Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cd90d31-e0c2-3b61-bd59-dec7975f931e.roa
File:                     0cd90d31-e0c2-3b61-bd59-dec7975f931e.roa (raw, json)
Hash identifier:          ZfvxgkqoNjmAAzcR8oEkssrZM6qRwFynV+5TGenY7pQ=
Subject key identifier:   CC:14:04:84:EB:86:83:3A:AF:DE:9A:A9:B7:94:8E:9B:E8:F2:27:82
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E9EAFE18810E8A7215EEC5400
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cd90d31-e0c2-3b61-bd59-dec7975f931e.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     22773
IP address blocks:        70.171.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:e1:88:10:e8:a7:21:5e:ec:54:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=a3150fa1-01e6-4564-870c-f248e2ecb7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:54:39:45:69:b8:4f:f6:be:61:55:cd:61:af:
                    a7:43:d0:60:a2:08:36:5a:76:5e:54:3e:b9:ab:fa:
                    45:27:33:1d:46:64:c5:1b:30:3a:e2:c3:52:98:43:
                    c8:ec:94:e0:13:9f:a0:39:9d:ae:6f:ba:9c:f7:5a:
                    c6:22:97:26:6b:9a:11:f5:b8:be:76:22:01:e2:a2:
                    3c:7e:40:b0:5d:26:b1:86:db:6e:60:78:4e:95:b4:
                    0c:04:9d:79:ec:da:01:1c:49:cd:b9:55:e9:8b:5a:
                    24:8c:d2:52:6b:2f:ca:44:d4:32:de:fa:d5:59:7e:
                    09:7d:35:77:50:7a:58:29:b2:91:47:cb:a0:55:0c:
                    ff:4c:c5:e6:70:60:89:9a:38:96:18:45:7e:15:61:
                    f8:b3:66:de:18:8f:c7:26:86:ef:8a:69:8e:1e:a2:
                    fe:0e:b0:23:65:2e:3b:3c:bc:42:5e:e9:78:0a:0c:
                    a1:49:76:0f:3d:93:59:c5:62:d3:42:21:ee:04:95:
                    b1:3a:59:84:06:be:32:a6:53:f5:c1:7d:7f:c8:65:
                    cb:19:36:95:03:c1:b9:56:a3:2b:df:64:85:1a:1b:
                    61:12:39:23:cb:9a:d1:98:e2:f3:e7:a8:a7:a3:eb:
                    6b:d2:63:ea:54:ee:d1:82:85:aa:ed:c7:83:0b:f6:
                    33:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:14:04:84:EB:86:83:3A:AF:DE:9A:A9:B7:94:8E:9B:E8:F2:27:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0cd90d31-e0c2-3b61-bd59-dec7975f931e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.171.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:ca:5a:4c:6d:f2:c0:44:f6:2f:77:fb:68:92:03:e7:5f:75:
         4c:bc:ff:f7:ab:b1:76:7e:97:1e:e9:ad:78:3c:ce:7c:c9:f8:
         ac:33:1d:ca:40:43:79:36:54:98:77:09:31:e0:b5:82:da:0b:
         85:fc:5d:8f:73:7f:75:41:30:2c:72:f7:4f:36:e4:a5:d3:ec:
         45:37:0b:3e:0b:1a:8d:b2:18:37:11:e1:af:c6:16:b7:39:11:
         3d:d2:ad:3f:4a:ab:94:74:92:54:4e:10:bf:63:f8:5d:28:3e:
         4d:10:4f:03:ab:52:5b:59:1e:96:1f:b2:58:c1:c7:58:12:cd:
         ae:e4:7f:2f:cf:34:01:cf:ab:cc:b2:e1:6e:23:a0:c7:8e:bf:
         5a:24:68:4b:38:9c:f1:60:38:54:6e:96:bc:fe:40:c5:81:f9:
         77:56:dd:88:2c:54:98:63:f8:02:4f:4a:69:ab:87:83:f9:c4:
         17:24:c5:b5:d0:f6:5d:c7:6a:a0:07:2b:b4:54:7d:62:d5:c7:
         6f:11:e4:83:b2:6d:3d:43:3c:8e:10:16:28:f7:0f:e6:7a:f2:
         95:fe:81:39:a2:a8:80:9f:27:d9:45:5a:1c:e0:99:33:aa:52:
         48:52:ac:92:3e:14:02:31:5c:8f:d5:52:9b:02:7e:ae:89:a8:
         ce:d4:d7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:31:49 2026 by rpki-client