Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00c0a50a-9f01-3408-9a40-a5ad1008e7dd.roa
File:                     00c0a50a-9f01-3408-9a40-a5ad1008e7dd.roa (raw, json)
Hash identifier:          43wUbanx8I15AjNVki/1UWjseBh/YvzGp63yhO8sgQQ=
Subject key identifier:   63:21:4D:AD:9E:E8:76:A9:BE:63:BD:91:DD:EA:3E:72:55:85:A8:EC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A9636469086BB1970ED4D0270
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00c0a50a-9f01-3408-9a40-a5ad1008e7dd.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        70.161.204.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:46:90:86:bb:19:70:ed:4d:02:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=c55b0092-6477-46a1-9f9d-b2761819403b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:c7:14:1d:b2:09:ee:da:fa:c8:96:2f:da:ef:
                    31:c3:79:29:d4:75:d9:77:5d:79:89:5f:e7:d2:81:
                    54:d3:37:7b:a0:13:25:7f:c1:39:9b:8a:39:18:e4:
                    8d:f7:64:53:65:93:f8:2c:a8:58:cd:a5:f2:a8:71:
                    fc:02:d3:73:a6:bf:33:88:06:05:94:ff:b6:3b:e0:
                    f8:7d:d0:0c:64:1d:0d:8d:cf:2b:dd:70:49:61:2f:
                    62:80:10:ef:ae:1d:4f:88:8b:1a:6e:b6:0e:96:5f:
                    9b:40:f9:65:7b:f8:38:67:de:60:a5:36:90:13:82:
                    7c:8c:5e:4f:cb:59:c4:98:8f:3f:3c:65:0b:da:69:
                    90:0c:12:dd:c6:a6:f6:13:7e:75:5b:95:60:d2:ab:
                    17:e5:20:58:e9:37:bf:26:14:62:d0:dc:25:0d:dd:
                    5d:d9:36:ce:c4:3d:07:54:5c:a8:6e:e2:e0:d4:12:
                    2e:30:8a:46:75:e6:7c:7d:05:5d:3d:e3:d0:2e:8b:
                    39:03:dc:79:53:70:ed:48:bc:bc:d2:ff:a0:a6:37:
                    d8:b3:46:fa:7c:f5:75:ea:81:3f:a7:e6:3b:3e:c7:
                    b8:fa:4c:19:cf:e4:b5:38:cf:fa:1f:c3:18:1f:88:
                    44:79:54:72:5f:0e:ad:0a:7a:3c:27:b2:b2:fe:b0:
                    ad:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:21:4D:AD:9E:E8:76:A9:BE:63:BD:91:DD:EA:3E:72:55:85:A8:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00c0a50a-9f01-3408-9a40-a5ad1008e7dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.161.204.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:d8:4a:c7:89:f0:6b:ae:cc:57:10:1b:2a:c7:82:fc:52:1b:
         9c:22:9a:82:b8:ad:74:3c:2d:05:30:7c:5c:4b:3a:1c:12:ef:
         52:29:45:81:b8:92:8e:51:d3:fb:1e:81:0a:55:fd:3b:c8:59:
         13:eb:bf:e7:8e:05:46:3e:01:e1:66:60:8a:b5:b3:97:b4:14:
         2c:5a:5d:a3:19:60:96:2f:84:71:6a:57:86:e1:f1:3a:78:dc:
         22:88:4a:d1:82:9b:e5:2d:28:13:68:20:36:5d:92:1d:40:dc:
         16:64:6b:aa:86:aa:03:b7:f4:a6:6e:75:6b:35:93:13:d1:f1:
         6b:8d:f2:a0:4d:8a:05:c8:44:5e:08:8c:0b:fa:45:e7:d0:33:
         99:41:b4:c0:7d:1f:bb:0f:2c:bf:21:04:d3:79:8e:88:06:c7:
         86:ad:05:01:7b:b4:2f:be:9b:e4:45:64:c4:db:c2:c3:cb:2e:
         90:ad:a5:7e:86:5f:18:21:e4:4d:80:b5:6c:0a:9c:3b:6e:f1:
         9f:d0:91:81:b6:2e:3d:03:93:da:83:73:4c:bd:01:70:3e:ea:
         12:72:a1:34:a4:05:28:f5:10:65:e1:16:87:82:d4:b3:15:ca:
         3f:58:b6:70:97:de:5b:29:7d:c1:f4:e6:e0:9b:49:9a:89:31:
         70:13:60:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 00:50:21 2025 by rpki-client