Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2341164c-a137-390d-a18d-d88900200147.roa
File:                     2341164c-a137-390d-a18d-d88900200147.roa (raw, json)
Hash identifier:          3yE8B8ZASmOJjn505knT9S1374mQP2f8b9lIOvA3Uuc=
Subject key identifier:   93:7E:7E:75:F6:F2:1D:64:B9:FA:26:48:85:09:B0:76:90:37:1E:52
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E15E480C2FA111C80FDB8C680
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2341164c-a137-390d-a18d-d88900200147.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     22773
IP address blocks:        72.218.68.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:80:c2:fa:11:1c:80:fd:b8:c6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=2ac7ea75-7ac0-49f7-a90a-b80a5134334f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f8:d3:dc:4e:45:94:cc:04:6b:b4:a4:17:2c:
                    3b:ff:29:c2:b9:b3:1e:3e:cf:45:63:a2:cf:4c:49:
                    0e:21:06:b5:f8:e6:e6:d4:5a:47:cc:8b:e1:a8:09:
                    3c:0b:46:90:83:8e:48:db:4e:c6:5e:87:88:4f:93:
                    fc:c2:b8:29:13:98:89:9b:df:fd:35:dd:53:3d:89:
                    63:a3:4a:21:52:5a:f6:2f:70:c7:cb:c8:5e:86:7a:
                    80:8e:fb:8f:c4:8c:ab:ae:89:48:dd:b0:e0:e0:f9:
                    8d:3b:e4:7c:69:c6:58:dc:19:17:d8:ff:27:04:9c:
                    b3:3f:ae:11:d1:47:42:70:1d:01:78:55:b6:a4:91:
                    46:82:c0:4f:c5:50:43:9f:be:55:57:4f:28:c6:c9:
                    15:20:f0:a4:06:3c:b8:ef:f0:3d:ec:07:ba:29:03:
                    41:6b:57:3c:58:1d:78:45:5f:46:11:5d:d1:c7:fd:
                    9e:38:ee:8f:89:ea:ac:9b:1f:06:f0:b6:92:7c:1d:
                    70:a0:dd:7c:08:bc:d9:dc:6f:fe:48:d3:c7:34:a6:
                    68:29:2c:7a:b4:b9:f6:be:6f:56:d9:34:b6:85:10:
                    de:06:6f:b6:2a:c4:a1:7f:c9:88:ac:03:53:39:61:
                    6a:6d:d6:56:64:d2:65:74:c4:47:01:87:20:e7:cc:
                    39:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7E:7E:75:F6:F2:1D:64:B9:FA:26:48:85:09:B0:76:90:37:1E:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2341164c-a137-390d-a18d-d88900200147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.218.68.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:d2:0d:09:96:1f:19:13:a0:e6:d1:57:d7:23:44:a3:84:3e:
         e6:ed:5f:03:23:18:41:8a:cb:76:42:97:c8:81:e4:44:15:3d:
         85:36:4f:e5:13:33:a1:8f:19:c7:67:e5:86:43:5c:5c:9d:8b:
         ba:db:f8:2d:5d:8a:6a:10:e1:cb:72:38:d0:dc:28:71:d6:63:
         2c:0c:2d:7a:57:c1:d5:cc:81:a9:3b:ad:e9:0f:3e:c0:17:db:
         d0:f5:d1:2e:89:40:45:2d:f4:45:a1:2f:73:e0:22:eb:27:ea:
         bb:cf:9d:30:ce:4b:11:32:6a:74:45:e9:47:77:19:91:f3:5d:
         27:2b:b0:a8:cc:f0:f8:6d:be:e1:d4:d0:53:69:10:95:90:04:
         b3:96:09:cd:54:b2:e6:4f:39:0f:d7:1a:63:da:78:57:ea:ab:
         61:b2:45:a8:17:b2:66:bb:7f:76:4b:51:93:47:ea:bd:7e:cf:
         de:74:d4:f4:04:df:59:01:79:9a:a6:44:cf:26:52:9b:49:12:
         89:7d:ca:a4:9d:82:24:82:4b:53:46:d9:61:c6:00:83:12:1b:
         42:5d:4f:c0:36:60:7a:16:63:39:1a:39:ad:94:51:c1:3d:fc:
         45:d6:23:29:73:5d:a1:87:f3:88:a5:39:1d:49:64:56:00:1d:
         98:12:2a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:15:50 2026 by rpki-client