Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5aab4d0-1ae1-342a-a92d-432430804adb.roa
File:                     b5aab4d0-1ae1-342a-a92d-432430804adb.roa (raw, json)
Hash identifier:          N4ZUov89IZSNKsTTxaID7QbsEnLVhCO1u3UliLKAZdc=
Subject key identifier:   02:5B:04:1C:DC:9D:AD:66:08:19:3E:99:5D:BF:87:A2:15:45:67:24
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CE0975C60B85FD711365CDC90
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5aab4d0-1ae1-342a-a92d-432430804adb.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        70.189.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:5c:60:b8:5f:d7:11:36:5c:dc:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=e94a488a-0f3c-4b21-b7f0-0b7bdb4c809b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:bf:f0:f7:93:38:c5:0a:b9:e1:3e:d7:b6:7f:
                    f6:7e:e0:c8:52:15:f7:7c:93:d9:42:f6:01:25:f6:
                    a9:d3:82:32:a0:3f:b3:db:14:e4:3f:e8:84:a5:8c:
                    cc:d0:d3:e5:e3:e8:eb:26:7d:45:5f:5b:c3:59:97:
                    12:9b:2c:c0:37:6e:3d:c1:8a:18:6a:86:e0:a8:3c:
                    ad:0d:31:4e:6a:dc:85:ab:23:e4:09:64:ca:2d:e6:
                    a4:78:ff:98:84:5e:e5:c3:58:58:94:bc:ad:db:41:
                    1c:da:04:ca:69:58:99:5a:a8:85:24:a2:6c:b9:5a:
                    97:3f:b8:db:03:5d:dd:cb:06:7b:73:91:9c:74:f3:
                    f4:0a:7b:9b:ed:36:8f:aa:40:11:35:7e:fd:24:12:
                    33:37:14:eb:25:0f:b5:f6:3e:18:ba:32:db:87:02:
                    2f:97:fa:ae:38:c3:2d:49:e2:db:1f:85:e9:dc:d1:
                    1b:50:35:60:fe:05:73:47:6f:f3:2c:ae:5f:5b:cc:
                    f4:fb:08:b0:cb:99:a3:f1:06:fc:b4:bd:d4:7a:49:
                    85:cc:af:2c:8a:33:9f:64:d6:4e:1f:12:3b:71:5d:
                    1b:ef:4a:2b:47:70:80:76:4e:ea:3f:06:ca:20:71:
                    23:85:f4:91:d9:20:fd:1d:3b:22:2d:af:55:09:71:
                    a3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:5B:04:1C:DC:9D:AD:66:08:19:3E:99:5D:BF:87:A2:15:45:67:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b5aab4d0-1ae1-342a-a92d-432430804adb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.189.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:b9:04:09:56:ba:de:1a:19:88:42:31:52:03:9e:ae:ea:5e:
         e3:15:1b:3b:4e:89:7d:4a:0f:8a:19:aa:eb:fc:45:8d:6a:38:
         21:2a:e8:2c:71:59:d1:53:c0:31:bb:ac:de:23:ad:88:95:94:
         4b:6d:50:3f:a9:4b:fa:d8:9f:5a:cd:60:aa:41:79:4c:71:7c:
         86:1c:9b:fd:91:5f:5f:67:db:52:4a:4e:36:c3:a4:15:b3:4c:
         68:5c:84:97:fb:b5:73:28:f3:3d:df:0c:89:94:c4:7d:02:ff:
         f5:83:3e:b2:d5:ca:2c:73:2c:7a:46:55:c9:eb:80:ce:11:71:
         a5:ff:c7:f6:41:f5:70:77:b9:03:99:06:e2:f8:36:3e:c0:11:
         95:95:85:75:cc:b6:a3:30:21:4f:45:4f:cc:d9:63:c7:18:70:
         4e:40:80:6c:cf:be:0c:58:0b:7d:b8:10:d6:09:0f:63:73:db:
         87:17:24:11:fd:29:5c:e7:cb:8b:83:aa:04:be:b6:43:e6:6e:
         21:05:50:65:fa:80:de:00:eb:bd:34:f7:6f:f2:8c:e8:c5:1f:
         e9:da:e3:ed:f9:e7:a2:01:88:4c:50:15:2c:91:90:83:b7:b5:
         5d:80:e2:eb:4f:2a:11:dd:48:4e:63:ed:56:4a:a5:24:e4:53:
         d5:f5:7f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:57 2026 by rpki-client