Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54af94f4-f235-3861-9700-47e4969aeceb.roa
File:                     54af94f4-f235-3861-9700-47e4969aeceb.roa (raw, json)
Hash identifier:          3fkrkk/MQb2EH26LuX0HOXgfc+LNzbWkSAi5crJ0RIQ=
Subject key identifier:   C7:62:87:E0:68:95:11:DE:05:9F:FC:63:2D:06:43:E2:F4:75:29:08
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CE0975E5B95696B11FAC9A5D0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54af94f4-f235-3861-9700-47e4969aeceb.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        68.104.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:5e:5b:95:69:6b:11:fa:c9:a5:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=bbc1bf3c-d94e-4eb7-b1ff-3d239edbc136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:39:23:c1:68:a0:4d:fe:0e:b6:32:e9:4c:14:
                    4b:40:73:73:9e:2d:22:a7:f7:19:d3:27:73:e2:0f:
                    8e:cf:7f:9e:f3:60:89:c0:ed:ed:b6:d3:09:90:1d:
                    81:47:f1:8d:4c:a8:6c:7e:37:e9:11:78:87:c0:b8:
                    6e:72:40:9c:ac:28:7e:69:5f:81:48:c8:3a:c7:ea:
                    64:3f:dd:4c:0e:d4:5b:b4:85:d7:93:96:ec:a7:66:
                    8e:79:0c:70:76:d3:34:80:25:35:3d:81:54:ae:f1:
                    3d:c9:ce:01:99:88:15:92:d4:8a:08:79:4f:7b:b3:
                    26:18:6a:c2:a6:6b:28:8b:fd:73:d6:43:57:26:07:
                    d4:ae:33:a5:03:64:b3:b5:ba:2a:e9:09:ce:44:c9:
                    b4:c6:df:0e:23:5e:45:2f:01:91:5b:63:f9:c7:fd:
                    b9:29:16:27:c4:df:62:af:2d:ba:cb:cc:73:79:d3:
                    16:92:ee:e0:f4:80:74:c1:b8:5c:22:be:e7:7b:73:
                    f6:a5:4e:b1:e8:05:02:54:d6:ec:93:1d:a0:68:3e:
                    61:20:4d:1c:92:ee:b9:5e:8f:b9:8a:9a:72:34:6e:
                    4c:2a:ed:f3:d7:d5:a3:d5:cd:bb:cf:b2:92:49:3b:
                    6f:63:1f:6c:a7:6d:59:b9:b6:62:20:97:32:a6:29:
                    c3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:62:87:E0:68:95:11:DE:05:9F:FC:63:2D:06:43:E2:F4:75:29:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/54af94f4-f235-3861-9700-47e4969aeceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.104.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:ed:70:c0:6a:85:6c:f5:5f:ad:65:43:37:51:89:68:2c:ae:
         ca:4b:34:f8:36:24:e1:e7:12:57:01:fd:d1:78:65:c8:76:ef:
         e9:5b:b9:84:e1:15:51:cb:23:bf:b0:c2:21:1c:37:35:d3:91:
         a3:c3:88:56:a1:18:88:99:b5:9e:b1:49:43:c3:f9:3f:0a:f7:
         63:39:4c:68:6b:7a:1f:f0:41:0c:19:54:29:b8:0a:f7:1f:a5:
         45:75:07:04:c2:58:c9:3c:eb:d0:6d:eb:a7:a5:c2:b1:03:b6:
         a0:9b:d3:5d:35:9b:e5:2e:2d:cd:b7:dd:87:a6:1c:82:37:cd:
         d5:d4:03:72:3c:2c:91:3a:4d:40:62:3f:28:f2:90:16:a8:98:
         8c:c0:8b:e3:2f:c3:23:17:24:20:6f:61:0b:21:27:95:41:c7:
         77:96:26:6e:f6:1f:0e:16:06:13:85:56:5e:df:69:ac:aa:5f:
         74:f2:79:1a:66:c6:47:cb:bd:22:79:b1:f5:07:f8:22:a8:7f:
         f8:6a:1a:58:e8:d8:7c:2b:53:de:b9:44:15:c0:5a:36:58:ad:
         95:4c:ad:bc:2b:fc:90:2a:34:40:8a:8e:6f:4e:c0:2d:ab:f6:
         79:ac:b4:d0:bf:b6:fc:65:72:e4:d4:10:a7:cb:15:32:f3:c0:
         c6:4a:c1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:36:41 2026 by rpki-client