Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25fccc5b-d599-3b7e-8aee-b969b09cf35a.roa
File:                     25fccc5b-d599-3b7e-8aee-b969b09cf35a.roa (raw, json)
Hash identifier:          RQZhAbvX0lyqNWViEplBEoTqRmJW5sRH2HdKJCQ53Oo=
Subject key identifier:   AE:93:82:22:3F:4A:4F:6E:C2:16:7B:D3:26:A3:42:D2:2F:8C:2B:17
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D7B6A99A20FEA7F3EC3AF8EC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25fccc5b-d599-3b7e-8aee-b969b09cf35a.roa
Signing time:             Sun 12 Apr 2026 13:00:30 +0000
ROA not before:           Sun 12 Apr 2026 13:00:30 +0000
ROA not after:            Sat 11 Jul 2026 13:00:30 +0000
asID:                     22773
IP address blocks:        70.174.174.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:7b:6a:99:a2:0f:ea:7f:3e:c3:af:8e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr 12 13:00:30 2026 GMT
            Not After : Jul 11 13:00:30 2026 GMT
        Subject: CN=001a5dea-8226-40bf-8289-c75bab79caa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:75:9e:33:2a:0a:2b:23:4d:cc:c9:66:40:8e:
                    9b:ff:b8:ed:61:93:0d:2d:4b:53:78:84:29:a5:cd:
                    b7:aa:6f:62:62:51:93:bf:2d:ab:45:5b:65:ed:a0:
                    0f:8e:c0:db:a9:54:8b:f9:f9:4a:eb:e8:a3:e8:50:
                    0e:f7:49:f4:02:52:57:7f:7d:23:f9:a0:b8:7d:51:
                    d6:a5:95:91:eb:50:69:40:23:7a:9a:3e:af:be:5c:
                    00:c7:7f:bf:4c:ac:1c:32:f9:f0:3e:c3:fa:08:c2:
                    d4:e3:fd:5c:d6:0a:25:72:b8:00:85:02:a1:c2:37:
                    59:96:40:c8:6d:0f:bf:c8:67:cb:1b:a9:dc:26:06:
                    44:33:d9:9d:81:9e:d5:c6:18:df:dc:13:66:49:f7:
                    e8:cc:23:30:d3:71:8a:17:60:60:48:4f:34:3f:74:
                    c7:c2:4c:e3:89:2a:24:be:e5:e0:c5:63:3c:f4:bd:
                    23:25:11:dc:9f:72:d6:59:8d:38:59:a0:a5:aa:96:
                    3a:3d:8b:18:5b:39:65:8f:9c:72:c6:8c:ff:a2:43:
                    18:01:68:e0:58:47:99:89:3a:e6:c5:c6:fd:b9:81:
                    12:57:6e:b2:e4:2a:aa:dd:95:8d:1b:6e:41:92:ac:
                    ce:5f:f7:f3:c6:90:0a:73:47:b6:d6:2b:f1:f4:20:
                    c0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:93:82:22:3F:4A:4F:6E:C2:16:7B:D3:26:A3:42:D2:2F:8C:2B:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/25fccc5b-d599-3b7e-8aee-b969b09cf35a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.174.174.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:5d:22:00:6c:f4:69:4c:b5:bc:c9:40:f5:98:e6:55:2e:0f:
         cc:48:a7:6f:73:01:6e:da:7b:12:d8:0c:d5:27:d4:9e:5c:b0:
         f2:0d:cd:7e:21:fd:2e:b1:e2:5c:71:16:b8:cc:a7:24:f0:1d:
         12:a5:55:97:95:e7:a1:04:42:ce:87:99:03:10:b2:08:21:f9:
         be:a8:d1:64:8c:ba:42:6a:09:04:46:4d:84:b8:13:dd:7d:b1:
         54:92:37:0d:ce:92:db:7e:4f:7e:df:a1:91:b9:51:c4:3a:63:
         dc:7e:f5:f9:2f:54:c2:c9:49:b5:d4:dd:90:5e:36:06:c5:b7:
         4c:1f:1a:2e:de:e0:64:0e:59:83:33:50:59:15:53:f8:22:c8:
         dd:02:ef:79:a9:c1:20:32:ae:ae:44:0c:ae:e3:25:d8:c9:f0:
         83:bb:56:7c:80:22:0a:ea:3c:37:03:e8:7a:37:46:db:25:14:
         7a:51:18:a1:7d:c8:98:8d:f1:ae:16:07:01:8a:3b:7e:dc:c2:
         46:20:f5:36:a7:de:a5:49:ec:f6:09:dc:34:f1:39:33:08:8c:
         44:75:7c:3a:a8:99:16:19:74:2f:5b:49:f3:3f:79:a0:a1:5c:
         ca:ef:48:2a:dd:6f:17:92:e8:73:f1:61:06:6e:6f:b1:ae:19:
         b6:2a:ae:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17apmiD+p/PsOvjsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk
MDAxYTVkZWEtODIyNi00MGJmLTgyODktYzc1YmFiNzljYWE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunWeMyoKKyNNzMlmQI6b/7jtYZMNLUtTeIQp
pc23qm9iYlGTvy2rRVtl7aAPjsDbqVSL+flK6+ij6FAO90n0AlJXf30j+aC4fVHW
pZWR61BpQCN6mj6vvlwAx3+/TKwcMvnwPsP6CMLU4/1c1golcrgAhQKhwjdZlkDI
bQ+/yGfLG6ncJgZEM9mdgZ7Vxhjf3BNmSffozCMw03GKF2BgSE80P3THwkzjiSok
vuXgxWM89L0jJRHcn3LWWY04WaClqpY6PYsYWzllj5xyxoz/okMYAWjgWEeZiTrm
xcb9uYESV26y5Cqq3ZWNG25BkqzOX/fzxpAKc0e21ivx9CDA/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK6TgiI/Sk9uwhZ70yajQtIvjCsXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjVmY2NjNWItZDU5OS0z
YjdlLThhZWUtYjk2OWIwOWNmMzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq6uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADddIgBs9GlMtbzJQPWY5lUuD8xIp29zAW7aexLYDNUn1J5csPINzX4h
/S6x4lxxFrjMpyTwHRKlVZeV56EEQs6HmQMQsggh+b6o0WSMukJqCQRGTYS4E919
sVSSNw3Oktt+T37foZG5UcQ6Y9x+9fkvVMLJSbXU3ZBeNgbFt0wfGi7e4GQOWYMz
UFkVU/giyN0C73mpwSAyrq5EDK7jJdjJ8IO7VnyAIgrqPDcD6Ho3RtslFHpRGKF9
yJiN8a4WBwGKO37cwkYg9Tan3qVJ7PYJ3DTxOTMIjER1fDqomRYZdC9bSfM/eaCh
XMrvSCrdbxeS6HPxYQZub7GuGbYqrvo=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:05:56 2026 by rpki-client