Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39fca48b-3fdd-3abb-9b6b-035a005fe758.roa
File:                     39fca48b-3fdd-3abb-9b6b-035a005fe758.roa (raw, json)
Hash identifier:          nJqtWMKWKaYFKbfLSlqObt/QOCP5/2cJ+Nu2zaBRut4=
Subject key identifier:   96:AE:70:4C:A6:1A:77:D2:6E:92:C3:0F:77:0A:E7:4F:8B:0E:05:40
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E9EAFD7062C19E79A0AFB3A80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39fca48b-3fdd-3abb-9b6b-035a005fe758.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     22773
IP address blocks:        70.172.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:d7:06:2c:19:e7:9a:0a:fb:3a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=9c05b531-5e77-40b8-8c91-22733434e268
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4f:09:1c:e1:c5:d9:70:6a:4a:b3:22:62:da:
                    9d:d0:ee:40:6e:fd:b0:3f:42:57:48:ac:43:1f:8f:
                    89:35:3d:f0:32:ef:2a:71:48:9e:a1:94:f1:92:59:
                    32:33:d0:15:ab:d9:73:ca:a0:f9:ab:47:ed:ac:a9:
                    b0:a5:a1:a5:b0:a7:bf:09:62:46:39:63:08:2c:7b:
                    a8:f3:d4:97:95:49:f1:5c:65:51:c5:5e:48:6c:b8:
                    c8:68:41:08:c1:8f:47:f5:d2:ae:67:0a:4c:ed:38:
                    44:c5:75:c7:6e:6e:9f:83:eb:4a:bb:de:d9:45:2f:
                    bd:02:54:bf:d9:83:f3:fd:43:6a:2a:b1:85:b2:68:
                    a6:f0:72:09:5c:fe:ec:4f:04:eb:5d:c7:cd:52:b9:
                    10:6c:ee:5b:e4:27:bd:7b:b6:c5:65:de:a1:d2:1e:
                    9f:16:31:8c:18:e0:d0:01:e9:f2:8d:e4:85:66:52:
                    2a:20:6c:ec:8b:78:c5:19:74:de:96:ad:0a:a2:fc:
                    6f:26:5a:2e:38:1a:7b:f3:aa:bf:10:15:99:50:e7:
                    f0:ab:fd:21:9e:85:cc:2a:6f:b4:c4:d2:85:15:99:
                    59:38:96:c2:81:73:91:40:ad:3f:47:1b:63:34:57:
                    4a:bb:a1:c9:b5:c3:dd:93:6b:e7:76:e7:c6:0f:b3:
                    ec:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AE:70:4C:A6:1A:77:D2:6E:92:C3:0F:77:0A:E7:4F:8B:0E:05:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/39fca48b-3fdd-3abb-9b6b-035a005fe758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.172.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:7d:38:b0:09:eb:7a:2b:f7:cb:e8:76:c9:b6:06:df:36:c2:
         71:06:11:8f:7e:39:76:00:a1:6c:2c:6d:4b:2f:3a:4a:b9:df:
         f7:bf:a5:4a:e3:f7:f4:d2:9b:39:91:dd:03:28:d4:98:1b:05:
         ed:92:fe:b9:4c:09:f7:47:bc:5b:36:12:6c:65:3c:4d:3b:77:
         00:b8:77:57:1e:d2:22:c8:ff:2e:65:df:f9:4a:71:03:1b:4e:
         6c:f3:57:79:2d:47:0f:b6:47:0f:9f:47:f2:c1:11:b8:88:11:
         2c:6a:0e:f2:9f:a7:8f:91:ef:e9:30:34:62:ac:40:4e:5f:f9:
         a8:18:ff:47:26:fd:1f:a5:26:08:4d:65:6d:87:1e:6f:d6:ee:
         df:33:e7:be:0f:cc:38:7c:0c:1a:06:90:72:b6:f1:d2:76:09:
         81:6e:58:af:d3:eb:e8:68:04:99:dc:62:fa:b9:cd:9e:f2:e2:
         4b:e8:ea:aa:db:96:4a:00:ce:65:28:a7:7c:3e:86:2c:64:bb:
         59:d0:42:b9:d9:25:91:ec:bb:c9:3f:0e:23:0d:01:be:35:5e:
         97:db:44:02:63:7e:98:74:f4:00:21:02:c8:d7:08:7e:37:93:
         8b:31:98:f9:09:81:e7:6b:58:f8:c3:2e:c5:89:57:8d:29:72:
         fd:28:d5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:26:58 2026 by rpki-client