Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/433cf751-2cda-37d4-a903-cb2e4a7eaffa.roa
File:                     433cf751-2cda-37d4-a903-cb2e4a7eaffa.roa (raw, json)
Hash identifier:          HWXL5o2kNXVCoJOMhLqhv8OethjMlNfAkRYamMo/MtQ=
Subject key identifier:   3F:9C:85:D0:4B:04:7B:BB:55:49:2B:F7:77:2C:6F:7F:BE:00:89:F2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E15E44F0EC5579F88578CA7C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/433cf751-2cda-37d4-a903-cb2e4a7eaffa.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     22773
IP address blocks:        68.224.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:4f:0e:c5:57:9f:88:57:8c:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=1b38c92e-baa0-4dc2-8fc8-960dd442b8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b9:45:8b:2c:44:af:3f:a2:37:05:c5:ec:dc:
                    a7:cd:70:9e:8b:81:0f:63:ad:be:1a:bd:b6:96:b5:
                    b0:33:d8:7a:7d:05:b4:b9:f0:db:ec:4b:09:9b:7e:
                    69:45:dd:90:50:b1:d4:45:6d:de:86:b7:17:0c:96:
                    25:f2:40:04:e0:41:f3:1c:c7:3f:18:27:6e:2a:6e:
                    9e:31:23:cc:31:ea:12:68:2c:61:72:a9:81:90:a2:
                    f4:a9:7b:ec:81:ba:29:48:6f:6f:9c:fb:54:c0:81:
                    45:8c:02:ec:24:79:48:e2:07:3d:9e:74:b1:54:50:
                    9b:71:4e:ab:bb:db:5c:44:ca:bc:9c:e0:57:fe:97:
                    b3:d1:c8:e2:92:da:a5:18:97:ab:8e:9a:9f:4c:65:
                    d4:81:a8:87:99:85:f9:93:96:93:1e:6e:80:b0:5a:
                    29:75:27:e3:3f:e0:bf:3a:47:e2:16:6b:9d:1e:a9:
                    15:07:eb:23:d0:e5:60:8d:13:24:19:ea:4d:5a:fa:
                    da:e1:f4:40:5a:c7:c1:07:44:7e:78:63:d4:8f:1b:
                    f6:24:b0:db:61:f0:e6:64:de:7f:98:cc:af:1f:d1:
                    ee:bd:88:05:a2:ab:cc:7e:25:72:fc:03:7d:73:d6:
                    f8:6a:7a:b4:bb:4e:37:98:ad:ca:85:d0:38:6d:49:
                    93:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9C:85:D0:4B:04:7B:BB:55:49:2B:F7:77:2C:6F:7F:BE:00:89:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/433cf751-2cda-37d4-a903-cb2e4a7eaffa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.224.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:eb:36:33:33:ae:e3:91:16:4a:3f:7b:e8:61:f5:23:77:ef:
         67:8c:a5:d2:2d:43:9a:12:54:45:b3:fb:bf:1b:95:b2:9d:25:
         2e:b4:88:67:ae:ee:e4:5e:a9:82:80:20:fe:c2:f0:a2:f3:2f:
         6f:97:1f:d0:ea:35:6e:99:cf:59:65:c9:0e:04:3f:eb:a2:b4:
         02:b0:9c:33:e4:1f:84:96:80:ab:93:91:36:3f:f2:38:8b:a5:
         3a:7d:ad:c9:22:82:9f:aa:0e:04:90:0a:58:3a:24:b7:76:9c:
         fd:f9:f8:54:70:34:45:8f:11:60:d5:dc:31:e3:20:92:c5:7a:
         3d:09:2e:7b:14:d7:23:c1:fd:9a:6c:d3:98:ab:7f:8b:09:6e:
         83:08:ee:71:bc:da:c3:d5:33:cd:08:9c:11:ff:2d:fd:a1:37:
         ec:71:e2:45:af:20:1a:9c:4e:39:eb:72:b5:f3:d8:9c:93:87:
         dc:d9:58:3b:86:0b:07:80:0b:37:b7:4a:62:d7:48:a6:d7:c8:
         2c:65:07:0b:33:1f:c6:74:a8:d3:40:a1:d9:b4:28:81:19:71:
         6e:89:cb:28:d6:f5:44:35:fc:97:2d:3f:0f:54:9a:2f:64:76:
         1f:8a:ad:7e:6b:f4:5a:71:c8:b9:28:dd:01:e9:6a:79:ed:3d:
         81:ec:79:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5E8OxVefiFeMp8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk
MWIzOGM5MmUtYmFhMC00ZGMyLThmYzgtOTYwZGQ0NDJiOGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrlFiyxErz+iNwXF7NynzXCei4EPY62+Gr22
lrWwM9h6fQW0ufDb7EsJm35pRd2QULHURW3ehrcXDJYl8kAE4EHzHMc/GCduKm6e
MSPMMeoSaCxhcqmBkKL0qXvsgbopSG9vnPtUwIFFjALsJHlI4gc9nnSxVFCbcU6r
u9tcRMq8nOBX/pez0cjiktqlGJerjpqfTGXUgaiHmYX5k5aTHm6AsFopdSfjP+C/
OkfiFmudHqkVB+sj0OVgjRMkGepNWvra4fRAWsfBB0R+eGPUjxv2JLDbYfDmZN5/
mMyvH9HuvYgFoqvMfiVy/AN9c9b4anq0u043mK3KhdA4bUmTXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD+chdBLBHu7VUkr93csb3++AInyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNDMzY2Y3NTEtMmNkYS0z
N2Q0LWE5MDMtY2IyZTRhN2VhZmZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBROC4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIrrNjMzruORFko/e+hh9SN372eMpdItQ5oSVEWz+78blbKdJS60iGeu
7uReqYKAIP7C8KLzL2+XH9DqNW6Zz1llyQ4EP+uitAKwnDPkH4SWgKuTkTY/8jiL
pTp9rckigp+qDgSQClg6JLd2nP35+FRwNEWPEWDV3DHjIJLFej0JLnsU1yPB/Zps
05irf4sJboMI7nG82sPVM80InBH/Lf2hN+xx4kWvIBqcTjnrcrXz2JyTh9zZWDuG
CweACze3SmLXSKbXyCxlBwszH8Z0qNNAodm0KIEZcW6JyyjW9UQ1/JctPw9Umi9k
dh+KrX5r9FpxyLko3QHpanntPYHseS8=
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:14 2026 by rpki-client