Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/020c3c8f-8831-3fe1-88b6-126bf2096e89.roa
File:                     020c3c8f-8831-3fe1-88b6-126bf2096e89.roa (raw, json)
Hash identifier:          eAxK4MjQsdSQ/B9DG3zq31CUvpLGnmUz9HE6F2gqiwc=
Subject key identifier:   12:08:8C:04:AC:DD:C9:51:89:68:DB:4E:D6:6D:00:E2:24:6C:AD:41
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CD99D0C3E3CF610DE554DFB00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/020c3c8f-8831-3fe1-88b6-126bf2096e89.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        68.2.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9d:0c:3e:3c:f6:10:de:55:4d:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=14ca9498-dd88-4f4f-8ec5-79c2c7731d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:62:aa:9e:01:a9:29:07:cd:e9:4d:5d:05:89:
                    a4:81:69:fd:0c:2f:65:0f:7c:70:81:eb:77:5a:30:
                    a0:ec:21:ee:a8:04:9a:60:68:bc:48:b2:b7:09:1b:
                    5d:8d:ad:b7:0b:07:bd:c8:26:45:c1:4c:ed:48:6d:
                    09:08:a8:a2:12:bf:cf:2a:ab:21:1d:70:c0:dd:49:
                    07:d7:98:49:9b:dc:e0:47:fb:13:4d:9b:ca:be:de:
                    88:72:61:62:81:ca:2c:b0:bb:00:07:b3:76:ec:24:
                    e2:f6:a5:b6:15:22:7d:bb:63:d5:ce:ee:86:fe:bb:
                    71:37:56:1f:1d:b5:4e:fb:a7:89:3e:5a:49:23:7e:
                    bd:6d:17:f0:a5:33:04:5f:22:9f:89:c0:70:3e:a6:
                    b5:ca:cb:07:86:4c:6c:0a:7c:d9:58:1b:4d:15:33:
                    d2:a7:b6:7f:34:0d:92:ce:63:6e:3f:37:09:17:69:
                    39:65:01:13:13:65:3e:55:a4:de:95:36:99:d0:f6:
                    3c:90:56:c6:d1:0c:eb:23:14:51:aa:bd:0e:a3:04:
                    c6:82:07:5a:89:aa:9d:eb:be:fd:81:d9:43:3f:53:
                    e3:8c:d5:d6:c3:0b:83:71:1e:d2:16:ae:ed:67:58:
                    b7:74:78:49:1a:67:c8:4f:31:83:61:b4:42:cd:cf:
                    5a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:08:8C:04:AC:DD:C9:51:89:68:DB:4E:D6:6D:00:E2:24:6C:AD:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/020c3c8f-8831-3fe1-88b6-126bf2096e89.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.2.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:9b:ad:eb:99:e7:89:cb:cb:c3:91:64:83:d1:67:31:4b:30:
         d2:36:17:9a:7b:7d:7c:8a:47:11:0e:a3:1d:14:3a:34:44:5d:
         23:31:28:7d:96:46:86:eb:b7:72:4b:e0:df:01:9b:1b:92:a2:
         31:69:fa:a0:ec:9c:49:e0:64:62:a4:1c:5e:f6:da:a2:74:6e:
         ce:bf:36:d4:12:4a:40:a7:a7:f5:ed:65:89:a1:1c:56:bb:6b:
         4b:85:a1:fe:0e:b4:b0:7f:03:4f:2c:64:5a:f3:1a:87:99:bf:
         f8:a4:ea:0e:9f:89:a5:ee:82:44:91:0c:71:f0:8c:3c:54:c0:
         5c:c9:30:73:17:41:32:79:9c:13:45:e0:a5:59:07:80:71:5a:
         5e:84:92:ad:11:f4:11:ab:39:cd:5f:30:ba:39:9a:0a:cf:6a:
         fe:2f:45:1c:fe:aa:96:8a:90:f6:93:60:a4:09:42:d6:31:f6:
         5e:11:0e:af:80:ed:c1:ce:2e:0b:ef:ab:85:73:4e:bf:a2:0d:
         af:16:2a:42:c7:73:0d:52:46:24:12:a6:34:05:bb:d9:67:a0:
         1e:64:ab:89:71:e9:e0:92:29:b3:0b:fd:c0:31:19:43:f2:01:
         7a:c6:9e:c8:83:f7:fb:25:c4:e5:92:96:1d:63:b4:21:40:2c:
         f1:5b:8a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:36:36 2026 by rpki-client