Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/45596fbc-2b84-3d65-8232-1f27dfa99540.roa
File:                     45596fbc-2b84-3d65-8232-1f27dfa99540.roa (raw, json)
Hash identifier:          xBA7T6yIj3c837WBi2mfowjU0IhL9MVoQqqGH0m7lCs=
Subject key identifier:   E9:F0:6A:21:B8:94:8D:81:1A:CA:92:B0:34:0B:15:3C:3D:85:0A:AD
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EA0150C022D80D0250956B240
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/45596fbc-2b84-3d65-8232-1f27dfa99540.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     22773
IP address blocks:        70.180.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:0c:02:2d:80:d0:25:09:56:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=900533f4-307d-47f4-b6a2-6493dca5af00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d0:23:76:02:21:80:84:62:1f:eb:75:e4:cf:
                    96:e1:6e:75:38:58:c4:e7:e5:57:b4:a7:1c:81:33:
                    69:a3:f1:79:98:2e:84:19:9f:95:c0:c6:73:06:b7:
                    86:d6:f0:2e:8f:61:c9:87:8d:f6:91:0f:66:30:c5:
                    3b:ce:83:02:74:2a:a5:fc:59:ff:6b:02:56:4a:ec:
                    81:96:f3:6b:1c:a6:ac:5c:5a:e9:f2:9f:01:47:2b:
                    44:e3:44:06:bd:1e:87:ff:c8:13:3c:6b:39:15:c1:
                    9d:3d:26:50:03:2a:13:7c:01:97:dc:90:df:1b:23:
                    3b:64:b5:de:7d:69:0a:c5:42:d0:33:81:03:38:9c:
                    e2:b9:87:45:27:ba:08:41:20:2d:a7:38:9b:cb:f5:
                    c9:94:49:92:ab:f7:6a:37:21:9c:ed:78:18:61:b5:
                    21:45:c8:f9:1c:0f:07:23:25:59:57:0c:88:f5:c9:
                    1f:dc:c4:04:f5:cc:50:1e:07:bc:08:11:8c:c8:2a:
                    d2:73:a7:7e:f3:26:63:8e:da:f3:f9:73:90:90:69:
                    c8:b3:b1:b7:e2:ad:37:26:80:23:a6:43:2b:6c:f2:
                    a1:ea:a9:a9:87:5f:d8:ff:b0:89:88:7c:05:55:6c:
                    82:76:60:8f:b0:cf:62:c4:e1:af:6a:01:49:32:dd:
                    13:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F0:6A:21:B8:94:8D:81:1A:CA:92:B0:34:0B:15:3C:3D:85:0A:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/45596fbc-2b84-3d65-8232-1f27dfa99540.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.180.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:ab:3e:17:ad:19:ea:a8:94:f2:a5:82:56:b0:6b:1c:f6:25:
         42:7f:27:81:78:1a:db:bf:e5:0a:5f:b3:8f:70:9c:11:43:5c:
         f4:81:1e:be:48:c9:57:27:ad:69:3d:85:5f:44:04:56:0a:9e:
         01:b1:75:72:d2:ef:5b:a4:0c:a7:17:e9:23:b6:c8:13:df:25:
         21:50:8f:5e:4e:6a:4c:e0:56:f0:7c:45:65:07:44:28:f7:2d:
         67:cf:01:df:22:54:db:a5:93:8c:eb:cb:df:a8:3d:5c:87:6f:
         67:3f:c0:d2:04:ba:54:72:9c:58:78:ef:30:bf:16:27:9e:f9:
         58:24:c4:37:ac:78:b1:5a:b0:20:c1:d1:65:c1:ca:e7:18:91:
         73:b0:ce:6f:d3:a4:07:b8:19:e7:a2:d5:19:b6:e6:60:49:85:
         11:cc:dd:a5:79:06:17:32:db:e0:aa:9e:fc:e4:55:f8:9f:13:
         1f:26:c5:5e:2b:00:51:c6:5d:4d:40:86:41:1b:9e:f8:45:67:
         8b:27:25:1d:20:bb:f9:0b:0a:2d:e2:0f:60:57:73:dd:e1:bd:
         78:76:75:50:ec:cb:67:86:62:eb:e0:3e:0c:cf:b9:e3:04:95:
         28:6f:8e:55:8c:6b:ae:ad:30:bd:1e:7a:01:5f:09:34:7f:94:
         3e:a0:d9:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6gFQwCLYDQJQlWskAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDcyNjA5MDAxMloXDTI2MTAyNDA5MDAxMlowLzEtMCsGA1UEAxMk
OTAwNTMzZjQtMzA3ZC00N2Y0LWI2YTItNjQ5M2RjYTVhZjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNAjdgIhgIRiH+t15M+W4W51OFjE5+VXtKcc
gTNpo/F5mC6EGZ+VwMZzBreG1vAuj2HJh432kQ9mMMU7zoMCdCql/Fn/awJWSuyB
lvNrHKasXFrp8p8BRytE40QGvR6H/8gTPGs5FcGdPSZQAyoTfAGX3JDfGyM7ZLXe
fWkKxULQM4EDOJziuYdFJ7oIQSAtpziby/XJlEmSq/dqNyGc7XgYYbUhRcj5HA8H
IyVZVwyI9ckf3MQE9cxQHge8CBGMyCrSc6d+8yZjjtrz+XOQkGnIs7G34q03JoAj
pkMrbPKh6qmph1/Y/7CJiHwFVWyCdmCPsM9ixOGvagFJMt0TrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOnwaiG4lI2BGsqSsDQLFTw9hQqtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDU1OTZmYmMtMmI4NC0z
ZDY1LTgyMzItMWYyN2RmYTk5NTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrQQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABGrPhetGeqolPKlglawaxz2JUJ/J4F4Gtu/5Qpfs49wnBFDXPSBHr5I
yVcnrWk9hV9EBFYKngGxdXLS71ukDKcX6SO2yBPfJSFQj15OakzgVvB8RWUHRCj3
LWfPAd8iVNulk4zry9+oPVyHb2c/wNIEulRynFh47zC/Fiee+VgkxDeseLFasCDB
0WXByucYkXOwzm/TpAe4Geei1Rm25mBJhRHM3aV5Bhcy2+CqnvzkVfifEx8mxV4r
AFHGXU1AhkEbnvhFZ4snJR0gu/kLCi3iD2BXc93hvXh2dVDsy2eGYuvgPgzPueME
lShvjlWMa66tML0eegFfCTR/lD6g2UQ=
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:31:37 2026 by rpki-client