Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25bf4379-88cf-3191-bf58-86f46dec1c53.roa
File:                     25bf4379-88cf-3191-bf58-86f46dec1c53.roa (raw, json)
Hash identifier:          K9Mgh7liDu+UosvDLNmCxF1mXmUXcWAVq5tWTwiHRoQ=
Subject key identifier:   F7:E1:FD:DD:4B:F8:CB:A7:3C:2F:E5:40:70:2C:EF:AE:47:35:96:57
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E15E45D66FBB553B1C50B9A00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25bf4379-88cf-3191-bf58-86f46dec1c53.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     22773
IP address blocks:        70.172.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:5d:66:fb:b5:53:b1:c5:0b:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=57566c4e-9008-470a-9227-9d863bc95656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:48:c1:a5:4b:5e:c5:11:d6:7d:fc:66:6b:2a:
                    26:93:1f:76:90:ac:ff:6a:22:6f:8c:65:f2:77:5c:
                    5b:54:6e:3c:92:65:0a:05:42:c8:fe:2c:ae:b8:6b:
                    95:fd:6f:52:0f:70:ef:1c:6d:22:04:7c:0e:86:36:
                    63:2a:1c:ef:c5:cd:1f:de:e5:8b:73:61:b3:ef:60:
                    5c:04:42:a0:25:5e:2e:cd:c7:f1:da:7c:f6:4f:36:
                    b2:ad:77:8c:2e:ed:0c:48:70:77:21:14:77:09:bf:
                    ae:32:35:8b:92:1a:05:46:8b:2c:10:00:14:54:61:
                    5a:b3:6d:ab:6f:2b:36:3d:12:be:29:02:e9:23:8c:
                    ab:f0:df:88:8e:5a:99:d1:6a:4a:3e:26:78:c2:dc:
                    94:53:27:50:a1:16:eb:f0:3a:98:43:87:ed:76:a6:
                    79:08:34:5c:af:b7:06:c2:98:b4:6d:31:92:bc:6d:
                    0a:92:4a:d9:a4:4e:96:c6:80:85:fd:d9:13:6c:0e:
                    9d:91:be:34:90:da:62:4b:2b:9f:f4:f3:71:81:9c:
                    fd:ac:57:51:3c:9b:1c:f7:db:be:f1:c6:22:34:21:
                    1e:e0:8a:75:25:9e:35:06:a3:ad:4e:a2:18:86:81:
                    eb:35:8d:76:fa:16:e5:43:92:70:be:f1:a3:c3:c9:
                    d1:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E1:FD:DD:4B:F8:CB:A7:3C:2F:E5:40:70:2C:EF:AE:47:35:96:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25bf4379-88cf-3191-bf58-86f46dec1c53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.172.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:8c:9e:35:e8:d5:2b:c7:bb:eb:80:be:89:44:ee:49:95:21:
         9d:ae:73:15:45:d0:bc:89:4d:f4:f6:0a:d7:89:65:30:70:0b:
         35:96:43:09:1c:b7:47:ce:a8:7a:14:7b:ea:46:f5:30:92:5d:
         77:6c:fd:36:cd:5d:29:ad:03:05:85:80:4c:50:2c:67:99:8c:
         a8:17:61:31:62:59:b4:e4:ae:94:e8:74:82:ce:c7:06:e6:2b:
         5f:61:b1:b9:d1:9a:ef:d6:33:49:4e:e6:7a:16:0f:00:38:76:
         3e:72:75:7a:60:52:bc:63:1d:c3:fa:a7:0b:dc:52:63:ab:e8:
         b3:2a:7c:c7:18:6f:95:81:fa:80:20:33:fe:bc:60:a3:9f:0c:
         d8:e3:ab:b9:ac:67:53:22:8e:91:e7:4f:26:b4:ec:a7:36:1b:
         96:27:6c:c9:bb:96:73:b7:f7:55:13:82:d8:17:b3:bb:b2:1b:
         fe:f2:6f:9e:b8:22:69:60:f9:3d:9e:ed:4c:34:a0:bb:05:91:
         e5:22:a8:1d:1e:c6:74:e0:f0:93:7c:a7:72:2c:e9:a4:10:03:
         07:00:87:1c:62:a4:4a:88:d8:9f:e2:ca:36:d2:e6:97:99:52:
         0a:8b:29:b7:b8:a3:a4:94:6c:be:70:f6:d9:29:e3:9f:53:49:
         e4:81:8f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:23:15 2026 by rpki-client