Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/06280956-fa46-3cb5-aad4-18597967dd4e.roa
File:                     06280956-fa46-3cb5-aad4-18597967dd4e.roa (raw, json)
Hash identifier:          tkVfb6yxtWwpmIlnC4m3eci6X8X8PdVkAt7fAvqhFow=
Subject key identifier:   88:D2:6F:2C:30:59:2E:FA:89:D0:A9:F0:94:49:64:6E:04:B3:75:3A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EA01586AE183A2D06F726A8A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/06280956-fa46-3cb5-aad4-18597967dd4e.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     22773
IP address blocks:        72.201.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:86:ae:18:3a:2d:06:f7:26:a8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=73c36dfd-4e58-42ba-9b2c-9d38e774fece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:52:f9:03:ce:d0:56:de:3b:c6:1c:70:0d:fc:
                    45:5c:9d:a4:9b:12:e8:80:14:fc:4a:87:f9:1e:4a:
                    82:c8:5d:99:3a:7a:38:1a:ee:e1:22:b2:b2:57:3c:
                    8a:af:55:53:c1:35:31:33:3f:29:d0:0f:5f:33:4f:
                    7e:9c:99:ef:59:dc:57:75:4f:28:39:03:fd:bb:fb:
                    f8:f8:4c:56:64:d7:d0:15:e6:8e:fc:7a:72:c3:90:
                    cd:a7:2f:07:18:2a:38:7d:5c:87:dc:62:6e:d6:46:
                    30:70:da:68:65:33:15:56:a6:de:cc:6d:99:06:14:
                    89:d4:9f:f3:fd:88:8b:65:94:7b:f6:c3:33:23:11:
                    64:7e:b7:63:e3:a4:8c:10:cd:9c:d2:88:31:14:94:
                    bc:03:2b:e0:fe:24:7a:39:86:34:56:05:fd:bb:68:
                    48:c9:07:7a:8a:ae:b9:4e:a5:6d:7b:a2:26:8f:22:
                    f4:42:ed:d4:c7:06:c9:46:87:f4:c9:33:72:f6:12:
                    8c:13:57:0d:98:e8:d1:83:ef:26:b1:9c:13:5f:63:
                    a6:d7:64:16:92:52:99:61:fc:3c:33:d7:75:ac:52:
                    f3:54:d8:c0:0c:86:44:78:76:a1:94:9f:fd:06:29:
                    7f:27:d9:34:6e:fe:cc:60:5e:db:d2:b5:1d:8d:f9:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:D2:6F:2C:30:59:2E:FA:89:D0:A9:F0:94:49:64:6E:04:B3:75:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/06280956-fa46-3cb5-aad4-18597967dd4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.201.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:0b:8f:c5:cd:92:cd:19:2a:e1:20:50:f7:9a:97:bd:6f:20:
         b9:8f:b7:93:c1:ce:00:e8:cf:1a:90:f6:8a:fb:87:95:80:01:
         74:07:42:f3:18:64:ea:c8:31:b5:41:42:3b:62:88:a2:bf:e0:
         17:65:ee:60:dd:bf:f3:ac:26:9e:09:f5:cd:c3:05:ae:53:5f:
         6e:86:b0:e8:63:b8:57:55:1a:ee:ff:87:f0:5f:03:67:77:5c:
         31:3d:95:62:53:bf:7e:ee:f1:c2:4e:b4:8f:52:19:a4:c2:ee:
         6c:e3:0b:d0:5c:f8:23:34:42:cc:37:12:1f:7d:77:98:fd:5a:
         4f:ec:59:28:0d:13:e7:7c:91:fb:42:58:e6:18:d6:dd:8e:68:
         06:b4:45:69:32:53:78:48:fe:55:ac:55:de:0f:2e:24:a4:2e:
         ea:0c:3f:02:e4:7c:9d:3c:d9:64:1b:63:8e:a3:2f:76:65:a8:
         5c:13:8e:3c:12:ab:72:2b:5d:5a:61:b4:cb:be:8f:a0:c4:ac:
         56:fe:3d:72:e3:45:1e:27:26:0a:c5:7a:9d:f3:a1:c1:a4:14:
         ea:d7:93:9e:60:88:4c:20:e2:20:0e:e7:26:d8:be:e2:d9:64:
         da:71:4c:58:d7:ac:1d:ac:35:a8:44:b5:03:bb:15:2b:d5:54:
         2c:7a:e2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:18:42 2026 by rpki-client