Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f623ec8-4c01-3d1b-8554-4c31df56575f.roa
File:                     4f623ec8-4c01-3d1b-8554-4c31df56575f.roa (raw, json)
Hash identifier:          XjAV+BKuZqKhnZUC6NNI0gQig0IygtoibaQMPy+qMuo=
Subject key identifier:   41:2F:46:A1:B1:B4:AA:27:94:9E:47:D1:A2:87:24:20:30:82:9A:C3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CE097A398256C196E7BDF5200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f623ec8-4c01-3d1b-8554-4c31df56575f.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        68.224.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:a3:98:25:6c:19:6e:7b:df:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=69af2c16-ddfa-41bd-8302-7bd22304b790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ee:ca:83:e9:ad:fc:ad:07:10:80:03:01:cf:
                    e2:d6:94:d9:d8:62:d0:7b:18:40:23:16:16:22:db:
                    28:4c:c7:01:65:c6:e9:43:59:83:2e:bc:32:ee:c7:
                    f9:1f:a7:21:e6:e6:36:4a:26:92:e5:0e:f4:74:36:
                    da:3c:af:13:ee:9c:f5:ff:ce:76:41:e9:26:46:1b:
                    6d:12:64:29:93:ab:d2:c7:c5:a6:e2:ba:62:8c:73:
                    c0:57:f5:5a:52:ee:e8:a5:87:a5:07:51:eb:39:ed:
                    02:6e:22:08:65:6c:01:0e:46:ac:12:5a:e8:20:08:
                    05:48:4e:39:58:6f:78:51:9f:90:31:31:91:52:77:
                    52:5a:ab:9e:a2:08:09:bf:86:a1:ef:20:19:1d:ba:
                    a0:ff:73:ed:78:99:37:3f:08:fa:df:88:83:e8:43:
                    37:3b:57:98:a7:de:f9:72:83:9f:13:4e:f7:4d:64:
                    5f:04:bf:6f:8b:b8:37:3d:e6:db:83:b3:07:4f:6e:
                    99:ea:ba:d9:8d:49:bf:af:b0:c5:e0:0e:92:54:c5:
                    f4:83:3b:4b:f7:73:fb:b2:14:87:c6:15:ce:99:ca:
                    52:7d:bc:ca:9c:70:27:ec:75:49:67:0f:68:0f:06:
                    0a:73:37:6c:37:16:fc:19:03:7d:c7:4e:de:80:11:
                    be:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2F:46:A1:B1:B4:AA:27:94:9E:47:D1:A2:87:24:20:30:82:9A:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4f623ec8-4c01-3d1b-8554-4c31df56575f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.224.58.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:03:ca:64:d2:6f:9a:5b:0d:c8:1e:39:11:52:d1:5c:c1:d3:
         72:db:8a:fa:5d:28:d8:d9:46:1b:ce:80:49:d4:9a:83:ef:2c:
         f3:d7:e9:f9:d1:5d:58:c6:2d:2c:4b:ed:b5:3c:04:3e:96:7b:
         24:86:52:ef:22:23:cb:f1:ca:f9:11:ae:72:88:aa:38:cb:6a:
         2a:1d:22:e5:d4:6b:57:73:95:3f:76:af:be:ca:c6:35:a2:07:
         ed:3e:e6:a4:1d:54:c9:01:c0:87:97:91:60:14:45:f3:3f:cf:
         78:af:9b:2b:53:43:b5:37:e7:cd:99:49:b9:2a:fe:2a:a3:b8:
         b5:6b:7a:9d:71:bc:2b:26:ed:0a:45:10:bc:61:db:e2:77:f2:
         20:53:81:37:b7:1f:40:7c:bc:e2:4c:5c:af:a6:dd:8f:44:8a:
         c6:77:bc:2e:39:e6:8c:5b:7c:f0:97:91:fa:ce:10:c6:a9:d2:
         0e:63:42:91:c9:2f:82:89:18:26:23:29:da:c8:ad:77:40:77:
         b3:11:06:c3:a0:30:72:5f:90:14:e6:68:32:32:8d:5b:1f:d9:
         38:4a:59:fe:43:c7:53:36:ed:cc:3a:50:13:2b:b6:92:bd:d3:
         30:84:eb:d3:78:eb:91:7d:b9:23:a1:6f:ea:71:8b:86:be:d2:
         50:0d:1f:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:30 2026 by rpki-client