6E:60:ED:2E:4E:86:21:9D:FD:51:64:25:6F:CA:AF:FA:BF:53:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/fc19fe35-00ae-3ae0-a1d9-38609da55159.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.176.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:23:0e:30:ce:d1:a0:ed:4c:95:5f:a1:73:75:b8:0d:0d:d6:
         33:3c:c2:2c:b3:f4:9f:00:a6:3c:c7:a6:a8:f3:10:43:75:9a:
         18:62:0d:7e:5b:42:93:3d:cc:95:dd:70:10:b8:2a:5c:df:1b:
         fd:e4:19:d1:0b:2c:57:65:30:72:bb:20:ab:77:5c:a0:88:7e:
         cd:f2:09:fc:72:0d:68:bb:46:43:56:37:b2:b4:a5:a8:ec:e7:
         4b:90:07:f8:62:06:e4:7a:88:a0:74:66:69:80:49:bd:45:c2:
         ed:3b:0c:f2:80:1f:ba:59:95:6f:b6:11:06:50:7f:6c:eb:61:
         ad:f0:81:45:fc:e7:41:f0:d9:48:d3:ec:4b:3e:69:6a:57:2b:
         89:4a:33:46:72:fa:2e:5c:c4:7c:a0:c5:78:bf:b3:71:03:ce:
         2c:9f:e1:cd:7c:72:33:78:22:78:c8:bc:4e:63:7a:82:f0:f1:
         08:39:a3:ba:96:6e:33:c2:fd:59:7b:82:5a:cb:56:a1:be:2e:
         d8:71:ca:bf:16:62:a4:6f:43:54:2c:8d:20:60:cc:ca:38:c3:
         fd:e5:35:6d:81:b8:8f:f9:b1:eb:23:68:99:af:2a:ba:68:bc:
         12:f1:ce:e5:a8:eb:ef:23:76:ee:2e:12:cb:7b:63:a7:dc:b2:
         2c:ab:3a:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnHPWsJ1l2wq5mcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk
OWQ2ZjVhZmQtODBiYy00ODcxLWJmOTItNzE1MTYwYjIyYThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosO7KclHjXpMAfSy9MfTeDoch5y3NRvrFdy4
FCogc154qPqTpzE3LYdC40M0Fedg1GGVt32sBsTefs6eqohL+YEqanPRr0bgMKwf
znwcaTvLY3AXm6Ke5jmbaOsrJJJ6VgvkyHZxGUcLryd3q9CTzWfOxwSVG7yZqdRC
d+LEJDDpwIrImi1ilwlLROBixANdbWmiOhQAF5e/lknDEeV3Q/CZwX2TIExUYRBN
0KoUA1knw9R1fzy2O/wMpGBgcAZEdUAMCexWL9oNLWWDwIPuaUzuGGa9D5/vzeGd
hFCj94uw01yYMWF2d0bbTpVS5xDpJO2XNLCryiY1vEtk0gazswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC1uYO0uToYhnf1RZCVvyq/6v1NXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZmMxOWZlMzUtMDBhZS0z
YWUwLWExZDktMzg2MDlkYTU1MTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrAdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADwjDjDO0aDtTJVfoXN1uA0N1jM8wiyz9J8ApjzHpqjzEEN1mhhiDX5b
QpM9zJXdcBC4KlzfG/3kGdELLFdlMHK7IKt3XKCIfs3yCfxyDWi7RkNWN7K0pajs
50uQB/hiBuR6iKB0ZmmASb1Fwu07DPKAH7pZlW+2EQZQf2zrYa3wgUX850Hw2UjT
7Es+aWpXK4lKM0Zy+i5cxHygxXi/s3EDziyf4c18cjN4InjIvE5jeoLw8Qg5o7qW
bjPC/Vl7glrLVqG+Lthxyr8WYqRvQ1QsjSBgzMo4w/3lNW2BuI/5sesjaJmvKrpo
vBLxzuWo6+8jdu4uEst7Y6fcsiyrOhE=
-----END CERTIFICATE-----
Generated at Thu Oct 16 02:03:52 2025 by rpki-client