Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1eccfd2c-1edb-30a3-96ee-66ec0fbfe09d.roa
File:                     1eccfd2c-1edb-30a3-96ee-66ec0fbfe09d.roa (raw, json)
Hash identifier:          Wz7qUqEVWJAJintxTy28It5Zv1rgw0wR3uOJNXG3qSQ=
Subject key identifier:   EB:B5:7F:2E:9D:47:9D:5F:28:A1:8C:C1:C7:53:BE:17:68:7A:EC:F2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EA015754D9A10B84B3FEA570A
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1eccfd2c-1edb-30a3-96ee-66ec0fbfe09d.roa
Signing time:             Sun 26 Jul 2026 09:00:12 +0000
ROA not before:           Sun 26 Jul 2026 09:00:12 +0000
ROA not after:            Sat 24 Oct 2026 09:00:12 +0000
asID:                     22773
IP address blocks:        72.206.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a0:15:75:4d:9a:10:b8:4b:3f:ea:57:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 26 09:00:12 2026 GMT
            Not After : Oct 24 09:00:12 2026 GMT
        Subject: CN=3c46d3f7-b046-4003-b1f1-261afaffc835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e4:1b:ea:70:a4:f5:74:68:57:d6:2f:79:9e:
                    e4:86:33:c4:9d:9d:92:c2:86:af:68:b4:d0:38:83:
                    c1:fc:64:4e:a2:e8:f7:36:98:5d:a2:e3:a3:fd:e5:
                    2c:65:a9:ee:e3:f5:32:02:b6:ca:ef:80:4a:ac:b5:
                    b9:ec:e6:8b:71:bc:82:3d:bc:e7:6a:a0:63:91:1e:
                    e2:55:fb:f2:7b:28:95:e5:0b:54:d9:01:7e:87:76:
                    21:c5:e4:60:6b:89:e6:18:cc:2f:ef:d1:e9:2d:1c:
                    8d:4b:98:ba:c0:6a:61:05:d7:15:29:38:9d:f1:ab:
                    99:9f:0d:14:11:4c:71:bd:7f:d2:a8:8e:f1:f3:68:
                    00:8c:db:07:fe:be:d5:73:f9:0d:09:4d:78:cb:34:
                    79:89:a3:e9:79:30:70:46:86:bb:bf:0e:18:bb:05:
                    ac:5e:77:65:1e:85:cf:2b:a3:8e:45:da:50:40:73:
                    7b:93:b9:78:89:43:4c:bd:1b:a6:85:2a:98:74:c9:
                    71:bb:da:f6:29:51:82:f0:43:0b:af:94:d4:72:c6:
                    9e:82:43:c2:08:58:2d:de:e5:9a:65:c0:c0:d3:14:
                    c6:14:b3:18:ef:85:dd:f9:c5:87:49:f7:27:55:3e:
                    0d:bc:32:39:73:7a:b4:6c:52:75:30:5d:68:cc:a6:
                    f3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B5:7F:2E:9D:47:9D:5F:28:A1:8C:C1:C7:53:BE:17:68:7A:EC:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1eccfd2c-1edb-30a3-96ee-66ec0fbfe09d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.206.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:8e:24:fc:79:f3:04:a1:c2:32:82:77:62:6c:c5:08:c8:51:
         22:69:11:a0:25:e7:70:ee:39:a3:57:ab:fc:1d:ca:64:60:30:
         9c:d2:c2:5f:f3:b4:a9:06:bc:4d:9d:61:a9:b1:f4:97:e6:05:
         fc:9e:ea:bb:3f:25:eb:96:f7:6f:bb:d3:86:1e:6c:27:52:9f:
         96:ac:8b:84:36:7e:90:ba:6c:27:39:a3:5b:7d:04:bf:fc:a1:
         4b:35:82:f4:bc:fb:fa:65:eb:4d:89:9a:04:64:9b:6e:ff:82:
         00:db:e4:d7:2c:8b:7f:52:2b:c3:f9:c5:16:0a:cc:17:9a:0b:
         a7:4a:d1:ac:64:90:c1:57:b7:5c:9f:12:9f:5a:fe:f8:e8:47:
         a1:80:77:47:94:e5:93:fd:b4:47:cb:42:38:d0:bf:08:99:7a:
         6e:2d:2d:4c:cd:a8:42:6f:cc:e6:d2:de:35:af:e9:21:06:79:
         d3:81:8d:25:38:98:81:64:2c:49:ad:1f:d7:4d:ca:39:a0:b2:
         74:9e:1d:53:1e:02:cc:e4:74:77:25:43:d3:d8:62:79:a2:65:
         92:0e:df:a9:25:4c:f4:8e:e6:3c:02:f3:3d:ed:24:3b:fb:20:
         75:7e:86:70:68:d1:f4:66:4f:05:29:64:b8:73:3e:1a:fc:bb:
         67:5b:30:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:44:31 2026 by rpki-client