Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/45e38969-18c2-32c0-bcb2-1e6b440b03c8.roa
File:                     45e38969-18c2-32c0-bcb2-1e6b440b03c8.roa (raw, json)
Hash identifier:          GpuJlZ9w7awa27mZvti9j5rL2iRd42sAyw2ArRVjjQw=
Subject key identifier:   0B:48:81:3F:7B:F9:28:03:83:6E:C0:4E:59:EB:43:C1:42:70:98:C2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E15E45A5605FF23D9DE45DB80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/45e38969-18c2-32c0-bcb2-1e6b440b03c8.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     22773
IP address blocks:        68.10.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:5a:56:05:ff:23:d9:de:45:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=a9716a3a-6773-4bb7-973b-3efa105945ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:98:34:2d:41:26:53:50:56:9c:f1:2f:16:46:
                    bd:27:89:03:93:80:49:7f:1f:bf:5d:8b:e5:ed:ac:
                    77:eb:3e:e3:91:63:cc:79:ed:fe:30:b7:fa:92:b3:
                    3d:37:0e:75:15:e5:cc:6f:c3:6a:02:2b:43:54:5c:
                    73:56:8e:55:17:d9:a1:b0:0c:a2:74:ae:31:0b:37:
                    c6:5a:7e:25:d6:ef:59:7d:49:68:ae:cf:6e:5b:24:
                    d2:51:5c:6e:05:8e:03:d5:ee:69:1b:4b:18:d8:46:
                    20:44:3d:54:13:5c:df:1a:01:ec:2c:4b:2c:e7:c8:
                    78:d9:87:f3:be:95:7a:0e:7f:84:c8:ae:60:bd:01:
                    41:b5:3e:b4:d0:13:a7:87:6e:1c:9a:37:b6:b9:7a:
                    4d:fe:fe:d0:7f:1b:7b:08:bb:ea:20:bd:28:cd:ce:
                    78:02:ca:ae:ca:ef:22:f7:95:9a:61:f9:7e:ee:b7:
                    25:a6:ce:5a:47:a2:43:d5:f6:5a:8a:c0:ed:45:80:
                    19:17:ea:3b:da:dc:ca:6e:44:cd:8f:ef:65:40:7a:
                    ea:6f:6b:15:4f:6f:ae:51:e3:63:b0:e4:71:36:8b:
                    38:3d:6d:9b:cb:dd:17:59:22:34:2d:cf:b0:6a:1a:
                    c9:ee:9f:9b:1c:3c:68:fa:bb:08:67:40:f5:6d:cf:
                    7c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:48:81:3F:7B:F9:28:03:83:6E:C0:4E:59:EB:43:C1:42:70:98:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/45e38969-18c2-32c0-bcb2-1e6b440b03c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.10.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:57:1e:ed:0e:be:ca:77:7f:c3:1a:b9:de:93:c4:70:e2:71:
         ae:5d:43:d0:34:66:2e:81:09:bc:c9:d8:d4:b6:f9:ee:4a:38:
         d4:f8:d8:ec:21:bb:35:52:5f:f8:b4:5e:94:bb:c3:47:98:ba:
         98:e6:94:71:b5:fd:81:3c:e6:69:76:7b:dd:51:32:d5:18:b9:
         56:8d:30:2c:1d:99:19:a4:2c:d1:4f:0a:65:56:9d:56:bf:0b:
         c7:6e:f0:43:91:26:b1:51:2e:ea:93:e2:6e:40:24:91:5d:c9:
         7f:e3:54:1a:ef:69:5a:a1:f9:07:7d:b4:05:10:3e:76:50:44:
         8f:c2:e8:4d:f6:20:86:84:b3:cf:ef:1b:1e:e1:50:ff:4b:35:
         dd:26:3a:ca:97:e8:a9:3e:79:6f:67:a1:39:8b:a2:2c:15:38:
         b4:8d:a2:03:39:2d:f3:7e:60:04:50:2d:94:24:1a:15:71:00:
         ca:b8:e6:7e:14:1a:1d:a5:be:90:89:9e:62:2b:d9:7a:63:ba:
         61:8e:72:bb:78:9a:58:38:58:a5:0a:ce:67:12:09:10:66:8d:
         e8:38:64:4e:be:02:73:20:4d:a3:c7:02:59:95:09:b2:f4:85:
         a3:11:55:6e:be:25:85:55:4d:87:71:39:58:f5:dc:77:6e:7b:
         ed:91:51:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:47:54 2026 by rpki-client