Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34fbf2b4-9d29-3317-b0f8-658188128859.roa
File:                     34fbf2b4-9d29-3317-b0f8-658188128859.roa (raw, json)
Hash identifier:          G/qWOBHvnHJJy2W4RSurd5WAIc2YbJv+/4ppIZ404TA=
Subject key identifier:   04:26:19:79:AF:10:E0:D2:3A:28:AD:31:DC:85:D4:4D:BB:B1:E4:6F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EA0152976CF31186EBC433680
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34fbf2b4-9d29-3317-b0f8-658188128859.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     22773
IP address blocks:        70.190.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:29:76:cf:31:18:6e:bc:43:36:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=5891fc0d-5b0b-4e64-9c05-138b880e8b1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cf:87:69:1f:83:dd:e1:4c:4d:9b:3b:a8:10:
                    27:81:22:f4:ff:0b:7b:ff:53:9b:62:7c:2d:83:08:
                    46:a0:3c:ed:98:7e:3d:45:1f:1f:3a:d9:f6:73:c2:
                    28:39:73:77:e8:e6:21:3f:45:6e:42:ed:69:f9:9e:
                    04:7a:9c:98:d5:c4:2a:d3:c2:1b:32:f4:35:20:31:
                    48:32:c2:56:73:4f:4b:88:31:ca:c8:0c:ec:ab:bc:
                    a4:13:d9:2d:8e:d5:01:9d:86:76:ab:f4:bb:22:65:
                    49:01:d8:6a:b7:94:4e:19:1c:d6:49:c5:ed:55:41:
                    48:dd:9e:53:8f:9e:20:ed:0f:0a:21:16:e4:70:e2:
                    4d:51:72:90:59:10:d5:a7:07:85:ce:4e:29:01:eb:
                    94:56:af:de:52:36:f4:5d:44:41:37:21:2f:20:60:
                    2c:44:9f:b3:bb:c0:20:40:f4:83:6e:62:5b:7e:44:
                    2c:56:56:e5:46:ce:47:fa:58:1b:b6:95:43:20:2c:
                    b7:cd:2e:33:59:75:a2:7d:98:1c:e2:f5:c7:d1:19:
                    73:43:b7:af:f0:37:25:37:82:4b:5d:22:73:52:dd:
                    b6:2b:72:e3:f0:33:61:21:a4:a7:d4:eb:49:fe:2b:
                    57:26:63:0d:aa:42:e3:c5:be:4a:97:1d:37:da:23:
                    36:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:26:19:79:AF:10:E0:D2:3A:28:AD:31:DC:85:D4:4D:BB:B1:E4:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/34fbf2b4-9d29-3317-b0f8-658188128859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.190.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:c0:e2:dd:95:a6:41:ba:dc:a6:5c:b0:08:22:7a:87:bf:b4:
         9b:3f:e4:2b:91:6c:a5:d5:77:e7:ec:49:f8:fe:5b:5a:01:38:
         18:d2:05:56:ae:c2:97:0f:36:c1:fc:4c:e9:c9:b5:48:47:8b:
         b7:8c:1b:7b:08:3c:9c:d7:76:73:c4:62:19:5c:29:08:90:bc:
         18:47:05:7c:3c:25:f4:9d:98:e4:63:bc:4d:3f:49:23:22:91:
         6f:91:fd:48:bf:bc:03:b4:89:8b:a8:07:6e:82:6c:d2:75:d1:
         a8:de:35:62:88:08:c7:80:8f:ce:e8:8e:d7:9e:29:3d:f6:46:
         96:55:b1:fa:0c:63:e6:b7:63:93:44:4f:f3:61:1e:c0:ed:f2:
         98:48:d5:6d:96:d2:8e:3f:ca:86:14:0d:00:0d:56:a8:ec:15:
         1a:86:92:56:8b:76:b5:ac:05:b0:51:1b:a5:6f:58:68:30:7b:
         98:1b:1a:69:e7:0a:e9:13:eb:91:93:75:6e:35:4f:59:b8:fb:
         3a:64:de:cb:b8:72:ec:6a:84:a1:8d:e9:65:bc:df:a5:f4:60:
         15:24:07:f8:11:cc:bb:4b:50:ea:4e:58:fc:1c:5f:4c:3c:98:
         e4:43:9e:9f:66:6d:0b:2d:6c:12:47:6f:37:5e:2f:e5:bb:6b:
         e2:2e:8e:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFSl2zzEYbrxDNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk
NTg5MWZjMGQtNWIwYi00ZTY0LTljMDUtMTM4Yjg4MGU4YjFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0M+HaR+D3eFMTZs7qBAngSL0/wt7/1ObYnwt
gwhGoDztmH49RR8fOtn2c8IoOXN36OYhP0VuQu1p+Z4EepyY1cQq08IbMvQ1IDFI
MsJWc09LiDHKyAzsq7ykE9ktjtUBnYZ2q/S7ImVJAdhqt5ROGRzWScXtVUFI3Z5T
j54g7Q8KIRbkcOJNUXKQWRDVpweFzk4pAeuUVq/eUjb0XURBNyEvIGAsRJ+zu8Ag
QPSDbmJbfkQsVlblRs5H+lgbtpVDICy3zS4zWXWifZgc4vXH0RlzQ7ev8DclN4JL
XSJzUt22K3Lj8DNhIaSn1OtJ/itXJmMNqkLjxb5Klx032iM2wwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAQmGXmvEODSOiitMdyF1E27seRvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzRmYmYyYjQtOWQyOS0z
MzE3LWIwZjgtNjU4MTg4MTI4ODU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARr6cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJvA4t2VpkG63KZcsAgieoe/tJs/5CuRbKXVd+fsSfj+W1oBOBjSBVau
wpcPNsH8TOnJtUhHi7eMG3sIPJzXdnPEYhlcKQiQvBhHBXw8JfSdmORjvE0/SSMi
kW+R/Ui/vAO0iYuoB26CbNJ10ajeNWKICMeAj87ojteeKT32RpZVsfoMY+a3Y5NE
T/NhHsDt8phI1W2W0o4/yoYUDQANVqjsFRqGklaLdrWsBbBRG6VvWGgwe5gbGmnn
CukT65GTdW41T1m4+zpk3su4cuxqhKGN6WW836X0YBUkB/gRzLtLUOpOWPwcX0w8
mORDnp9mbQstbBJHbzdeL+W7a+Iujqg=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:12:59 2026 by rpki-client