Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b98f495-2282-3b63-9bd9-c8851b4212b3.roa
File:                     2b98f495-2282-3b63-9bd9-c8851b4212b3.roa (raw, json)
Hash identifier:          pgSFp2vL5VJCtHXCHSvROt6Zk9PjQ3vWk/21WlGBZ/4=
Subject key identifier:   D2:D9:C6:80:F2:E6:0A:58:04:7F:4C:B4:F6:99:3F:1F:4F:49:AF:66
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDDCCC0E546B20ACAA5F78480
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b98f495-2282-3b63-9bd9-c8851b4212b3.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        68.106.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:c0:e5:46:b2:0a:ca:a5:f7:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=8719fda8-6566-4148-943a-969bfd217993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a5:50:47:9b:e1:bd:55:c8:b5:b3:49:6c:ad:
                    2a:b1:3d:37:c8:f1:9f:d6:1d:ac:0a:e6:7a:0b:d9:
                    65:b8:8c:f3:89:fa:5d:05:d2:01:58:05:08:91:1a:
                    93:8e:1d:e7:9e:b6:b9:29:a5:6d:5f:71:0a:ce:ba:
                    f8:ce:12:7d:0d:5d:00:a1:45:b2:18:0a:07:7b:ed:
                    f4:e2:c8:42:d5:0f:b0:1c:82:eb:33:e8:05:79:cb:
                    8d:2e:70:96:9b:c5:49:b9:dd:a4:e2:44:ca:96:5f:
                    f0:56:6c:cf:3a:0c:4a:62:3e:4b:e7:1e:52:72:60:
                    b7:27:73:8c:5b:64:c8:80:2c:03:f9:7c:3b:65:aa:
                    3d:84:c7:c0:95:00:5c:65:c7:c2:96:82:86:b7:c0:
                    73:42:8d:05:83:4a:70:aa:68:91:f8:63:2c:db:2e:
                    e4:03:ee:02:94:ee:49:42:10:0a:12:cf:39:cd:b0:
                    43:ac:57:cf:8f:ce:97:9b:12:56:73:b7:f5:6a:5d:
                    71:ac:9a:1e:d3:4b:85:14:a0:79:56:ee:54:95:1c:
                    cc:df:e3:f8:a2:c7:17:b4:92:8f:59:fb:95:3d:01:
                    bf:ec:84:35:24:81:c7:64:ac:c2:2d:17:5a:3c:41:
                    3d:bb:91:8d:97:6c:a2:31:dc:a3:d9:93:6c:35:02:
                    f5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D9:C6:80:F2:E6:0A:58:04:7F:4C:B4:F6:99:3F:1F:4F:49:AF:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2b98f495-2282-3b63-9bd9-c8851b4212b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.106.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:cd:ca:d8:fc:63:dd:95:d2:c4:c4:b1:d2:7f:4c:85:7b:b0:
         1f:17:03:fc:37:93:dc:ed:e0:ac:24:87:81:92:be:7c:3f:c6:
         90:88:16:a0:0d:50:20:37:65:5a:fb:c6:92:38:8f:d8:90:23:
         41:25:47:1c:80:56:0e:22:e7:6c:45:a8:33:56:18:f7:ff:e7:
         22:60:57:3c:03:73:fd:89:f2:45:3c:03:f2:b4:97:e4:65:3a:
         3e:7f:da:78:89:97:83:f5:74:3d:e6:c0:7a:59:99:5c:ce:df:
         6c:ee:01:02:ca:df:8f:75:5f:0f:9c:a1:04:96:15:f5:b2:33:
         20:65:a3:01:cc:c1:46:eb:48:01:51:c3:61:5c:36:5c:33:3b:
         92:5f:d5:0e:f8:68:57:b2:16:c1:57:4d:45:be:eb:ba:c4:87:
         e0:96:d3:e5:54:50:5f:96:86:64:bd:ac:24:c9:d3:e8:f3:df:
         5a:55:11:41:9b:f0:63:d2:ba:f0:7a:8a:3a:d9:0a:47:5a:d8:
         ae:20:ab:80:5c:31:92:d7:02:d0:07:a0:5a:e4:e6:cc:9a:6d:
         a6:9f:5b:cc:0d:72:1e:a9:1c:d5:f8:0b:34:8f:29:c3:b5:f3:
         c2:22:86:d9:0e:75:1c:95:1e:a5:39:69:62:9a:83:7f:c6:de:
         ab:7d:70:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:30:35 2026 by rpki-client