Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/123d819e-116b-3421-abc9-d6acc75274a3.roa
File:                     123d819e-116b-3421-abc9-d6acc75274a3.roa (raw, json)
Hash identifier:          nsx1IuRJK9ufOLh/3EsQCCzlurimgnVaeZ8xDRaQdAQ=
Subject key identifier:   B6:90:C7:BC:C9:05:E2:80:F9:8B:D8:60:7F:2D:90:58:40:0E:16:73
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E15E48BDA7F755287F9744580
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/123d819e-116b-3421-abc9-d6acc75274a3.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     22773
IP address blocks:        68.7.20.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:8b:da:7f:75:52:87:f9:74:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=3be4a664-ced9-4ad2-b04a-f9917a3f7b04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c7:0c:13:b8:e0:d9:18:46:0b:a1:98:fc:53:
                    db:83:8f:ef:49:5c:bb:ed:a2:83:c9:c1:ef:84:a8:
                    6e:13:6f:45:53:ae:c6:7c:23:13:7a:c1:98:fe:2c:
                    0e:c7:66:9d:5b:6f:7b:93:6b:c2:10:56:15:38:ba:
                    7f:f8:07:ee:4b:a7:92:4b:0c:b2:32:36:25:b5:3b:
                    c6:6b:e4:80:f9:47:d0:64:13:9a:09:03:55:c0:ad:
                    45:5c:81:37:6a:7a:6d:0b:b1:cf:d2:21:32:1d:a9:
                    1c:11:a3:26:37:04:ed:22:89:60:f3:9a:22:b0:ef:
                    7d:9b:b4:ca:05:2e:01:c1:13:32:5a:45:26:4c:2b:
                    74:35:31:62:04:b8:be:77:af:11:2c:d3:07:dc:48:
                    9c:47:df:4d:c7:2c:b1:2c:f5:51:fb:e5:ae:d0:a4:
                    d7:f4:6a:fc:ed:4d:57:c4:59:07:81:fd:2e:a0:82:
                    42:82:bf:35:b7:e4:ee:12:ca:19:19:73:09:d0:95:
                    3f:1a:ee:d7:12:6c:41:88:0e:cf:b8:9c:ce:eb:e4:
                    a8:44:87:f2:1f:26:39:bb:7a:51:7f:fa:96:ad:b3:
                    0a:ad:8b:3a:74:fc:aa:0a:2f:30:7d:6b:cc:a4:f8:
                    19:41:7d:4e:92:de:64:76:13:26:69:70:d5:ba:43:
                    89:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:90:C7:BC:C9:05:E2:80:F9:8B:D8:60:7F:2D:90:58:40:0E:16:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/123d819e-116b-3421-abc9-d6acc75274a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.7.20.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:4d:fe:96:35:e6:4c:33:a1:37:fd:86:82:f3:9d:db:52:63:
         d7:99:aa:5b:37:b1:4c:f3:07:4b:58:02:5f:7b:a1:68:ad:16:
         12:9f:61:d5:36:66:5c:84:bf:bd:b9:4e:e4:62:db:61:5a:b9:
         fd:04:66:e5:79:82:2d:02:dc:3c:55:e7:f9:5c:fe:8e:17:94:
         4c:f9:2e:60:fc:ce:b9:12:29:28:d1:c3:8b:79:8a:91:fe:31:
         57:ef:73:d1:2a:13:79:16:f1:be:b5:3b:f0:7d:16:cc:f1:64:
         6f:21:8d:f6:3f:17:eb:91:98:05:16:94:fe:2b:6a:20:64:15:
         1a:c1:23:aa:24:52:c0:0d:25:99:31:9c:b7:6c:6a:59:6a:5b:
         21:5f:d6:4e:e4:26:5c:a5:9d:71:af:53:e4:5e:6e:e5:2e:7e:
         01:aa:d0:38:c0:57:f1:de:3a:64:ca:85:13:68:b2:0a:14:ea:
         a8:02:97:fc:00:1b:07:b5:61:de:36:dc:0f:b0:78:04:27:c6:
         13:4c:39:9f:00:42:98:fc:44:aa:f9:0f:16:7a:6b:73:9b:6e:
         25:e7:4c:01:f0:8d:3d:e4:f1:96:58:eb:07:46:79:d9:3f:0a:
         79:74:97:58:c9:3e:43:a0:bd:be:2c:dd:f5:2c:01:a1:b8:d2:
         5c:46:44:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5Ivaf3VSh/l0RYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk
M2JlNGE2NjQtY2VkOS00YWQyLWIwNGEtZjk5MTdhM2Y3YjA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmscME7jg2RhGC6GY/FPbg4/vSVy77aKDycHv
hKhuE29FU67GfCMTesGY/iwOx2adW297k2vCEFYVOLp/+AfuS6eSSwyyMjYltTvG
a+SA+UfQZBOaCQNVwK1FXIE3anptC7HP0iEyHakcEaMmNwTtIolg85oisO99m7TK
BS4BwRMyWkUmTCt0NTFiBLi+d68RLNMH3EicR99NxyyxLPVR++Wu0KTX9Gr87U1X
xFkHgf0uoIJCgr81t+TuEsoZGXMJ0JU/Gu7XEmxBiA7PuJzO6+SoRIfyHyY5u3pR
f/qWrbMKrYs6dPyqCi8wfWvMpPgZQX1Okt5kdhMmaXDVukOJjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLaQx7zJBeKA+YvYYH8tkFhADhZzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTIzZDgxOWUtMTE2Yi0z
NDIxLWFiYzktZDZhY2M3NTI3NGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRAcUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA5N/pY15kwzoTf9hoLzndtSY9eZqls3sUzzB0tYAl97oWitFhKfYdU2
ZlyEv725TuRi22Fauf0EZuV5gi0C3DxV5/lc/o4XlEz5LmD8zrkSKSjRw4t5ipH+
MVfvc9EqE3kW8b61O/B9FszxZG8hjfY/F+uRmAUWlP4raiBkFRrBI6okUsANJZkx
nLdsallqWyFf1k7kJlylnXGvU+RebuUufgGq0DjAV/HeOmTKhRNosgoU6qgCl/wA
Gwe1Yd423A+weAQnxhNMOZ8AQpj8RKr5DxZ6a3ObbiXnTAHwjT3k8ZZY6wdGedk/
Cnl0l1jJPkOgvb4s3fUsAaG40lxGRKQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 23:06:16 2026 by rpki-client