Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54a7d4dc-e0ba-3640-b8b8-24e0e0b3a682.roa
File:                     54a7d4dc-e0ba-3640-b8b8-24e0e0b3a682.roa (raw, json)
Hash identifier:          lLRx0JsYbnu3u9XIL1HSk4OpMFdOvLktoCL20VhMWUk=
Subject key identifier:   E9:78:E4:88:72:C2:0F:01:DD:20:CA:8F:B2:89:80:29:20:D1:00:A8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E9EAFF80C31E06C140F891278
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54a7d4dc-e0ba-3640-b8b8-24e0e0b3a682.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     22773
IP address blocks:        68.231.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:af:f8:0c:31:e0:6c:14:0f:89:12:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=4a77bbb1-2bdb-440a-a450-596f0a27f582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e5:78:78:c8:e4:17:3d:53:78:aa:88:3f:b2:
                    c5:62:96:5d:7f:0f:a3:8a:fa:de:be:c4:41:ca:2f:
                    79:88:f7:f5:ea:e4:d8:f0:d7:f8:39:c3:5d:85:e2:
                    d5:9e:8a:ec:f0:77:84:07:2e:cc:27:60:14:d9:0b:
                    8d:e5:e8:ba:eb:a8:71:d1:a4:38:5f:2c:61:fa:0b:
                    1f:d1:9d:55:33:9a:c5:25:86:99:61:d7:d6:76:96:
                    58:39:5f:a2:41:8f:43:c7:e7:30:13:8d:fd:b8:86:
                    d0:ba:93:4f:57:39:17:94:d4:4a:b0:a5:21:bd:23:
                    39:36:29:30:a4:e2:ae:07:f7:40:b5:9e:60:6c:96:
                    3f:5b:f5:73:42:59:7b:ce:5f:0d:29:36:76:2b:7a:
                    df:35:bd:f8:c4:64:f5:81:51:52:9f:8c:80:44:c9:
                    9c:2c:21:a8:52:d3:43:e9:de:14:90:36:48:b5:3c:
                    03:ea:ca:98:cf:34:19:72:5b:7b:d7:20:a7:e8:cf:
                    fa:f1:c0:8e:6e:df:25:81:f2:8f:ad:f4:0f:e5:12:
                    d7:bb:4b:77:25:a4:84:5c:ec:e4:2d:2e:02:73:36:
                    3d:0e:3f:44:f0:6d:24:47:02:fa:81:2e:cd:de:b3:
                    f2:31:b8:fa:18:ec:2a:d4:f7:6a:10:54:38:d1:9c:
                    ed:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:78:E4:88:72:C2:0F:01:DD:20:CA:8F:B2:89:80:29:20:D1:00:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54a7d4dc-e0ba-3640-b8b8-24e0e0b3a682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.231.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:4e:8a:bc:b6:2e:e7:7b:bd:68:33:ed:3b:be:42:e1:fc:f6:
         01:f3:29:5b:f3:42:d6:de:79:5e:0b:a8:f2:af:3e:bf:8d:b1:
         39:b9:5b:ad:79:a8:27:8e:83:da:e6:65:c7:7f:8e:1a:24:41:
         0a:6d:0a:c1:1d:3b:55:65:32:ed:46:7e:fd:3f:8c:af:67:29:
         dc:4a:5d:a1:38:aa:8d:24:9f:6d:94:6a:de:ba:68:71:fb:9f:
         e8:17:8f:85:9c:a2:65:f9:ba:8d:ec:a7:13:2f:9b:d1:ca:27:
         33:5b:10:98:0c:be:5e:8f:92:4a:b7:08:b2:cf:7a:1d:d6:10:
         57:fc:4a:ea:ef:03:81:55:27:cb:b6:b6:e2:3b:56:93:de:a2:
         65:a6:5b:99:ea:87:54:ff:32:28:2c:00:87:49:35:df:f8:e4:
         93:b0:d3:f1:4b:9f:bd:f1:a4:19:83:75:04:8e:4e:a2:82:fc:
         9a:50:b8:4e:cb:cf:9e:17:02:e6:4c:1f:b5:17:0f:a4:37:05:
         21:df:08:86:50:5b:f6:af:d1:9c:06:2e:fd:ae:b9:83:16:ca:
         73:9f:79:77:c9:e5:87:70:01:d7:1c:d8:84:3b:c1:8f:73:1d:
         46:7e:8a:c9:ec:a5:d7:98:73:ef:4d:00:52:0d:39:23:79:89:
         9d:af:84:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:27:18 2026 by rpki-client