Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11bf264d-d1d6-3ad8-9e7f-83c00009f9e5.roa
File:                     11bf264d-d1d6-3ad8-9e7f-83c00009f9e5.roa (raw, json)
Hash identifier:          s0JlTSPvVFIipAPzpTSoo80jC7Ck1BmoWKVVAQI9FGw=
Subject key identifier:   0E:6F:FC:CD:28:06:1B:4B:19:8B:5D:1B:87:20:2A:69:F5:5D:27:33
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EA17A6289A816457044E667C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11bf264d-d1d6-3ad8-9e7f-83c00009f9e5.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     22773
IP address blocks:        70.170.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:62:89:a8:16:45:70:44:e6:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=ddfbdf74-e22a-426d-a503-f4a0e9018363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:49:7e:a2:cd:13:bd:81:64:85:8d:72:6a:
                    ce:84:8e:01:c5:88:24:9c:ac:d1:e7:49:df:cf:f4:
                    4e:c2:ed:9d:ae:95:f5:96:c9:6d:85:22:81:02:95:
                    c3:ea:5a:06:3b:37:85:28:8c:51:7e:83:da:b9:b2:
                    e8:50:f0:34:0c:60:dd:74:60:7a:19:d3:38:7e:d3:
                    b5:60:37:3c:eb:5e:2a:74:b6:49:04:46:c7:9f:98:
                    c1:c5:60:2c:73:83:12:b4:33:51:3a:0b:ab:3f:d5:
                    a5:11:dc:c8:cc:11:9a:5a:98:05:1f:bd:f4:fa:28:
                    37:f4:2f:4a:62:65:44:be:00:97:87:56:c0:67:24:
                    56:4e:4e:b3:7a:fa:4f:f7:08:11:f9:c7:35:bb:ef:
                    34:57:cc:f9:53:9b:39:e9:13:6c:79:94:9b:6c:fe:
                    8e:9e:92:50:9f:3f:31:bf:69:a3:9c:80:8f:fa:9c:
                    0d:90:47:b8:71:4e:c6:a6:b7:49:06:55:02:23:9b:
                    26:ae:0f:b5:aa:e2:a8:98:ad:c8:eb:c7:18:28:7f:
                    59:78:9a:cc:56:34:42:c5:80:b3:b4:e0:6f:2d:e2:
                    9e:8e:cd:73:8d:5a:e6:71:b2:57:44:56:a2:c4:85:
                    8c:a8:82:81:a0:29:ba:5c:1c:99:4f:b0:83:c8:33:
                    98:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6F:FC:CD:28:06:1B:4B:19:8B:5D:1B:87:20:2A:69:F5:5D:27:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11bf264d-d1d6-3ad8-9e7f-83c00009f9e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.170.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:45:cd:1f:2f:8f:5f:74:6e:6d:c0:00:7f:c1:22:bd:7b:db:
         77:8f:5d:67:68:2e:cb:d6:e9:db:21:9c:c1:09:8f:5f:6e:a3:
         45:e7:6f:d7:6b:2c:54:ef:4c:c6:8c:1e:c4:a1:24:52:bb:c9:
         48:a2:4c:ca:36:c9:3a:84:71:e6:6b:23:22:74:b4:36:23:3f:
         42:a3:4f:9e:e9:2b:84:58:cf:f0:a2:43:8a:08:b4:2a:e5:ab:
         e1:90:8e:09:3d:c8:93:f5:7d:ce:d1:2e:88:15:2f:dc:54:be:
         46:5a:cf:d5:95:7d:6f:53:28:eb:87:d8:f2:f0:b0:11:98:a4:
         72:d6:1c:4e:b7:a9:52:0e:3b:d4:e1:42:86:60:d9:d4:e5:25:
         69:20:bb:23:64:14:0a:70:22:b8:1f:79:a1:16:4c:d5:54:ef:
         5d:3c:82:ea:5f:b9:5f:3f:85:97:75:7c:2d:85:e1:21:93:d8:
         1a:58:ae:ba:8f:55:fd:34:7c:d9:da:96:af:71:05:68:0f:db:
         a3:db:7a:93:45:a6:7d:bd:a3:57:d5:aa:8f:91:d9:61:08:2d:
         91:cd:6f:91:54:c8:41:fd:9a:e3:03:57:02:94:c5:51:83:77:
         b0:f2:87:23:4e:3a:ea:79:b1:a8:b7:75:af:6b:39:51:26:4f:
         38:f8:d0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:06:27 2026 by rpki-client