Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05c020c3-c9a9-3dbf-b209-8375d1870e33.roa
File:                     05c020c3-c9a9-3dbf-b209-8375d1870e33.roa (raw, json)
Hash identifier:          otw7Eb3Id9s/7b0SAKZXeqq7musChNuILDpl4oRaPjM=
Subject key identifier:   20:DD:89:B2:E4:CE:D4:4F:9F:72:50:D9:67:57:57:0C:B1:97:D2:25
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E9A7FEE1C0B57481B2D4EAAD0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05c020c3-c9a9-3dbf-b209-8375d1870e33.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22773
IP address blocks:        68.2.202.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:ee:1c:0b:57:48:1b:2d:4e:aa:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=b2fad1ce-dbd2-4faf-9bb4-e1c9cdf50e3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:5b:fa:2c:70:7b:bb:86:19:3e:c8:fb:81:8b:
                    6b:47:6b:88:50:49:cc:57:b1:a5:09:e6:fd:1f:78:
                    e7:b7:30:76:3f:eb:c7:aa:66:25:ac:0c:65:5d:a9:
                    7c:2a:cb:ab:5c:fe:8c:4e:ae:3e:ae:08:04:c5:09:
                    c0:1a:ca:42:5c:3a:04:02:57:57:d6:62:fc:be:69:
                    7f:5c:f5:33:38:2b:e2:7a:ac:06:c3:18:22:c1:1e:
                    1b:9f:04:5d:5b:3d:0a:a7:2f:dc:f6:7e:ff:b8:92:
                    df:ac:37:f2:2d:07:a8:f8:b5:40:df:5a:e2:9d:5c:
                    c3:00:45:de:d7:8d:7b:e1:b1:20:5d:1f:08:2d:82:
                    a0:93:cf:ba:35:67:cc:49:42:23:e4:a6:59:04:bf:
                    26:c2:e6:c0:f5:17:1b:b0:4f:5c:68:48:dd:0d:aa:
                    31:06:07:9b:f8:43:d7:08:77:9c:37:d8:73:b6:aa:
                    fc:0d:8c:e8:83:52:f9:d9:d3:41:9c:74:b8:0d:38:
                    61:65:cd:da:49:d9:4e:ba:03:07:87:51:04:d2:75:
                    db:d2:9e:41:98:40:5a:ba:90:d9:e0:0c:12:69:47:
                    5e:26:e5:d0:6b:95:f7:ac:10:07:95:40:cd:5a:9c:
                    ce:b2:d7:b2:71:01:fb:66:27:ed:97:8f:4b:be:c8:
                    71:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:DD:89:B2:E4:CE:D4:4F:9F:72:50:D9:67:57:57:0C:B1:97:D2:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05c020c3-c9a9-3dbf-b209-8375d1870e33.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.2.202.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:93:c0:b7:28:79:ff:76:20:41:d4:45:24:46:92:ae:50:a6:
         4b:f5:31:e8:f4:b7:c0:fc:89:a2:a0:dd:ff:98:3c:ff:e2:7b:
         e2:b2:a6:22:82:ff:09:80:6b:2e:e2:6f:53:98:d6:d7:e9:37:
         97:32:f2:fa:01:17:cf:44:bb:97:ce:dd:e1:29:f1:52:19:1c:
         ff:a0:27:ad:f4:1a:88:7e:e1:da:b7:af:4e:71:7f:1a:f4:53:
         19:8e:60:ef:2f:30:8d:2e:54:4a:5a:1d:97:0d:a8:77:5c:2a:
         b1:cd:d2:bd:4a:62:e4:a8:d7:d4:3d:43:f9:94:90:1c:8c:3a:
         df:f9:79:90:93:06:7b:0f:1b:2e:66:50:08:53:03:c5:f2:45:
         f5:66:b1:59:56:81:04:df:0c:3b:8d:56:99:9a:2d:0e:ae:28:
         f4:e9:7e:42:21:4f:c3:c8:b9:af:38:f7:88:ac:de:9c:f1:f4:
         de:47:eb:fb:da:95:dc:28:8c:46:a2:47:01:c1:89:a6:88:c3:
         4c:67:98:f0:32:fa:94:35:63:3c:56:eb:20:a9:3d:8b:6f:4a:
         a0:a6:1f:cb:12:4c:2f:4a:09:a0:35:04:97:a4:da:db:0e:cb:
         fb:3a:b5:e7:9f:1b:21:20:60:53:ba:ab:10:13:2b:c3:c8:10:
         a3:15:71:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:40:23 2026 by rpki-client