Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5588bd02-e124-3acd-8f0b-1e108e7a6eaf.roa
File:                     5588bd02-e124-3acd-8f0b-1e108e7a6eaf.roa (raw, json)
Hash identifier:          +6xv19Me1nAUziRp3brGweiEK+AazaLCEULZ94VGrjo=
Subject key identifier:   8E:10:04:6B:D0:98:22:18:D3:32:55:58:AD:9E:1F:76:08:60:6B:96
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CE097ADA7AE36CFF553CD7D80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5588bd02-e124-3acd-8f0b-1e108e7a6eaf.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        70.180.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:ad:a7:ae:36:cf:f5:53:cd:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=526b2587-957b-40cc-9a80-978693345f1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:51:98:24:2d:32:05:6f:0d:d1:eb:41:ed:37:
                    4b:6a:12:47:8c:5d:a6:b1:fb:60:d4:25:4b:cb:d8:
                    d4:d7:a9:22:d4:56:5d:03:7c:0e:f9:0b:aa:66:6e:
                    62:4d:2e:a3:bf:03:b9:3d:26:f4:b8:6d:55:1b:2d:
                    39:b2:87:54:46:77:a8:86:4c:a0:0e:fd:02:98:7b:
                    fd:9f:9c:76:16:6c:ad:21:a9:65:4e:b4:8a:72:6d:
                    cd:fc:cb:2f:17:bf:fd:65:7f:3e:9a:94:ba:3f:11:
                    0c:c5:a7:3c:53:71:9b:65:21:96:78:57:8d:dd:d5:
                    c1:6e:07:0f:2f:76:b7:ec:d0:59:be:03:1a:ae:6f:
                    08:3e:64:ee:51:c0:22:67:76:90:10:95:9e:6b:f4:
                    ee:66:42:0f:72:1b:41:aa:9b:41:ed:f3:3d:c2:4c:
                    7e:8a:d4:d0:95:f8:90:d9:8d:52:d1:10:81:7d:ac:
                    46:70:17:ee:e8:86:6c:94:4e:3e:e2:e6:4d:f6:ec:
                    8c:d6:ad:50:00:0e:31:cd:00:80:17:80:7e:b2:a5:
                    97:20:c1:6a:4a:74:95:cb:09:a4:7d:f7:b0:d1:da:
                    9b:17:48:8a:8e:0f:1d:d3:65:38:32:64:a5:ca:b8:
                    d8:e9:e3:55:0e:c6:8b:65:ab:bf:4a:29:4f:9f:84:
                    82:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:10:04:6B:D0:98:22:18:D3:32:55:58:AD:9E:1F:76:08:60:6B:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5588bd02-e124-3acd-8f0b-1e108e7a6eaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.180.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:ab:d7:8f:c6:38:54:48:ae:3b:84:c5:77:c5:a4:c0:a3:2e:
         61:27:2c:35:62:a4:c6:62:9f:00:4d:7e:b9:95:3d:2a:02:43:
         3c:1d:c4:4e:ab:0f:17:7d:21:65:ae:31:4a:7d:fd:50:77:30:
         91:5e:fb:8d:44:f6:6f:94:ed:ef:c4:5e:00:b0:75:e3:ba:60:
         99:24:bd:ac:66:0b:43:88:81:17:73:8b:b6:44:6f:05:72:b6:
         d7:6e:6c:d1:29:48:b6:20:f0:04:c5:89:e5:2d:a0:7d:8c:99:
         98:ca:99:8a:d5:23:69:c4:e1:93:ca:a2:56:81:07:f1:b6:e1:
         d6:14:1d:31:72:d9:3d:7c:8a:49:5c:ff:63:39:b7:65:c1:5a:
         7b:cb:9b:10:3f:f0:80:f2:c5:03:47:8a:f6:f8:a6:50:78:19:
         90:d2:4e:d8:d7:d9:4d:40:64:ba:5a:dd:1a:5b:2f:ee:6f:ec:
         32:ea:d9:a8:95:8f:85:80:63:5c:8e:7b:52:15:72:5b:75:9a:
         3d:87:bd:de:63:87:d5:db:25:ec:de:e0:f6:ca:60:2d:7b:39:
         f6:77:3b:a5:b2:68:e2:27:cd:e8:83:16:5d:f2:0e:c9:6f:54:
         d3:5f:62:ab:7a:28:c2:58:a8:cc:ea:f2:b0:cf:50:22:49:ef:
         df:f5:d7:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:40:29 2026 by rpki-client