Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05b09e8d-5a98-30d4-b9eb-0013d79913d0.roa
File:                     05b09e8d-5a98-30d4-b9eb-0013d79913d0.roa (raw, json)
Hash identifier:          HZ09Pe2pHl+Y4DwtFJpT0n5OTVXH4nRxXMNCzV+fy3w=
Subject key identifier:   D3:5C:56:8F:77:D9:BF:74:6D:F7:50:A9:19:1A:CE:B3:C7:43:7B:97
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CE09794B5B7FB28DBB0085F80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05b09e8d-5a98-30d4-b9eb-0013d79913d0.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        68.224.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:94:b5:b7:fb:28:db:b0:08:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=a411305b-97f9-490d-b298-994f95e1ccb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7b:04:c5:7a:cd:78:32:25:7e:a8:fc:59:85:
                    22:29:0c:bb:57:2f:84:31:70:f2:ae:8e:a9:1b:0b:
                    3f:26:d5:98:4f:fb:ec:a9:27:90:b7:87:85:25:9f:
                    1d:3d:ee:e9:fa:a1:62:a9:52:9e:b5:b4:e8:3d:04:
                    39:40:44:17:01:51:d8:93:ba:a2:f2:6a:40:40:1b:
                    41:91:3a:db:e0:11:51:2d:7d:1e:31:2c:89:c7:a0:
                    e5:30:15:fd:86:c6:ce:20:0a:c6:63:7e:c5:b6:ff:
                    0e:f9:4a:e2:a7:e7:51:e1:e7:0f:a8:d1:3c:4f:ff:
                    0d:88:7e:e6:77:e7:81:b1:bc:8d:58:e4:f2:93:bc:
                    8d:0d:b0:a4:08:d4:2b:62:ff:9f:1e:98:f1:e7:18:
                    2f:55:bf:14:5b:6d:ea:d0:45:c6:01:78:59:62:6b:
                    e7:12:2d:92:5e:78:08:1c:a0:e0:11:26:af:51:32:
                    fe:7a:5f:4f:8f:46:f7:0c:17:e1:20:da:6f:ae:0d:
                    79:50:35:b2:6d:ec:5c:30:92:18:d5:30:65:bd:ae:
                    5a:54:cb:b3:f9:47:90:31:f0:94:65:3e:fd:d4:e0:
                    ea:fb:df:11:55:52:b7:8d:50:84:5c:8a:9c:34:cd:
                    f9:93:f1:16:71:d9:be:e3:b6:73:30:1c:3e:18:cb:
                    35:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:5C:56:8F:77:D9:BF:74:6D:F7:50:A9:19:1A:CE:B3:C7:43:7B:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05b09e8d-5a98-30d4-b9eb-0013d79913d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.224.253.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:9e:e4:92:60:de:a9:c8:9b:43:98:c5:64:87:85:16:85:25:
         99:2d:b6:11:b5:4b:b2:2c:2d:15:ea:31:98:79:9e:5f:62:66:
         ad:bf:44:10:cd:8c:e8:d6:fb:f2:63:98:0c:19:a2:d3:be:56:
         e0:01:7e:9e:f6:d0:b2:89:e9:24:d7:42:9f:65:e1:e6:ac:aa:
         bf:26:53:6b:14:92:d2:7c:17:06:89:95:2e:92:35:8a:4e:ea:
         f9:70:b3:6e:00:8e:f2:a1:81:73:78:25:eb:08:62:0c:9a:d4:
         9a:ef:af:7e:12:8e:8c:a6:a6:f0:ee:d6:f7:3b:49:ff:eb:62:
         3f:6c:29:99:b5:23:e7:73:98:28:f5:c2:f1:33:cd:15:45:c8:
         a5:72:28:2d:f9:50:77:38:a2:18:8a:41:55:97:0d:8b:d3:37:
         1e:a3:06:72:98:3d:89:a0:98:c7:a5:32:64:82:e9:86:3c:e9:
         16:da:aa:3e:a4:33:f8:4e:c6:2e:ca:2c:5b:db:af:b6:3f:a2:
         55:1e:28:eb:84:2e:3a:40:0d:21:68:d3:0a:ab:59:1b:cd:f4:
         c7:fe:2d:5d:29:0c:24:0f:fa:f6:74:4a:ab:ea:08:59:8b:04:
         58:a4:eb:9a:34:22:d1:37:b0:ac:44:bf:d8:f8:6f:2d:cc:da:
         97:89:81:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:26:03 2026 by rpki-client