Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c85e6cb-bd39-32ef-8aac-1da582897720.roa
File:                     4c85e6cb-bd39-32ef-8aac-1da582897720.roa (raw, json)
Hash identifier:          /CLEmi3t47U8aIGWXq3Bjt2Qa896uXOEYlEZe+nnvT4=
Subject key identifier:   6D:A6:54:AD:39:EE:87:58:3D:6B:9B:98:E7:09:E3:1A:47:54:38:FB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EA0157089E55D98D4E4ABDF40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c85e6cb-bd39-32ef-8aac-1da582897720.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     22773
IP address blocks:        70.190.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:70:89:e5:5d:98:d4:e4:ab:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=e8525412-80b6-4466-bb6b-2ee002614816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d7:a4:48:51:2a:0a:5d:e8:b2:02:d3:70:89:
                    d5:de:b8:8e:05:16:2c:b1:3c:0b:9c:c8:20:38:05:
                    5c:9a:b7:cc:6d:64:4a:45:db:be:ed:b9:63:5e:a4:
                    c6:65:b9:5d:b2:d9:53:1c:8d:b7:91:cf:5c:ee:63:
                    ec:41:ec:8d:bd:35:94:7d:95:3b:61:a4:10:d0:b4:
                    40:97:02:cc:d2:c6:01:6e:ee:86:9d:9f:58:67:04:
                    e8:d2:42:40:79:69:08:11:5e:8c:22:2e:2e:16:7b:
                    4d:c2:ed:0c:59:63:6b:6c:e2:c7:f5:ea:ab:ed:1c:
                    a2:b0:d4:10:d1:66:6e:5d:03:df:ce:7a:36:ca:99:
                    2a:c9:bc:8e:c8:46:2f:6d:17:7c:7e:ed:d1:2b:cf:
                    ba:50:da:71:8e:03:d7:31:be:75:05:a1:ed:be:a7:
                    73:45:f2:e2:17:74:6c:21:c4:26:1a:69:6d:a6:98:
                    72:07:c3:9d:55:32:1b:a5:c9:f0:7a:60:b9:65:53:
                    c7:28:0a:08:43:0b:87:9e:45:10:c2:39:d0:a3:e7:
                    54:dc:d2:55:1d:ed:05:f8:f2:9a:e2:57:43:99:91:
                    0c:db:28:1a:24:39:20:e5:99:f8:86:b2:bb:94:04:
                    d5:c1:bd:24:5b:00:c7:eb:6c:48:87:d2:5a:48:05:
                    f8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A6:54:AD:39:EE:87:58:3D:6B:9B:98:E7:09:E3:1A:47:54:38:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c85e6cb-bd39-32ef-8aac-1da582897720.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.190.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:69:4a:73:c1:86:90:4d:19:77:f7:4d:00:96:af:5f:8b:ca:
         98:41:0f:b5:29:db:90:a6:90:4e:0b:16:6d:47:bc:a7:38:87:
         f8:a7:1f:8b:51:d0:62:f0:ff:85:60:14:96:f1:cb:55:e0:b3:
         9b:98:dd:2c:29:87:5d:c0:06:00:66:e8:6b:03:5f:53:42:6f:
         c6:10:c6:4e:e0:2e:1d:03:f3:c9:0c:c1:8f:f7:4d:3a:8e:b0:
         e5:86:26:d8:24:55:c5:d6:90:17:59:ca:ac:40:51:09:53:1b:
         5d:46:b7:74:a9:c8:c7:72:4b:a4:33:de:99:59:d1:68:ab:87:
         c5:38:d3:a6:e0:e9:e0:2b:d0:2d:17:37:fb:96:29:cf:8b:8e:
         5e:9c:16:74:c9:c5:89:50:a4:e7:76:31:98:45:6f:ba:e4:04:
         37:2d:58:53:df:90:bd:89:cf:2e:75:f3:30:ff:74:f5:ef:e5:
         ad:82:7a:59:ca:fb:0c:a6:51:4a:76:ea:3b:ba:da:52:9f:c9:
         75:eb:81:c9:af:6c:eb:b6:3a:5b:e6:a7:15:7c:66:a0:f7:74:
         00:f4:d5:9c:7f:a7:3f:01:6f:f8:8a:73:7e:e5:ad:5d:e4:72:
         f9:c2:30:fb:59:c5:a3:aa:31:fe:48:13:f5:fd:69:1a:a0:8c:
         24:f9:75:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:47:27 2026 by rpki-client