Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/55103f06-a8ff-3a67-a3f3-f44374db2cbc.roa
File:                     55103f06-a8ff-3a67-a3f3-f44374db2cbc.roa (raw, json)
Hash identifier:          CAVrOi3+TAvph+/OJoCVCSKsxUNV4KJmZYJcX86+wR0=
Subject key identifier:   1D:36:4A:D9:57:AA:7D:6F:47:47:6F:68:BC:93:4B:90:E8:CF:DE:55
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDC67E9E5D0E9A60323773980
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/55103f06-a8ff-3a67-a3f3-f44374db2cbc.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        68.3.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:e9:e5:d0:e9:a6:03:23:77:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=b6275c0f-05a1-4d61-9702-606559f8ce1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:2d:9c:ba:18:21:1d:a3:f9:74:5c:bb:2a:
                    59:8b:3c:3f:2e:14:03:ad:49:72:8e:b1:52:bb:b6:
                    af:24:00:0d:10:eb:29:8c:0c:fd:e4:85:ed:01:c9:
                    be:8f:32:29:b3:70:b8:b6:ae:e3:a9:4c:da:a6:a8:
                    f1:c6:b3:1a:f4:71:d2:63:96:de:35:e3:8c:53:5c:
                    9a:22:76:96:c6:49:3e:8e:94:4f:e2:0f:50:f2:34:
                    d8:4c:9e:5c:9f:e3:f0:f9:ea:24:f2:e5:4a:93:3a:
                    7e:2d:3d:28:57:27:19:19:26:82:63:78:87:fd:ab:
                    10:1e:c8:08:16:68:d1:22:30:b1:c3:8f:ee:da:65:
                    03:d6:6f:7a:42:ad:bd:e3:80:28:2a:db:67:2b:f2:
                    42:78:bc:18:e2:e3:6d:c2:c2:06:d6:87:bf:50:b8:
                    31:8c:6a:ba:5e:8d:ff:69:33:d8:72:6f:77:1e:2c:
                    4f:eb:80:54:04:1f:b3:42:3b:9a:37:b2:46:72:b0:
                    20:64:c0:36:be:76:3c:6d:ca:6b:d5:8d:06:b6:a6:
                    5d:de:00:33:8c:93:c3:bb:4e:f6:1c:25:d7:32:13:
                    4e:87:a2:dc:14:a2:04:78:a1:13:b9:7d:51:ea:0c:
                    4c:e3:65:d6:0f:12:ac:e3:c9:3b:74:ad:6f:8e:d7:
                    15:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:36:4A:D9:57:AA:7D:6F:47:47:6F:68:BC:93:4B:90:E8:CF:DE:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/55103f06-a8ff-3a67-a3f3-f44374db2cbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.3.101.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:59:c9:26:c6:23:85:21:cc:ff:7a:7e:37:57:a9:d2:43:b3:
         9d:d9:9b:0e:58:37:85:9c:5e:68:d3:24:be:27:27:73:a7:52:
         fc:6f:d2:dc:56:09:a6:3f:88:a5:36:e7:80:20:4c:81:af:62:
         5a:a1:43:bc:8f:b9:9a:3e:71:d5:8b:cd:49:01:0f:b6:dc:b7:
         1e:5a:b5:3d:49:ed:88:6b:e4:76:3c:a8:07:52:4e:76:ff:b3:
         82:f0:45:48:90:f6:e4:c5:b5:ed:84:b1:30:db:c6:6e:1e:80:
         6e:1e:3e:f4:5a:81:d0:e0:eb:0a:00:bc:0b:83:32:10:d2:63:
         ca:de:53:07:2f:67:7b:90:f6:e4:13:f0:fc:ce:6f:55:00:ff:
         31:e7:07:e4:de:24:50:9d:6a:73:ea:0a:f2:a1:53:07:30:12:
         38:54:69:a9:75:1e:33:c8:45:cc:ad:e3:37:2d:98:b1:2b:64:
         0d:42:f2:7f:06:af:3f:d2:af:f5:0e:89:a2:c9:92:02:61:4a:
         12:e0:07:de:73:9f:7b:b0:e9:b5:b0:dc:94:3d:a8:01:4b:90:
         c0:14:86:cd:f6:58:de:d6:8e:c5:28:27:77:91:8d:d7:f2:dc:
         16:44:00:9d:a4:a8:93:99:c7:02:58:84:12:ba:3e:85:b9:75:
         bb:c6:c6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:56:46 2026 by rpki-client