Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c4ecf10-b213-3b89-9f2a-97aa3499108f.roa
File:                     1c4ecf10-b213-3b89-9f2a-97aa3499108f.roa (raw, json)
Hash identifier:          YvGc0Ij+jc2TjFlsCE96rdRUatb/k1Ne7lm/11NiT4M=
Subject key identifier:   42:C3:15:19:90:73:2A:75:62:0D:2D:BF:4F:7C:9A:34:70:72:37:D2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E9EAFFC7D0230A5392206DF40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c4ecf10-b213-3b89-9f2a-97aa3499108f.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     22773
IP address blocks:        68.226.126.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:fc:7d:02:30:a5:39:22:06:df:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=5b3d1422-429f-4441-ae14-f81c6c6b4a0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1c:03:7d:c1:94:97:24:46:50:f3:f9:90:2d:
                    0e:c2:0a:ee:e7:61:85:b4:60:e0:e2:5d:0b:67:8a:
                    ed:5e:85:21:20:7a:51:b1:40:26:1f:bb:2c:39:02:
                    5f:08:51:00:b8:01:80:92:8c:85:3d:f6:b6:8c:33:
                    a3:b2:e2:ca:b8:a6:af:1c:bf:84:d6:c5:39:ca:d4:
                    1b:a8:36:c8:2a:24:ca:41:8c:06:ee:33:39:03:c1:
                    30:06:5e:0c:4d:3e:8b:cf:b4:fc:53:c4:fa:47:4b:
                    4f:4b:4d:48:11:d1:cc:8b:50:66:00:cf:3b:37:02:
                    59:26:1f:64:45:39:9a:c3:02:f0:52:ce:1a:75:05:
                    46:87:4c:f8:1c:7e:a5:74:5e:35:4e:f9:0c:64:92:
                    64:de:d1:8d:1d:72:8c:13:5e:e4:a6:3b:28:e1:31:
                    3f:3a:3b:27:30:ae:3e:ec:0a:ff:49:bb:ef:f9:b0:
                    22:56:3d:48:ae:fa:76:1d:cf:46:ad:4b:df:e8:45:
                    ef:c2:e4:88:01:ee:80:4c:2e:d0:df:29:e9:76:5d:
                    58:ce:e3:41:9f:af:0c:f3:8c:53:c7:c5:d0:e8:db:
                    c0:7f:01:e8:96:fc:17:b1:47:27:f4:45:5d:88:33:
                    f1:e5:a5:23:4b:ec:65:0f:c4:28:b4:e4:ae:8f:3c:
                    41:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C3:15:19:90:73:2A:75:62:0D:2D:BF:4F:7C:9A:34:70:72:37:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c4ecf10-b213-3b89-9f2a-97aa3499108f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.226.126.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:30:84:53:dc:75:a8:99:58:f6:bb:94:0d:2e:1c:5b:c5:b7:
         3d:6b:f3:9f:28:7e:ae:e8:42:ee:ba:70:c2:e7:17:aa:50:de:
         d3:d6:4d:6c:ee:4a:39:d7:b3:7e:2b:9e:1e:47:6f:a4:4c:3f:
         8e:70:71:65:66:04:fc:02:e8:54:b2:c3:3c:f3:06:e9:a7:03:
         07:47:f6:10:77:21:a5:b5:ee:98:f3:3e:a1:84:a7:3d:5c:a7:
         8f:d4:9e:28:48:93:86:54:d6:4a:9a:99:3f:a7:6d:84:62:86:
         8e:53:a0:c9:57:ac:48:ad:36:49:70:9e:31:7e:4f:4d:df:ca:
         ed:4f:91:dc:8f:a2:53:e3:39:2e:b3:1e:d0:05:c3:6f:82:e4:
         bb:72:5b:c6:b1:f6:26:7f:79:28:66:be:b5:9b:fc:99:c0:92:
         12:3b:c7:29:10:04:2c:31:7c:ec:85:94:66:ad:8b:c7:43:3b:
         07:10:c6:d6:f3:42:70:b1:21:e0:41:a2:93:4c:5a:4b:31:9a:
         2f:45:93:77:7e:6f:ef:2f:c7:8a:f8:4f:84:4e:cc:f3:56:00:
         7c:9c:0e:70:3e:0c:92:cd:ef:dc:88:07:67:7c:d6:93:8d:21:
         37:b2:9f:18:c1:b9:5c:e5:d0:5e:76:50:3a:4c:0c:14:fc:6f:
         ce:7d:70:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:38 2026 by rpki-client