Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/55b8ae47-a952-3dfd-9908-bbbf938409da.roa
File:                     55b8ae47-a952-3dfd-9908-bbbf938409da.roa (raw, json)
Hash identifier:          CvFfFbI4iX94O0MADoUecI2oQ9vMrOYBs7/nTUf7pyI=
Subject key identifier:   45:5C:1D:9E:97:2D:A2:80:4C:2D:E3:4A:81:58:9F:6C:46:2B:31:90
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF32A8A8B8285166A51AC3C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/55b8ae47-a952-3dfd-9908-bbbf938409da.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        72.201.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:a8:a8:b8:28:51:66:a5:1a:c3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=92af07b8-b542-4beb-8810-99c5ea9aa27d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7f:a9:95:72:09:49:ae:84:6e:de:55:e3:04:
                    a3:44:73:51:a8:59:76:aa:a5:c8:ea:95:b4:33:26:
                    6e:e7:a7:fe:fe:bb:ed:dc:84:f7:70:e9:cc:68:04:
                    10:8c:f4:20:c5:b7:aa:96:a6:a6:56:e7:e2:e3:0d:
                    53:f0:62:32:ef:c5:f6:3f:eb:85:a8:82:e2:9e:42:
                    ab:c4:cc:e7:3f:28:89:eb:27:b6:9d:59:23:ab:81:
                    62:c6:73:24:54:2c:3e:de:1c:3f:ba:12:1a:81:59:
                    16:da:ca:97:95:fd:db:a9:05:85:03:68:3f:e5:e9:
                    e3:3a:cf:03:9d:0f:d8:73:1a:a7:38:2b:b8:ef:ae:
                    72:d8:56:22:54:7a:77:85:cd:1a:0c:9f:20:79:7a:
                    cf:0b:1c:d0:65:d6:f5:7a:15:c2:83:6d:de:cb:d8:
                    9c:e4:23:c3:b4:d2:b7:70:62:c6:3e:b9:8d:1a:cc:
                    29:2b:b3:a0:3b:11:96:76:da:6c:c8:2b:23:ae:16:
                    79:fe:2b:08:cb:e8:d2:69:ff:c4:fe:67:3b:f5:17:
                    e3:bf:9b:c7:c8:d0:5c:64:0e:94:de:e7:c7:cd:95:
                    8b:05:ff:3b:ab:c7:c7:93:d4:8d:df:a2:d9:98:7a:
                    a6:c4:35:e5:85:29:ec:16:2f:5f:5e:fe:57:86:af:
                    b4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5C:1D:9E:97:2D:A2:80:4C:2D:E3:4A:81:58:9F:6C:46:2B:31:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/55b8ae47-a952-3dfd-9908-bbbf938409da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.201.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:69:ca:d9:c0:5c:43:a9:19:4a:48:28:17:11:95:17:89:a9:
         0d:90:fb:65:5e:b1:8c:1c:a3:ff:fb:a8:b3:b4:bc:6f:d2:3c:
         7d:42:e5:89:0b:c9:1c:26:aa:22:c5:55:57:1c:bf:3c:32:3c:
         e4:9f:81:a3:f9:27:b6:03:8b:75:e4:2b:e7:3d:a2:76:f8:fa:
         2f:a9:47:5c:14:1a:19:4b:c3:12:83:5b:34:2c:e0:51:8d:24:
         fa:aa:40:a8:3b:a7:89:56:4c:90:a4:8e:e8:4e:9d:4b:5d:16:
         a0:0b:eb:9e:45:12:b5:da:0f:a1:88:76:6a:a6:99:6b:8e:ec:
         3e:65:4f:46:f5:f1:c5:f1:2a:13:42:10:76:b9:4c:a4:2b:37:
         a1:cc:d1:67:7f:a1:09:02:c5:20:f6:d4:90:7d:e4:1d:50:3f:
         4d:d8:8e:14:9d:fb:8c:d6:c3:dc:36:12:f4:ab:b1:32:c5:2a:
         4c:0e:e5:bd:92:30:01:91:96:88:fc:cb:3d:f4:62:12:25:b9:
         59:d2:2e:08:f9:7a:07:dd:2d:84:12:10:1d:60:55:94:e9:53:
         15:3f:a1:6e:85:4e:67:7c:5b:b7:0a:b7:d2:07:fd:4a:28:26:
         32:84:0d:49:2b:53:f5:3f:43:0c:56:8f:7d:6a:a3:b5:2d:1f:
         5c:1c:e7:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMqiouChRZqUaw8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk
OTJhZjA3YjgtYjU0Mi00YmViLTg4MTAtOTljNWVhOWFhMjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH+plXIJSa6Ebt5V4wSjRHNRqFl2qqXI6pW0
MyZu56f+/rvt3IT3cOnMaAQQjPQgxbeqlqamVufi4w1T8GIy78X2P+uFqILinkKr
xMznPyiJ6ye2nVkjq4FixnMkVCw+3hw/uhIagVkW2sqXlf3bqQWFA2g/5enjOs8D
nQ/YcxqnOCu4765y2FYiVHp3hc0aDJ8geXrPCxzQZdb1ehXCg23ey9ic5CPDtNK3
cGLGPrmNGswpK7OgOxGWdtpsyCsjrhZ5/isIy+jSaf/E/mc79Rfjv5vHyNBcZA6U
3ufHzZWLBf87q8fHk9SN36LZmHqmxDXlhSnsFi9fXv5Xhq+0WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEVcHZ6XLaKATC3jSoFYn2xGKzGQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNTViOGFlNDctYTk1Mi0z
ZGZkLTk5MDgtYmJiZjkzODQwOWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASMnZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAxpytnAXEOpGUpIKBcRlReJqQ2Q+2VesYwco//7qLO0vG/SPH1C5YkL
yRwmqiLFVVccvzwyPOSfgaP5J7YDi3XkK+c9onb4+i+pR1wUGhlLwxKDWzQs4FGN
JPqqQKg7p4lWTJCkjuhOnUtdFqAL655FErXaD6GIdmqmmWuO7D5lT0b18cXxKhNC
EHa5TKQrN6HM0Wd/oQkCxSD21JB95B1QP03YjhSd+4zWw9w2EvSrsTLFKkwO5b2S
MAGRloj8yz30YhIluVnSLgj5egfdLYQSEB1gVZTpUxU/oW6FTmd8W7cKt9IH/Uoo
JjKEDUkrU/U/QwxWj31qo7UtH1wc5w8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:54:34 2026 by rpki-client