Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7bd51c56-1a96-3b6a-b59a-04ab4f10d2b8.roa
File:                     7bd51c56-1a96-3b6a-b59a-04ab4f10d2b8.roa (raw, json)
Hash identifier:          eC/fdHUo9x2d8IzPY6rR33Z41jaDjX2RYMMzbXxvRw8=
Subject key identifier:   3E:4A:41:1A:19:3E:E4:E4:D4:9F:EC:1F:CC:47:2B:31:05:5C:48:98
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4112D6B9DD3C36FFA1BAF3C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7bd51c56-1a96-3b6a-b59a-04ab4f10d2b8.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        70.176.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:d6:b9:dd:3c:36:ff:a1:ba:f3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=681e2414-e971-4e01-8793-04a92dbb89e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:52:ed:b5:db:24:dc:09:43:ed:7a:bd:d0:aa:
                    5c:a5:cc:c3:aa:a1:52:df:20:db:b8:6c:29:be:68:
                    30:94:1a:ea:e2:95:7b:38:64:c8:fc:7a:fb:35:7e:
                    8a:24:27:6c:08:bd:50:da:51:6e:18:55:ad:63:e4:
                    d5:e1:b8:cf:fb:38:6a:54:10:45:97:32:99:a9:2e:
                    91:5e:f1:9e:c9:4b:9f:59:4a:ff:02:8f:7b:5a:0f:
                    a8:1d:24:c4:03:20:17:14:89:8c:0e:ff:87:cc:f1:
                    a7:74:09:8d:e8:60:f2:f3:be:ba:95:e1:39:9d:eb:
                    66:7c:71:22:cd:12:29:54:e4:bc:a2:aa:67:c2:32:
                    f4:26:fb:33:91:a8:30:99:30:bf:7a:15:07:2d:2e:
                    be:b7:36:0c:83:24:ef:0b:71:04:ae:bc:16:1d:82:
                    55:91:8b:4b:e6:8d:40:cb:fa:8b:b9:11:b4:bd:0c:
                    43:25:fe:b0:08:c1:37:47:eb:80:bd:2e:7c:1a:36:
                    1b:4a:fe:e1:10:f7:aa:1c:61:f5:77:03:9e:ef:10:
                    16:8b:27:28:8f:02:bd:69:77:79:0d:9e:7b:8f:79:
                    d1:64:75:25:66:63:3b:60:92:31:da:68:db:0b:ba:
                    4f:f7:09:ce:7d:ea:07:36:79:ce:c6:7b:eb:d7:7b:
                    73:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4A:41:1A:19:3E:E4:E4:D4:9F:EC:1F:CC:47:2B:31:05:5C:48:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7bd51c56-1a96-3b6a-b59a-04ab4f10d2b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.176.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:95:a0:5b:cd:5c:c7:d8:3e:37:75:7f:3a:a8:35:0b:9d:5b:
         5f:82:92:34:2b:e3:8d:5c:38:50:d2:cd:61:72:00:f6:72:aa:
         d9:8b:45:ce:5b:75:a2:2c:76:0d:c5:b2:47:3a:d3:d8:08:77:
         bd:96:e9:23:84:58:0c:5b:e9:99:03:0c:82:36:de:5b:6b:67:
         fb:94:60:ca:88:89:f6:82:4c:3d:ca:42:09:fe:8f:b0:58:67:
         82:57:68:71:d8:30:57:dd:62:57:cb:e8:bb:47:4e:f2:43:f2:
         1f:3f:99:41:7e:c6:02:c7:67:d8:16:fc:97:02:d2:c1:8c:a1:
         79:25:f2:13:9a:9d:3b:f5:d7:2a:39:e8:05:a8:ad:36:ad:27:
         c8:36:fc:69:59:e5:e5:0e:e7:b6:8c:ed:79:5a:a0:f2:93:be:
         dd:cd:5e:25:c5:89:5d:f1:54:aa:44:9b:fc:35:81:7f:c6:14:
         5f:e7:0a:f3:bd:8d:b3:a6:5f:d0:d8:e9:79:9a:db:05:db:68:
         3b:78:4e:8f:75:a3:bc:a5:73:61:ad:ce:9a:61:0d:c3:b1:e0:
         03:3f:9b:21:b8:4b:18:e3:b7:eb:9f:d8:6d:db:42:fd:90:dc:
         03:ee:f0:02:da:ce:09:8d:88:59:89:f7:d9:76:a5:d4:3b:96:
         72:52:3f:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BEta53Tw2/6G688AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk
NjgxZTI0MTQtZTk3MS00ZTAxLTg3OTMtMDRhOTJkYmI4OWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFLttdsk3AlD7Xq90KpcpczDqqFS3yDbuGwp
vmgwlBrq4pV7OGTI/Hr7NX6KJCdsCL1Q2lFuGFWtY+TV4bjP+zhqVBBFlzKZqS6R
XvGeyUufWUr/Ao97Wg+oHSTEAyAXFImMDv+HzPGndAmN6GDy8766leE5netmfHEi
zRIpVOS8oqpnwjL0JvszkagwmTC/ehUHLS6+tzYMgyTvC3EErrwWHYJVkYtL5o1A
y/qLuRG0vQxDJf6wCME3R+uAvS58GjYbSv7hEPeqHGH1dwOe7xAWiycojwK9aXd5
DZ57j3nRZHUlZmM7YJIx2mjbC7pP9wnOfeoHNnnOxnvr13tzOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD5KQRoZPuTk1J/sH8xHKzEFXEiYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2JkNTFjNTYtMWE5Ni0z
YjZhLWI1OWEtMDRhYjRmMTBkMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARrCeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADSVoFvNXMfYPjd1fzqoNQudW1+CkjQr441cOFDSzWFyAPZyqtmLRc5b
daIsdg3Fskc609gId72W6SOEWAxb6ZkDDII23ltrZ/uUYMqIifaCTD3KQgn+j7BY
Z4JXaHHYMFfdYlfL6LtHTvJD8h8/mUF+xgLHZ9gW/JcC0sGMoXkl8hOanTv11yo5
6AWorTatJ8g2/GlZ5eUO57aM7XlaoPKTvt3NXiXFiV3xVKpEm/w1gX/GFF/nCvO9
jbOmX9DY6Xma2wXbaDt4To91o7ylc2GtzpphDcOx4AM/myG4Sxjjt+uf2G3bQv2Q
3APu8ALazgmNiFmJ99l2pdQ7lnJSPx4=
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:28:41 2026 by rpki-client