Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31ee88bc-f153-3fa8-b9b6-7fe23e1494d8.roa
File:                     31ee88bc-f153-3fa8-b9b6-7fe23e1494d8.roa (raw, json)
Hash identifier:          Cw1chc1QLHyN0V5/Uy/TKoHeGHl3ZHvRZpJ0UCplNXA=
Subject key identifier:   63:75:27:4A:FB:04:D0:32:8F:91:BC:7C:64:9C:7C:4E:EB:C1:3A:26
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D667A51C8C3F9EA8364AEC800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31ee88bc-f153-3fa8-b9b6-7fe23e1494d8.roa
Signing time:             Sun 05 Apr 2026 01:00:24 +0000
ROA not before:           Sun 05 Apr 2026 01:00:24 +0000
ROA not after:            Sat 04 Jul 2026 01:00:24 +0000
asID:                     22773
IP address blocks:        24.248.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:66:7a:51:c8:c3:f9:ea:83:64:ae:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr  5 01:00:24 2026 GMT
            Not After : Jul  4 01:00:24 2026 GMT
        Subject: CN=ab1e573e-abc7-4ff7-ada6-2c55f81b1c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3c:b2:f7:79:1a:d6:14:ef:03:52:1e:43:4e:
                    c7:02:55:c5:40:68:bb:2c:96:a9:4b:4f:c3:f1:c6:
                    ed:6a:c9:f2:32:89:08:ca:a7:25:5a:59:ef:ba:f7:
                    d3:64:08:64:79:ab:4b:18:f1:80:12:47:72:2f:7f:
                    ce:6d:b1:d2:9d:a3:fe:74:22:03:2a:e6:f1:00:7f:
                    6d:2c:d3:f4:c1:7c:16:30:7b:84:32:2a:ea:28:f3:
                    a1:26:96:62:f8:83:d4:06:06:df:6c:29:5c:2a:19:
                    25:6c:d2:2e:80:3f:37:27:4f:be:de:2d:ad:f8:bb:
                    cb:a4:df:43:96:8d:01:d7:e7:a3:24:cb:34:22:91:
                    44:d5:37:20:b7:94:c5:f6:e7:f0:54:48:44:18:a8:
                    00:b4:f2:71:52:b5:46:8a:0e:14:f0:c9:66:45:79:
                    91:e6:7f:80:53:6b:ab:89:50:94:de:9e:50:3a:aa:
                    7d:fe:b4:1f:21:81:e8:df:5f:48:df:dc:71:45:f7:
                    02:65:c1:7b:d2:43:6b:88:23:66:f1:2e:5a:46:51:
                    5f:c2:e0:18:5a:d8:1b:ff:2f:9a:a2:1c:2a:07:6e:
                    58:32:8d:ff:67:94:80:5b:77:a2:11:69:3a:07:27:
                    0b:5e:22:35:91:c9:8f:e1:19:a3:4e:c1:ad:20:9a:
                    7a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:75:27:4A:FB:04:D0:32:8F:91:BC:7C:64:9C:7C:4E:EB:C1:3A:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/31ee88bc-f153-3fa8-b9b6-7fe23e1494d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.248.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:93:d0:66:b2:55:03:10:27:b5:04:42:a3:6f:9c:f8:7f:8f:
         96:c9:57:14:7c:11:a5:c8:21:32:ee:23:87:02:b8:91:d0:4e:
         a4:db:12:59:05:a9:53:84:60:fe:8a:f2:58:55:be:04:11:90:
         70:8f:95:eb:05:48:fe:47:d3:29:98:61:9d:01:06:a9:01:48:
         0d:fc:f3:ed:f4:36:e9:02:dd:70:e8:ec:98:cb:24:ad:89:7f:
         8a:ce:54:d3:43:0e:f9:9f:cd:f6:4f:c7:e7:1c:40:b4:e9:3c:
         36:22:62:f8:9d:d6:ca:61:23:57:db:ca:22:67:31:a0:00:07:
         92:c1:e0:f9:58:df:42:ec:ff:c4:1e:da:4d:d0:4c:0f:fc:7f:
         5e:b6:63:70:cd:48:a4:e4:da:45:12:ec:a0:2e:19:45:ee:98:
         36:1a:b8:53:91:c0:9d:94:cd:38:51:a7:68:bc:27:f4:fa:94:
         39:d0:05:c1:e4:39:4e:32:69:4f:7f:de:86:f0:b5:c1:a6:d1:
         39:84:30:31:ab:bd:a8:6e:9a:61:3b:5b:30:c4:30:b6:44:e6:
         e5:0e:51:42:3a:63:e8:6a:bc:29:92:a2:53:dd:22:5f:cc:21:
         79:a3:f4:4e:a4:04:cd:7a:ac:0e:67:4c:59:18:2f:5f:84:97:
         7e:6c:05:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1melHIw/nqg2SuyAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDQwNTAxMDAyNFoXDTI2MDcwNDAxMDAyNFowLzEtMCsGA1UEAxMk
YWIxZTU3M2UtYWJjNy00ZmY3LWFkYTYtMmM1NWY4MWIxYzlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDyy93ka1hTvA1IeQ07HAlXFQGi7LJapS0/D
8cbtasnyMokIyqclWlnvuvfTZAhkeatLGPGAEkdyL3/ObbHSnaP+dCIDKubxAH9t
LNP0wXwWMHuEMirqKPOhJpZi+IPUBgbfbClcKhklbNIugD83J0++3i2t+LvLpN9D
lo0B1+ejJMs0IpFE1Tcgt5TF9ufwVEhEGKgAtPJxUrVGig4U8MlmRXmR5n+AU2ur
iVCU3p5QOqp9/rQfIYHo319I39xxRfcCZcF70kNriCNm8S5aRlFfwuAYWtgb/y+a
ohwqB25YMo3/Z5SAW3eiEWk6BycLXiI1kcmP4RmjTsGtIJp6BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGN1J0r7BNAyj5G8fGScfE7rwTomMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzFlZTg4YmMtZjE1My0z
ZmE4LWI5YjYtN2ZlMjNlMTQ5NGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCGPg0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWT0GayVQMQJ7UEQqNvnPh/j5bJVxR8EaXIITLuI4cCuJHQTqTbElkF
qVOEYP6K8lhVvgQRkHCPlesFSP5H0ymYYZ0BBqkBSA388+30NukC3XDo7JjLJK2J
f4rOVNNDDvmfzfZPx+ccQLTpPDYiYvid1sphI1fbyiJnMaAAB5LB4PlY30Ls/8Qe
2k3QTA/8f162Y3DNSKTk2kUS7KAuGUXumDYauFORwJ2UzThRp2i8J/T6lDnQBcHk
OU4yaU9/3obwtcGm0TmEMDGrvahummE7WzDEMLZE5uUOUUI6Y+hqvCmSolPdIl/M
IXmj9E6kBM16rA5nTFkYL1+El35sBSA=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:00:28 2026 by rpki-client