Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c3949ac-f619-3e53-ac3e-5ea5f12917d8.roa
File:                     4c3949ac-f619-3e53-ac3e-5ea5f12917d8.roa (raw, json)
Hash identifier:          6FXHrojbdRwgsLdbVvJzFzyD43i9R93ZbuDqnO7oQBo=
Subject key identifier:   CB:F5:37:E0:E0:34:BF:7F:7B:69:B9:DD:C5:EF:7E:CF:02:B9:CD:6B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E15E452DF15727B7924610E80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c3949ac-f619-3e53-ac3e-5ea5f12917d8.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     22773
IP address blocks:        24.253.160.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:52:df:15:72:7b:79:24:61:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=97bd9994-9b98-457d-85ec-5247728d2f73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4b:4a:11:88:01:0f:d8:06:d9:7e:b1:ee:a5:
                    99:75:ff:45:11:ba:f2:b4:09:8c:e5:4e:28:83:57:
                    5e:32:1d:71:34:90:45:1c:57:01:3f:97:f3:8f:8f:
                    de:45:39:3c:08:01:31:76:70:ac:11:e4:c1:89:60:
                    dd:c3:7d:ae:66:b5:27:5d:93:aa:ab:e9:84:27:44:
                    50:dd:7a:a3:09:c7:ab:71:17:1c:7e:24:51:b5:8e:
                    ee:85:ea:89:92:21:d1:c6:ae:a2:2a:70:80:1a:7a:
                    fd:83:a3:c7:08:9a:65:f4:64:5e:da:46:5a:aa:80:
                    a6:52:90:e0:4a:84:81:b1:82:81:fe:f0:0b:ce:df:
                    9e:35:15:82:a4:67:f2:a6:38:43:2f:ae:99:d8:0b:
                    5b:88:96:8b:da:a8:75:0a:ca:59:cb:a4:27:fa:25:
                    9e:ed:70:d0:c0:00:e2:c6:7e:eb:1a:2f:60:a7:b5:
                    7a:a2:64:40:b0:1f:5a:30:ae:ef:e7:47:58:f7:4c:
                    bf:9c:01:2e:fd:91:e3:e6:cd:29:91:ee:b2:f1:79:
                    bb:76:00:4a:fa:b9:68:98:44:8e:a2:a2:f6:15:1a:
                    91:27:e9:5f:a6:04:7b:57:2f:9b:62:09:f5:f9:7d:
                    1d:c5:21:9c:0b:10:59:a4:d2:f2:35:c1:cc:cb:1e:
                    d0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F5:37:E0:E0:34:BF:7F:7B:69:B9:DD:C5:EF:7E:CF:02:B9:CD:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4c3949ac-f619-3e53-ac3e-5ea5f12917d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.253.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:c7:ab:f1:79:6e:c8:b5:89:a5:e1:41:94:bb:57:f8:dc:4a:
         2c:e5:a2:b6:2e:0f:b2:50:01:85:51:c4:b1:86:5c:cb:3d:b2:
         ad:44:8e:03:ef:b9:88:0c:81:85:be:ff:5a:ff:9d:12:38:5a:
         2c:bf:75:7f:eb:70:3d:e3:4f:6a:0c:83:24:be:5c:9b:81:d8:
         29:97:97:b8:d6:61:7e:41:e5:32:d7:63:5a:e3:85:7f:5a:6f:
         92:97:23:b2:b1:3e:d3:07:8a:22:bc:a4:e5:cd:1e:ff:07:5c:
         1b:36:d4:ed:2c:4d:a9:d7:e4:d2:73:0f:05:51:04:11:e2:5e:
         bc:e4:bf:48:e4:77:45:30:c5:2c:42:fc:52:c9:f6:19:e2:d6:
         33:08:3d:69:f6:28:c9:cc:92:22:93:1a:ac:ce:6a:56:4d:c3:
         d4:8a:4c:61:87:66:9a:bd:e2:ba:71:d2:de:6b:96:87:37:de:
         99:f1:99:d7:7a:66:2a:f6:07:72:01:a3:07:72:91:a0:9d:2c:
         d6:ef:a2:a1:c7:1e:d1:69:c8:a8:bf:e5:05:98:70:d6:8d:c0:
         1b:21:f1:5f:32:2c:b5:aa:ae:bd:17:ec:6d:47:6c:f2:3e:fd:
         d9:0f:4b:a0:09:a3:bd:16:c3:2c:73:5d:7b:f2:95:c0:bd:5b:
         32:3a:a8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:53:16 2026 by rpki-client