Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39bee95a-3610-36fb-8bc9-fbad609a9a6b.roa
File:                     39bee95a-3610-36fb-8bc9-fbad609a9a6b.roa (raw, json)
Hash identifier:          7YT4gatwxDSI04Oe1sYpCMcUjSUYg4f5HltLfhU8dW8=
Subject key identifier:   95:E8:82:81:A4:54:5E:13:ED:D6:88:98:38:D1:3A:4D:C7:30:93:66
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F427800F6BB99F95A801DEC20
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39bee95a-3610-36fb-8bc9-fbad609a9a6b.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        70.190.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:00:f6:bb:99:f9:5a:80:1d:ec:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=b81d0820-2e3c-4c2c-a1d9-227703107fe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d8:32:c8:a6:c0:85:6e:9c:e5:62:69:7b:5c:
                    9d:d4:03:5d:77:9b:dc:8d:3d:c8:a7:13:96:b5:b4:
                    30:7b:9d:2d:d8:45:a8:9c:44:1d:45:c0:69:10:db:
                    4f:d6:a9:ba:47:27:34:cc:6b:b7:7f:32:19:4f:e5:
                    5d:6f:bd:5e:a1:53:b7:64:b7:22:4c:d1:8a:72:8f:
                    20:ef:b5:89:23:7b:54:cb:cd:00:8c:ab:05:48:03:
                    e3:19:51:84:4e:b0:52:43:fc:ac:48:a8:cd:fc:f0:
                    b5:18:eb:7d:58:3b:cb:27:1f:6b:6d:ca:2c:1f:1d:
                    f0:91:44:1c:21:f1:55:ac:3d:7c:52:85:15:a7:12:
                    26:95:90:52:2d:70:fd:28:b7:d3:6c:b6:86:8d:fc:
                    81:78:54:cc:b7:f5:3e:4d:6a:51:1d:26:1b:1a:8d:
                    d2:46:8e:78:c1:4e:1e:ad:34:08:0b:02:90:45:77:
                    b6:8f:49:59:c7:c8:c6:05:b2:fc:5f:b7:ee:61:cd:
                    30:70:23:ae:3b:9d:a1:60:9c:6c:d0:db:3e:f1:a3:
                    0e:a2:c4:54:d1:00:07:8c:4b:20:cd:ce:2b:12:c5:
                    a7:0f:bf:7b:c2:aa:bf:17:aa:7e:e5:64:8b:9c:f2:
                    40:0b:55:d2:cd:bb:ad:81:7a:77:89:4b:6b:60:ad:
                    c4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E8:82:81:A4:54:5E:13:ED:D6:88:98:38:D1:3A:4D:C7:30:93:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39bee95a-3610-36fb-8bc9-fbad609a9a6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.190.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:2f:aa:07:6c:81:02:14:66:7c:75:5e:bd:f6:53:6b:f4:76:
         18:5a:0f:25:4c:6a:66:53:8e:84:b0:8d:e1:8f:28:5c:2d:70:
         f8:ee:ae:48:3f:64:5d:c9:43:a0:37:8b:3d:d4:64:17:4c:29:
         17:cf:9a:cf:bd:1f:43:95:06:83:8e:48:88:61:dd:98:bf:e7:
         d2:58:20:c6:3f:97:a3:66:c5:ec:14:c6:9f:9d:b0:4b:5a:3e:
         67:d5:b1:26:3d:fb:a5:6c:86:a3:ed:9c:08:21:90:1d:bd:e2:
         db:6b:c9:b9:94:ef:4a:be:56:5b:e9:74:cd:fc:83:15:7d:30:
         cd:2d:a2:6d:50:ed:27:2b:1e:55:bb:5c:fc:15:aa:1d:fb:70:
         5b:74:bf:e8:e9:30:7a:4d:d4:01:4d:97:91:39:ba:ee:3a:83:
         4a:97:14:2f:9e:55:e4:1e:49:1a:bb:b6:0b:9d:df:34:f3:f6:
         80:0b:4f:4f:16:2c:af:cf:c0:cf:a0:c1:4e:2a:3f:a5:de:01:
         f2:1e:bd:f1:06:9f:c1:9c:a1:82:dc:6d:3e:49:17:52:86:ea:
         a0:e2:47:31:60:9e:5e:8f:cd:44:01:b8:a6:0e:7a:85:68:d9:
         47:db:6c:ae:71:62:bb:7f:ef:9a:72:51:30:61:82:e4:ec:af:
         c4:ee:14:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:45:57 2026 by rpki-client