Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1617163c-e3c2-37e1-829f-ae9044bcd1d2.roa
File:                     1617163c-e3c2-37e1-829f-ae9044bcd1d2.roa (raw, json)
Hash identifier:          XxZqz67enuceG/7UF6ztFbNljNOY3vQdTUpRvMXoae8=
Subject key identifier:   08:FC:F0:5C:13:40:4E:9F:F7:35:EC:EF:A8:E5:BE:7C:06:64:2C:79
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584A963625D2084B90EBDB4F1BC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1617163c-e3c2-37e1-829f-ae9044bcd1d2.roa
Signing time:             Mon 21 Jul 2025 01:00:50 +0000
ROA not before:           Mon 21 Jul 2025 01:00:50 +0000
ROA not after:            Sun 19 Oct 2025 01:00:50 +0000
asID:                     22773
IP address blocks:        70.188.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:96:36:25:d2:08:4b:90:eb:db:4f:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 21 01:00:50 2025 GMT
            Not After : Oct 19 01:00:50 2025 GMT
        Subject: CN=14d05be1-e127-4470-a3e8-d0f60ce04a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:79:48:16:90:ce:78:27:54:6c:a3:2e:b6:
                    85:4a:a4:cd:17:7c:14:98:02:63:77:ca:f0:02:6c:
                    67:65:de:81:49:05:c1:60:05:9b:bc:26:7c:ce:5c:
                    d6:11:7b:87:89:9b:7c:7c:95:c5:47:8c:84:b7:a1:
                    29:63:73:d8:e0:21:59:f5:09:5c:73:bf:b3:72:23:
                    37:42:fd:84:2a:3d:9b:13:ff:b7:86:5f:41:53:a7:
                    05:42:2f:71:2c:34:94:dc:8e:a6:2b:ab:7e:25:6a:
                    f0:06:e7:fb:a5:47:8e:40:78:af:74:5a:6f:fd:2f:
                    08:34:91:ed:5a:52:0c:4a:82:eb:4f:19:93:ac:06:
                    cb:00:8a:b7:e9:0a:11:d1:bc:d3:b1:92:94:b6:80:
                    0b:b9:3e:c3:8d:1f:5c:50:49:0a:8f:79:db:3d:c0:
                    6f:6b:d0:d1:2b:32:9a:49:3a:9f:78:d2:53:7a:6f:
                    b7:c8:69:c4:ad:13:2d:43:45:7f:6c:67:8e:fd:b3:
                    af:69:18:2c:3e:b2:bf:35:92:4a:9b:9b:5d:c4:a7:
                    12:1a:23:69:9d:a4:d4:83:7e:5f:f1:89:63:1c:1d:
                    0b:fc:a3:fd:b7:1b:5b:7a:04:32:e8:b6:f1:97:79:
                    67:40:26:0d:dc:d6:e3:08:fe:fc:52:bf:2c:52:bb:
                    c4:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FC:F0:5C:13:40:4E:9F:F7:35:EC:EF:A8:E5:BE:7C:06:64:2C:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1617163c-e3c2-37e1-829f-ae9044bcd1d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.188.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:75:a8:89:65:59:b5:1a:86:77:d8:8b:3e:c2:8d:2f:63:20:
         e2:38:00:2b:8d:9f:2d:21:08:da:3a:53:33:7b:2d:ba:ce:36:
         51:58:ed:97:0b:46:eb:88:5a:66:03:fa:49:f7:bc:1a:f7:58:
         52:1e:03:b0:52:f3:b6:73:73:0a:39:e5:29:b4:46:e4:36:2e:
         c9:18:ba:ad:4b:ee:13:31:6b:27:88:bc:93:bf:d1:46:01:12:
         e3:e3:fd:90:1a:a2:a0:15:89:dc:24:c6:a8:cd:8b:40:fe:70:
         5e:dd:38:12:6a:2e:35:1a:93:0a:25:f6:e9:28:3d:83:2c:b2:
         3e:dd:48:fc:c7:40:b7:04:2f:9f:8d:f7:7c:84:2a:50:be:67:
         77:c4:26:45:13:f3:3e:e6:d8:9a:a7:36:eb:21:ca:3c:2b:58:
         f6:00:bf:bd:60:cc:e8:e5:30:65:66:39:68:6c:19:77:a5:b6:
         a6:78:5a:9f:12:d0:29:1c:9b:ec:0e:b2:a1:f3:06:0a:79:4a:
         de:a5:67:51:87:0e:b7:48:c4:a7:5a:36:e9:0b:b7:76:b2:d0:
         ed:7a:d8:07:ea:15:6d:ce:d5:d2:55:3a:28:27:e6:75:f0:38:
         0c:a8:a3:93:0a:ea:c5:b0:ab:21:74:63:b8:8f:be:7d:ef:78:
         65:0d:25:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:06:40 2025 by rpki-client