Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d507fdc-9968-302d-ad00-25cb2b0e98ea.roa
File:                     1d507fdc-9968-302d-ad00-25cb2b0e98ea.roa (raw, json)
Hash identifier:          IQfYnzP0H2saXf2PBB8QURMnpvtGiv8ClkVpcIgvy0k=
Subject key identifier:   72:3C:4A:73:0B:F2:26:6C:F6:3B:16:2F:B0:FE:1B:0A:FC:B1:F7:AC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDDCD331721E0D1EF5F129BC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d507fdc-9968-302d-ad00-25cb2b0e98ea.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        70.172.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cd:33:17:21:e0:d1:ef:5f:12:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=b9c14cb4-5720-4b12-b7b0-e78d0a9049d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:25:5a:ce:e3:ec:39:f1:3f:91:b7:e8:b9:86:
                    57:46:2f:0c:ea:a4:06:cd:14:e2:14:e4:dd:26:f8:
                    0e:ce:0b:76:66:bc:2c:41:ce:cf:85:a8:9d:22:e1:
                    36:16:ca:fd:09:dc:e8:d3:85:be:45:c1:ef:7d:01:
                    fa:57:f3:cf:83:b8:39:95:b4:78:3d:6e:9c:42:9b:
                    5d:0b:68:82:8a:93:18:51:ff:8f:2b:19:84:ca:44:
                    b8:62:da:80:d2:42:f0:04:18:1b:59:46:03:6b:7b:
                    53:36:80:2f:1b:b6:0b:72:52:9e:37:18:9e:d2:18:
                    61:fb:79:c5:4e:a9:a0:8c:55:6d:99:4f:ed:54:65:
                    34:7b:57:40:b4:2e:b7:34:90:2b:d0:3d:47:e7:3b:
                    a2:9d:b7:77:f3:ac:a6:58:53:e6:a1:8b:82:04:73:
                    53:63:0b:20:ec:f1:b5:33:22:9b:c1:cb:df:8f:39:
                    97:88:df:3a:be:48:40:a8:96:0e:70:38:72:d0:8b:
                    c1:6c:ee:44:e9:8e:85:b3:83:06:6e:4c:ed:87:89:
                    05:b5:52:d1:0d:7e:c0:62:a1:ab:9e:d5:bd:8a:24:
                    b4:32:2d:ac:74:fa:ba:1a:e0:21:d9:e4:ae:78:61:
                    8a:1c:17:af:5d:04:36:09:01:52:f4:80:cb:c5:40:
                    bd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:3C:4A:73:0B:F2:26:6C:F6:3B:16:2F:B0:FE:1B:0A:FC:B1:F7:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1d507fdc-9968-302d-ad00-25cb2b0e98ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.172.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:cd:29:d7:02:fb:c8:b0:47:95:25:2e:e8:27:55:1a:f9:4d:
         57:5b:b9:af:9c:ec:5e:c3:c4:02:bc:48:db:46:b1:46:0f:ff:
         f2:44:40:bf:e2:23:3b:e7:41:29:f6:3c:8e:bd:04:88:8b:50:
         45:f7:9a:2e:10:fc:06:b1:cf:d8:84:c6:17:0e:1f:73:07:2a:
         79:85:ff:d9:e7:7d:9d:97:a0:2f:b8:50:64:39:84:6d:20:15:
         96:c0:1e:6f:d8:a8:60:34:88:c6:92:c0:a5:fa:4f:0e:4d:a2:
         d4:f5:2b:c3:0d:a5:9f:ec:28:88:6b:b9:9f:dc:9d:49:8b:cb:
         29:83:b5:2f:0e:c7:4b:26:2a:24:3f:c2:aa:fe:55:c1:00:49:
         b4:18:01:4b:f6:4c:44:b4:63:a1:4e:b9:9c:cb:c6:fa:1c:ea:
         ee:3b:cc:02:2e:1e:d3:22:af:51:82:75:42:19:7c:0d:93:74:
         00:43:4b:f9:cb:ff:4f:ac:f4:0f:6f:6a:e2:20:b6:1f:dd:2b:
         8a:9a:f4:6f:93:5a:3c:a2:99:53:38:3b:a1:36:54:0d:ec:a6:
         92:01:65:54:c6:a3:eb:45:4b:f4:85:e2:3c:fb:a5:ac:a5:df:
         62:e9:a1:1d:0a:cb:ef:8f:ff:f2:6f:1d:21:42:bc:72:f2:c5:
         66:4f:fa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:44:14 2026 by rpki-client