Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/466a821f-4e9a-37e6-b3ad-bd2b8db21017.roa
File:                     466a821f-4e9a-37e6-b3ad-bd2b8db21017.roa (raw, json)
Hash identifier:          9qgYMQaVivpsGh9A+WviWS8SBai7z1wSpU1bW88y2mw=
Subject key identifier:   D1:32:72:79:D9:27:32:CB:F1:CE:E8:F7:28:B0:67:09:0B:51:E7:80
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4277D81EB4FD205303815800
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/466a821f-4e9a-37e6-b3ad-bd2b8db21017.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        72.201.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:77:d8:1e:b4:fd:20:53:03:81:58:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=253a81c4-11f5-4295-a682-7a0f25863947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:3f:20:85:84:eb:05:2e:6b:86:74:90:8e:aa:
                    49:21:02:1b:88:56:8a:7f:74:74:d6:d5:6c:a6:f3:
                    ec:c4:0c:e2:82:b0:89:82:dc:29:d4:b7:3c:bc:1f:
                    8f:37:c9:d3:89:7b:7a:c3:5e:bb:80:aa:61:b9:ce:
                    94:fd:93:cf:af:a5:21:49:37:7e:87:c3:33:f4:66:
                    b8:9c:ab:71:b1:1a:da:61:b8:bc:b9:9f:dd:11:e0:
                    0f:6f:1d:68:7b:4e:e1:37:48:9f:31:63:05:f3:1f:
                    2b:78:cc:50:6f:6a:dd:74:28:1b:92:17:5d:4e:db:
                    42:8d:f5:b1:fb:1f:f5:57:2c:71:21:6b:49:70:19:
                    55:55:ec:dc:96:fa:43:97:98:7c:05:47:1d:2c:26:
                    09:8d:e1:a8:b6:f1:53:1d:56:17:5d:66:c2:ca:b4:
                    39:85:c8:e9:ce:dc:f4:10:3b:d7:d2:6d:ca:d5:f3:
                    91:70:f7:3f:b7:bc:c6:91:a8:cc:7b:2d:00:ba:c7:
                    5f:52:81:3d:9e:c6:cf:73:ed:0e:7f:be:8a:0e:24:
                    ff:d7:41:c0:ea:11:79:e8:57:31:f5:b9:df:a4:70:
                    97:1a:23:a4:48:b1:6c:dc:7a:d7:7c:fd:d6:7a:6a:
                    61:3b:0c:81:a0:59:dc:81:ff:71:ae:00:74:4f:a0:
                    0e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:32:72:79:D9:27:32:CB:F1:CE:E8:F7:28:B0:67:09:0B:51:E7:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/466a821f-4e9a-37e6-b3ad-bd2b8db21017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.201.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:03:91:a7:c3:af:7e:49:07:42:4e:a2:01:73:39:02:cd:d1:
         c7:55:eb:c2:fa:ce:d7:8d:3f:74:46:2b:f7:83:ee:b2:3f:08:
         46:31:1c:b5:21:91:5c:30:35:a6:48:92:ef:99:ef:65:16:04:
         61:86:75:92:11:37:3a:d5:52:56:45:a9:9b:56:2c:37:9d:34:
         94:58:cc:8b:44:d8:2f:b7:ba:fb:67:1c:47:00:59:05:92:7d:
         02:16:0e:02:1a:e9:58:40:d9:a0:6f:d7:fe:f6:0c:a1:b6:3e:
         78:6b:bd:b3:91:6f:96:70:96:77:85:dc:27:7f:8c:16:54:f4:
         39:42:19:4d:7a:01:5b:5e:7c:c4:2d:3b:b1:ff:e7:03:e7:cc:
         4b:40:7b:10:f8:5b:f5:9c:4a:1a:c4:d1:ee:80:38:cf:97:bf:
         f5:d0:c4:2f:a3:d2:a9:b8:75:ee:90:bb:a2:52:fe:ed:2c:47:
         09:58:5e:33:4e:ce:9d:4f:16:22:a4:1d:87:46:85:e3:66:47:
         9d:4d:45:8c:00:88:78:46:2f:0b:8d:35:27:20:dc:fc:c9:0e:
         54:b9:d1:d4:06:c5:09:59:67:5b:c9:d7:10:a0:ce:41:99:c3:
         08:01:9b:27:cf:57:b1:6e:4a:ad:b0:e6:8e:3c:36:ab:ff:69:
         9d:40:89:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:57:39 2026 by rpki-client