Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b4295b4-f633-3e66-a83e-fdef307d4ecf.roa
File:                     4b4295b4-f633-3e66-a83e-fdef307d4ecf.roa (raw, json)
Hash identifier:          GCl8tNJqsXjMo+I7UsYjqGcrUcw1s1UuACXRscFOwm0=
Subject key identifier:   2C:92:EE:C4:7C:88:90:8E:FF:E8:8E:E6:0E:60:A5:57:75:49:39:B1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF32B9B87373C8FA81F3A680
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b4295b4-f633-3e66-a83e-fdef307d4ecf.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        72.200.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:b9:b8:73:73:c8:fa:81:f3:a6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=e7b430b8-ef79-430c-ae1d-f982daf2bb4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:22:00:db:ab:5f:20:c1:82:60:7d:3d:00:71:
                    ad:72:11:f3:95:6c:ff:e7:72:e1:c9:ec:6a:5b:13:
                    48:62:2d:7a:19:65:a7:0e:cf:36:24:8c:8e:88:f2:
                    67:c9:cd:51:66:ec:f8:da:7c:ba:ec:8a:1d:da:a2:
                    33:2e:cf:8a:f9:c9:27:a5:27:d4:6d:7b:42:1b:98:
                    e5:41:58:ec:48:fd:d7:80:60:af:17:d4:d2:09:2b:
                    99:e7:9a:a7:b1:d3:05:1c:2c:56:7e:0e:af:78:cb:
                    bc:d2:bb:49:42:55:b0:54:e7:74:d2:fc:b0:eb:f3:
                    5e:fc:ab:b6:81:6a:49:71:7f:33:bf:ac:e5:88:17:
                    13:ab:07:b9:cd:e2:bb:f6:25:f4:c4:b7:ba:2a:a6:
                    36:57:dd:76:57:3a:2e:2c:93:12:95:a1:39:41:a5:
                    a3:b6:ae:b4:3b:a9:c7:61:c9:11:23:af:9d:93:36:
                    ec:d6:3b:c4:41:7a:f7:2e:3e:18:a4:f5:82:6f:f4:
                    a8:5f:00:42:88:46:51:73:58:e0:d3:82:3f:e0:7b:
                    88:69:4d:a8:68:71:92:67:4d:62:61:9a:35:e2:c5:
                    ed:82:e4:da:eb:7b:d6:81:48:15:5d:be:77:c3:f3:
                    c1:f0:9a:af:0a:06:42:67:7a:e8:27:1a:e8:41:d4:
                    ed:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:92:EE:C4:7C:88:90:8E:FF:E8:8E:E6:0E:60:A5:57:75:49:39:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4b4295b4-f633-3e66-a83e-fdef307d4ecf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.200.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:90:c4:2d:fa:28:86:56:22:ee:de:51:fd:10:4f:3f:76:be:
         08:ac:70:1c:a5:e9:30:8a:c2:81:92:fb:3c:2f:35:6e:4c:f3:
         52:c2:2f:fc:af:00:7a:93:31:ac:e6:6b:5d:c4:e0:d7:e0:fb:
         fb:d2:d4:ec:13:f5:64:de:8a:44:f6:6d:5d:23:6c:b4:ca:20:
         aa:11:23:a9:de:26:77:7c:16:af:d7:da:f3:69:eb:38:65:2e:
         4e:3c:93:24:be:55:63:eb:d8:7b:16:8f:c5:e4:1d:9e:78:51:
         9d:72:e4:4d:a5:e7:5a:99:72:dc:44:d6:60:79:8a:75:32:a2:
         37:c8:86:c0:20:5a:92:de:33:d5:21:e7:f6:1c:9e:c5:7a:f1:
         54:bb:80:7f:a0:ac:b0:72:18:fb:dd:ca:da:06:40:db:d3:02:
         73:58:d2:c8:9b:a3:60:e0:fb:76:6a:10:a0:b2:4c:d1:fc:7f:
         32:52:4d:93:8c:b3:de:25:55:ef:6c:f7:2c:d6:e0:5b:c0:44:
         9f:ec:35:44:48:2a:1c:b1:84:50:82:5b:8f:50:40:48:6a:13:
         27:c8:d9:06:0e:75:49:51:fe:88:5e:81:a8:86:9f:d7:cb:02:
         b5:19:cf:5a:79:01:c4:22:46:3c:e7:3e:ad:47:ee:35:08:d9:
         b8:38:4c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:11 2026 by rpki-client