Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33c09272-8427-30f7-a283-fc6c477dfa42.roa
File:                     33c09272-8427-30f7-a283-fc6c477dfa42.roa (raw, json)
Hash identifier:          /T2PY2bg37s1/l7PEWwMKWeSvy3mZtixLB/5hJziDQc=
Subject key identifier:   64:9E:F0:1A:7A:7E:5A:C3:92:A7:85:76:B8:7C:F6:B6:72:1E:D2:05
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EA0153B43292DEAA1AF3DD960
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33c09272-8427-30f7-a283-fc6c477dfa42.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     22773
IP address blocks:        70.180.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:3b:43:29:2d:ea:a1:af:3d:d9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=09908a9b-fa43-43b6-8a96-2421aa207a0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:b1:93:e5:e8:6f:26:aa:92:b6:a0:88:3e:2b:
                    d3:e2:ca:3c:58:a8:7c:a4:3b:47:f7:21:de:8f:55:
                    73:30:72:56:33:5e:9b:0f:50:43:9e:dd:16:f1:c0:
                    87:20:54:04:da:aa:c8:e4:76:f0:aa:c4:ae:21:89:
                    5f:4c:53:87:6e:16:71:fb:72:da:76:93:0d:0f:f2:
                    6c:07:94:d1:da:2a:fa:d7:e8:11:0a:d2:73:52:71:
                    fd:d5:ef:83:36:ff:f1:d0:d3:d7:d6:1e:07:02:79:
                    15:87:f4:63:31:bc:f2:94:ba:97:5b:2f:52:be:3f:
                    63:60:9f:31:cc:80:a7:24:fe:d8:61:5a:b4:b0:0c:
                    11:12:1f:4a:b8:78:fe:c0:1d:b9:42:c6:5e:e5:c5:
                    b8:a7:4a:44:44:ce:eb:13:71:51:0b:61:7e:51:aa:
                    57:ac:de:2a:98:a5:8e:9f:e1:33:90:ab:2c:7b:df:
                    59:f4:47:11:21:f8:35:67:79:6f:f8:72:89:33:d1:
                    e8:5b:1e:10:a7:13:9f:a4:8d:1d:8e:34:ea:39:d8:
                    4e:7d:c9:be:e7:2a:c2:74:e0:e9:04:1f:15:62:0d:
                    8d:ef:a6:1e:3f:82:8f:64:64:a6:2b:f4:65:f1:87:
                    85:d9:e0:d5:72:39:b4:53:49:31:87:f4:c6:f1:d3:
                    48:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9E:F0:1A:7A:7E:5A:C3:92:A7:85:76:B8:7C:F6:B6:72:1E:D2:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33c09272-8427-30f7-a283-fc6c477dfa42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.180.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:11:ce:cc:50:59:32:55:6f:32:d2:7a:25:fe:00:e3:a9:5f:
         2b:8b:7c:95:f9:7c:32:4b:5a:7d:c3:86:88:36:28:e7:24:79:
         11:94:45:50:b8:f8:9f:91:6c:c2:35:30:d4:c6:5f:92:ce:5e:
         72:c9:f4:20:36:db:c5:82:dd:ee:93:45:be:d7:f7:8b:07:c1:
         5e:f4:43:08:be:5e:85:e8:4c:de:29:a2:36:08:4c:29:21:e5:
         d8:f7:05:e4:44:b3:df:ee:29:ef:04:42:d5:f1:9d:3b:9c:41:
         b1:c2:53:53:e4:32:4d:0a:fd:54:ac:cb:03:5e:d1:50:8f:b8:
         af:e2:09:32:3b:ab:8e:82:8e:af:8c:08:1c:ba:14:5f:a8:95:
         3b:4a:16:21:6d:e7:e5:42:87:0b:5e:73:f8:b3:c6:b3:8e:55:
         dd:e1:47:c9:d0:15:4e:e1:f2:f6:bf:5f:20:4b:f7:62:80:6c:
         5e:2a:2e:b5:90:fe:6c:6c:a1:dd:f3:e7:0f:33:d9:b3:cf:9b:
         7f:57:07:b3:d0:0b:37:45:54:56:f4:f0:3c:8d:a4:22:42:dd:
         10:6f:bb:41:0e:7e:68:64:70:ca:fa:a3:d5:bb:c2:e0:db:ac:
         e1:c2:a9:bd:5b:7c:b0:42:24:84:27:05:5c:1f:f1:64:6f:19:
         61:b1:e0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:45:02 2026 by rpki-client