Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37c1d4bd-28e9-331f-aed3-4218c4b2030e.roa
File:                     37c1d4bd-28e9-331f-aed3-4218c4b2030e.roa (raw, json)
Hash identifier:          hAxeZUPOvRgiqe/tBf5RySf+Bjy+YOVvNBegLOHiXU8=
Subject key identifier:   12:24:CD:50:1A:1B:CF:E1:0D:81:D8:51:CA:57:6D:41:F6:6F:D1:B3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DF2108CEB0C3622FC59581900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37c1d4bd-28e9-331f-aed3-4218c4b2030e.roa
Signing time:             Mon 25 May 2026 01:00:24 +0000
ROA not before:           Mon 25 May 2026 01:00:24 +0000
ROA not after:            Sun 23 Aug 2026 01:00:24 +0000
asID:                     22773
IP address blocks:        68.106.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:f2:10:8c:eb:0c:36:22:fc:59:58:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May 25 01:00:24 2026 GMT
            Not After : Aug 23 01:00:24 2026 GMT
        Subject: CN=f82f7049-61ef-4703-b0c1-3a065e844bb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b3:cc:a4:ec:70:1a:5a:cc:fd:8c:6d:5d:b5:
                    92:1b:dd:37:d9:a4:d4:ec:f1:f5:06:78:13:07:ca:
                    53:ef:fd:d0:a3:ef:96:67:5f:87:b7:b3:2f:36:51:
                    f7:9c:fc:e8:29:12:3f:80:22:d0:4e:d1:c6:f2:73:
                    f5:e0:93:56:38:0c:a5:6a:1f:b9:f2:2b:47:3e:9d:
                    58:c8:7d:cc:a9:fb:92:4b:0a:7a:a2:5a:98:ad:91:
                    b8:f5:48:49:e9:8a:37:95:ac:98:fa:c5:11:1f:65:
                    f8:11:e0:09:3d:d4:74:f2:15:fe:42:a6:d7:cd:c7:
                    38:8a:7a:ae:10:5a:fe:9a:b0:0c:fc:7f:6b:ce:73:
                    84:a4:88:e2:ac:21:df:7b:ae:74:27:64:7a:67:c1:
                    14:b4:9d:70:96:7b:e1:39:84:d0:e7:b6:e6:5f:66:
                    7a:ac:75:1c:2e:5d:3d:b5:0b:97:d0:6b:ec:16:3a:
                    a9:09:44:15:4d:c1:55:c2:6e:1f:d1:3d:f9:a0:94:
                    d9:18:9e:06:85:d9:8e:fc:ad:89:1c:51:bb:6c:25:
                    fd:77:ab:05:81:d0:36:5e:28:56:49:ab:03:2a:a8:
                    ed:4b:f7:da:29:d0:17:10:d5:83:9f:a3:bb:9e:83:
                    da:94:36:71:26:25:84:1f:a7:41:89:7f:ad:bd:26:
                    8a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:24:CD:50:1A:1B:CF:E1:0D:81:D8:51:CA:57:6D:41:F6:6F:D1:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/37c1d4bd-28e9-331f-aed3-4218c4b2030e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.106.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:c8:76:29:2e:be:b5:68:e0:6e:f1:a8:a1:22:e7:35:21:e0:
         e4:06:70:a0:80:88:36:c7:20:82:4b:21:6e:c7:bf:fc:5e:37:
         eb:5d:8e:85:8e:f7:e0:51:ac:5d:ec:ca:8b:f7:b4:08:44:5f:
         01:02:41:fb:a4:c9:f4:b8:ea:a1:b1:0d:08:50:bd:ab:74:c0:
         45:03:1e:d4:18:5e:56:9d:b1:47:38:2c:d8:b2:4a:a3:ef:dc:
         f2:2b:09:52:75:c8:61:65:ae:62:cb:7c:0d:dc:67:b8:9b:c9:
         1b:14:4e:88:b1:9c:14:7b:54:6a:74:6f:ae:ae:22:be:30:da:
         13:92:da:67:be:d0:53:0c:70:d9:46:ec:79:fa:dc:a4:5c:b6:
         11:91:4d:c7:94:42:12:38:88:ff:5f:f2:4b:a8:1b:de:70:ed:
         9a:d0:9c:2b:71:e7:ee:32:33:15:d1:12:2c:a2:e5:70:e2:aa:
         f0:b0:70:0b:2b:8b:83:98:2b:70:8c:90:d1:f6:54:32:55:fa:
         66:66:5e:d0:77:4a:aa:f6:09:e6:96:12:ce:e7:c4:20:1b:0c:
         67:64:c9:21:aa:2e:70:2d:be:af:f1:6d:95:d1:0b:ce:b6:34:
         50:0d:69:ac:67:b2:04:67:9b:f0:eb:e4:b0:07:17:fa:c3:be:
         3e:2b:ba:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:04:00 2026 by rpki-client