Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/573b75ec-fec6-386e-b690-c6f9c0089ed4.roa
File:                     573b75ec-fec6-386e-b690-c6f9c0089ed4.roa (raw, json)
Hash identifier:          fFMCYWBq5DIb7TPTk1vDUK+XKL+mEg5GRgkBozzjTic=
Subject key identifier:   67:78:8A:06:88:8D:A6:23:64:09:E0:17:BB:2E:64:A7:77:4E:5D:7A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CD99D11D9AD31A85300BC9598
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/573b75ec-fec6-386e-b690-c6f9c0089ed4.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        68.2.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9d:11:d9:ad:31:a8:53:00:bc:95:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=508d52b4-fd5a-4bb6-95a8-ab6c8bb44137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7f:41:70:96:ed:74:03:b8:04:99:f5:ec:d0:
                    34:2d:97:f7:d7:86:71:08:23:b9:6a:a4:ef:c2:9c:
                    95:45:ad:8c:12:6f:8f:e0:59:6b:fc:81:fe:c2:24:
                    00:53:23:10:d6:c0:85:88:7a:5b:fa:9c:fe:d6:69:
                    0a:30:a2:78:65:22:3c:98:31:91:88:5c:43:cd:23:
                    77:04:94:3d:24:87:ca:fb:81:39:39:27:e1:ed:71:
                    61:8d:67:a3:e8:a6:2f:5b:0b:0a:f3:08:38:51:30:
                    d3:eb:d3:26:03:ec:50:0f:54:57:41:4d:8d:e4:41:
                    45:7e:e9:8e:23:94:20:17:83:28:7c:c0:83:ed:70:
                    33:ec:94:31:23:5a:12:d0:c5:7a:ca:70:34:0d:c6:
                    ee:11:74:d1:35:6d:1f:62:de:b7:05:ac:08:d3:f6:
                    75:11:b8:95:aa:0a:9a:8f:86:0f:d9:eb:91:02:b8:
                    6f:29:9b:2a:22:01:80:40:74:5a:8f:e9:41:ec:c6:
                    51:17:c3:81:eb:a3:09:f7:f4:9d:5c:97:26:b6:98:
                    f4:b7:c8:03:3f:d9:61:a9:d8:57:d9:07:b3:c2:3d:
                    a6:62:fd:04:94:00:47:8d:d0:4c:9d:fd:1d:13:eb:
                    97:6a:6c:3a:e2:e9:4c:bf:68:2e:a5:e7:6f:09:ed:
                    29:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:78:8A:06:88:8D:A6:23:64:09:E0:17:BB:2E:64:A7:77:4E:5D:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/573b75ec-fec6-386e-b690-c6f9c0089ed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.2.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:27:fc:fb:cc:77:62:c7:81:7e:3f:0d:7e:74:ff:93:89:3a:
         55:b8:f4:23:44:65:53:f4:7c:f2:49:8d:4a:c6:79:60:66:e2:
         bf:b4:b6:7c:a5:77:59:f2:8d:c2:eb:9e:79:e5:97:4c:eb:7d:
         bd:f6:2c:b8:18:cf:46:77:dd:0b:59:6e:70:60:79:61:1e:e7:
         51:7c:68:bf:af:76:ac:fa:d1:9c:36:84:e7:cc:1a:19:e3:d0:
         90:67:0d:69:b6:54:9d:88:ea:6b:aa:01:2c:fa:df:14:b0:e1:
         27:ee:b5:c4:0f:e7:e4:be:35:17:0d:4d:15:d0:bf:5a:c2:a9:
         5d:69:6f:4c:90:fc:1b:f5:ef:c2:6d:9c:bd:da:54:de:8e:25:
         82:35:48:be:ae:5b:3a:09:e3:8d:f7:49:6a:3f:5a:f4:6a:7d:
         7a:61:3a:dd:ac:96:1a:24:08:f9:d9:65:a2:ec:09:e6:44:3f:
         67:0d:81:0a:d0:74:9c:84:81:8a:6f:bd:0a:f0:93:3f:e9:d4:
         32:f9:2b:80:64:ab:78:e3:c7:5b:42:08:80:d1:f6:09:3c:57:
         18:59:f0:58:28:7e:e2:d3:27:04:3e:c9:a3:39:9d:83:2b:76:
         7d:5b:78:d0:90:97:9c:38:ce:3c:0f:3a:df:0c:01:74:85:d0:
         09:a6:89:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:27 2026 by rpki-client