Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2077ef87-38fd-3b77-8719-ce6af88a6f5f.roa
File:                     2077ef87-38fd-3b77-8719-ce6af88a6f5f.roa (raw, json)
Hash identifier:          /h5r2KJ0Eje7vzW3l+vNdaikgjcCZUBIfkWF48WS07U=
Subject key identifier:   94:71:3A:18:F4:E3:3A:37:9D:6F:D2:73:ED:58:0C:D5:7C:B4:57:23
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4112803D64810102FAB2C480
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2077ef87-38fd-3b77-8719-ce6af88a6f5f.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        70.177.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:80:3d:64:81:01:02:fa:b2:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=8d0d91a7-780d-41d3-a1a1-a9afb089f847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:08:b3:5f:94:42:e3:25:5d:96:72:e9:15:5d:
                    c0:78:c2:08:1b:4e:7f:ef:0f:d1:b9:17:02:4d:d9:
                    f3:ef:85:de:3e:39:8a:d5:af:3a:94:d7:6e:bf:a9:
                    e0:e6:fc:bb:22:0e:4f:b4:19:0c:42:72:3b:16:6b:
                    4a:34:e8:6e:a5:e5:09:34:01:e9:13:de:7d:e4:a1:
                    96:4e:a7:e5:4c:39:1c:4c:f0:af:f7:88:60:34:b8:
                    70:64:6c:a0:fb:de:34:dd:b3:b4:2d:85:39:13:33:
                    b4:42:ae:94:af:6c:91:a2:61:3c:1d:5c:6a:16:60:
                    fe:b0:85:43:77:ea:53:5c:29:52:1e:0f:60:5c:f9:
                    73:c7:a4:3d:5a:48:32:a7:53:73:82:d3:f4:b4:72:
                    ea:49:81:43:ae:b2:76:6d:39:d5:b2:02:fb:04:be:
                    cd:33:68:f6:87:bd:7d:1b:a6:08:e6:e9:b2:24:fc:
                    91:1a:cd:ea:73:7c:e8:44:d7:9d:77:1e:0b:7e:d2:
                    bf:42:56:f4:9c:3e:dd:9f:c9:4e:6a:32:ed:c6:9b:
                    5b:1c:1f:d7:38:2e:e1:a0:98:03:f0:bf:3e:cb:e7:
                    8b:7a:b8:ed:1b:e3:83:c2:03:e2:1b:87:76:21:67:
                    95:a6:af:5e:0e:69:6e:15:c6:70:b1:6b:5d:9c:da:
                    c5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:71:3A:18:F4:E3:3A:37:9D:6F:D2:73:ED:58:0C:D5:7C:B4:57:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2077ef87-38fd-3b77-8719-ce6af88a6f5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.177.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:7d:19:9c:09:f7:e8:65:7e:d0:c7:b1:51:9b:59:c1:b4:66:
         e2:73:04:7f:bf:65:54:bf:40:86:9f:49:49:5c:4f:3a:ce:6f:
         65:30:c8:e1:0c:a0:d9:cc:a9:16:19:e6:ee:a3:06:ce:7d:26:
         f8:f9:25:f0:99:04:2e:07:b8:ac:96:ca:50:db:4e:67:34:c7:
         4e:d3:32:9e:96:06:29:26:4b:b4:78:e1:07:66:f5:ed:7d:54:
         dc:f1:5c:86:48:9c:c7:35:cc:27:10:eb:f9:5d:06:89:3d:43:
         c5:44:05:41:b2:52:82:55:98:c1:b3:9c:c0:8a:da:c9:28:59:
         a0:7e:0c:66:bb:c3:2f:a6:4f:f6:69:7f:eb:33:33:dd:f6:97:
         7e:f0:eb:09:c6:da:c1:37:29:f3:98:ba:c6:49:98:3e:32:ea:
         3e:1c:50:3a:b6:cc:a9:99:36:6a:d9:52:0d:d7:d2:73:2d:55:
         b5:21:26:1f:05:61:0d:38:6b:db:2a:39:cd:78:ff:85:c7:2b:
         81:6d:cc:32:9f:26:17:d4:a7:07:61:24:e6:88:4f:a1:6d:77:
         c6:e1:59:72:ef:0b:ac:07:21:e3:d1:5c:af:01:f7:11:dc:06:
         f9:e5:b4:d0:c7:70:b4:b6:a1:0e:7d:f0:0b:e4:6b:2a:e7:7c:
         aa:bc:3f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 16:39:22 2026 by rpki-client