Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7e78fd51-41df-3ed9-89c3-c88a21be4d84.roa
File:                     7e78fd51-41df-3ed9-89c3-c88a21be4d84.roa (raw, json)
Hash identifier:          6HgNKnRR2nRpOnSbOL9g2XvERzl3hmlWzrB+E9x+pnA=
Subject key identifier:   54:6E:95:A2:94:16:54:E5:EE:1D:0F:18:24:7C:94:E9:0B:B1:31:05
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584BAD625D1121D41D6221D1A280
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7e78fd51-41df-3ed9-89c3-c88a21be4d84.roa
Signing time:             Wed 29 Oct 2025 01:00:31 +0000
ROA not before:           Wed 29 Oct 2025 01:00:31 +0000
ROA not after:            Tue 27 Jan 2026 02:00:31 +0000
asID:                     22773
IP address blocks:        70.168.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:ad:62:5d:11:21:d4:1d:62:21:d1:a2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct 29 01:00:31 2025 GMT
            Not After : Jan 27 02:00:31 2026 GMT
        Subject: CN=3a16de0a-08f1-436a-b114-6573a8eed17a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d7:c4:86:1a:a6:c8:9a:04:fd:a6:10:8a:6a:
                    81:48:b8:d3:58:20:d1:2d:b8:7d:da:0c:cf:d3:ba:
                    db:9d:e4:a0:34:b8:31:24:08:95:6c:ee:25:49:ab:
                    2e:41:07:93:72:9e:cd:50:b7:f7:34:95:4f:93:ac:
                    45:7b:13:fa:2e:17:e6:34:eb:10:ef:aa:9c:fa:52:
                    e0:66:a4:70:13:c4:f0:8a:92:91:7e:c3:24:84:e9:
                    7d:82:9b:70:1f:5d:3b:54:1c:9e:eb:4c:3d:ea:96:
                    a7:d7:78:d7:8c:40:9d:e1:47:da:ba:45:ce:79:e4:
                    4e:2b:60:b0:4a:70:59:5e:0e:fc:25:56:3e:40:4b:
                    30:1c:fd:fb:48:9e:b4:f8:8e:7f:a6:97:62:3b:83:
                    bf:59:a9:ce:94:d7:68:4e:52:33:74:7b:ae:d2:ac:
                    4a:2c:ae:e4:d0:08:98:56:20:1f:27:d2:e9:0e:57:
                    c5:0c:44:64:04:e3:48:ba:8d:01:de:65:fa:72:af:
                    ca:86:91:1a:12:40:a8:35:3a:39:e8:ff:cb:87:6a:
                    52:fe:c6:1e:f6:cc:df:71:49:75:f9:05:f5:64:a0:
                    73:c8:a4:d9:d6:a2:2c:a6:5c:d7:b5:1f:33:02:67:
                    27:84:84:2a:83:c7:a0:3e:c5:07:29:27:64:cc:3f:
                    e0:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:6E:95:A2:94:16:54:E5:EE:1D:0F:18:24:7C:94:E9:0B:B1:31:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7e78fd51-41df-3ed9-89c3-c88a21be4d84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.168.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:0f:23:05:83:7e:37:56:4e:e4:a9:bd:39:dd:dd:fe:e5:fe:
         8f:39:a0:32:d7:ed:68:b9:e9:37:9c:6a:23:68:d5:84:1f:5b:
         3f:3a:ab:b3:cc:74:89:3f:1b:ce:38:17:3f:f4:f7:fc:1f:fc:
         77:0f:da:36:34:e2:9b:d0:7f:37:ac:d7:af:f6:7f:93:27:84:
         16:e6:12:4a:4c:20:ef:26:73:7f:b7:99:cc:c8:d0:c8:80:df:
         1a:83:28:cd:9a:66:02:47:28:b3:92:78:b7:ce:82:98:77:3c:
         d6:09:46:88:f1:b3:31:1d:f8:34:36:d7:3e:ad:a3:72:eb:df:
         4d:01:af:11:dc:2b:10:b3:7c:a5:ad:2a:fa:54:02:2e:78:0c:
         1f:5c:ef:64:0c:80:c6:cc:3c:4c:41:b6:4c:21:85:10:60:b9:
         b6:ae:c5:8b:a9:79:04:b9:c3:7f:c1:d2:ce:5a:5d:76:e9:9e:
         ac:ab:db:d3:d6:40:91:ed:0a:e8:78:ef:a6:04:67:04:8e:81:
         cc:da:3f:a6:3a:ec:3b:0f:d1:b1:a6:da:b2:56:26:59:a6:90:
         d5:14:34:05:da:8c:0d:b7:88:82:6d:e3:62:64:a9:a2:8d:ac:
         b6:39:1a:57:13:7f:d9:66:81:a8:f0:53:29:25:47:ec:d5:20:
         60:b6:b5:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutYl0RIdQdYiHRooAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI1MTAyOTAxMDAzMVoXDTI2MDEyNzAyMDAzMVowLzEtMCsGA1UEAxMk
M2ExNmRlMGEtMDhmMS00MzZhLWIxMTQtNjU3M2E4ZWVkMTdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidfEhhqmyJoE/aYQimqBSLjTWCDRLbh92gzP
07rbneSgNLgxJAiVbO4lSasuQQeTcp7NULf3NJVPk6xFexP6LhfmNOsQ76qc+lLg
ZqRwE8TwipKRfsMkhOl9gptwH107VBye60w96pan13jXjECd4UfaukXOeeROK2Cw
SnBZXg78JVY+QEswHP37SJ60+I5/ppdiO4O/WanOlNdoTlIzdHuu0qxKLK7k0AiY
ViAfJ9LpDlfFDERkBONIuo0B3mX6cq/KhpEaEkCoNTo56P/Lh2pS/sYe9szfcUl1
+QX1ZKBzyKTZ1qIsplzXtR8zAmcnhIQqg8egPsUHKSdkzD/gTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFRulaKUFlTl7h0PGCR8lOkLsTEFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvN2U3OGZkNTEtNDFkZi0z
ZWQ5LTg5YzMtYzg4YTIxYmU0ZDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARqhNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkPIwWDfjdWTuSpvTnd3f7l/o85oDLX7Wi56TecaiNo1YQfWz86q7PM
dIk/G844Fz/09/wf/HcP2jY04pvQfzes16/2f5MnhBbmEkpMIO8mc3+3mczI0MiA
3xqDKM2aZgJHKLOSeLfOgph3PNYJRojxszEd+DQ21z6to3Lr300BrxHcKxCzfKWt
KvpUAi54DB9c72QMgMbMPExBtkwhhRBgubauxYupeQS5w3/B0s5aXXbpnqyr29PW
QJHtCuh476YEZwSOgczaP6Y67DsP0bGm2rJWJlmmkNUUNAXajA23iIJt42JkqaKN
rLY5GlcTf9lmgajwUyklR+zVIGC2tVU=
-----END CERTIFICATE-----
Generated at Tue Nov 4 12:48:27 2025 by rpki-client