Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d3b1140-1b21-3901-a985-840564add3d1.roa
File:                     5d3b1140-1b21-3901-a985-840564add3d1.roa (raw, json)
Hash identifier:          0ZyAVyjT+D0yYZkEHXCiNUkmfvLsJZYje9wv/iMtEeE=
Subject key identifier:   3A:29:2C:1F:96:AE:CE:C9:20:4B:F4:6D:62:84:D3:E6:5C:69:E2:7F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DC135D2D780EA3E8B71DC79EC
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d3b1140-1b21-3901-a985-840564add3d1.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     22773
IP address blocks:        68.96.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Jun 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:d2:d7:80:ea:3e:8b:71:dc:79:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=1ce6d336-e23c-42e9-add9-3fdfd40d9281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:ce:2d:9d:d2:9a:71:5e:99:62:7d:f0:b1:
                    14:37:ce:a9:fa:1f:3f:ec:fe:2a:86:ac:bb:1d:11:
                    d6:3d:af:4c:a1:d9:8c:02:b5:38:05:cd:47:20:1c:
                    8a:b2:df:74:41:41:36:41:92:62:32:37:94:ed:75:
                    45:69:fc:dc:a6:7d:26:97:e1:f5:7f:ca:c0:ec:3b:
                    83:5c:32:a1:bd:e6:55:f3:76:6e:6f:52:1e:4a:ff:
                    4f:d5:87:a5:d9:5d:93:68:16:70:76:03:c0:96:81:
                    25:20:61:bb:e6:bb:33:9c:b8:48:b3:ed:91:02:17:
                    b7:65:ed:cd:01:7f:95:af:34:6a:57:db:48:7b:09:
                    85:99:6c:9d:30:09:c3:89:b0:80:fb:e5:54:9a:a1:
                    c8:98:0d:cb:1b:c8:89:4f:aa:62:4a:1d:31:b9:f2:
                    f3:b0:42:5f:96:df:7a:ca:ba:c3:6f:78:5a:21:82:
                    cd:ab:ed:05:c6:f9:1b:51:e1:8d:f3:c9:75:d8:26:
                    40:55:07:6d:d4:09:b6:6d:d7:98:c7:a7:63:0b:a8:
                    6a:ef:87:65:fe:5f:56:b6:3b:d2:b1:7e:44:57:78:
                    40:4e:d0:a0:0c:b0:e0:39:53:f5:3e:3e:f2:19:bc:
                    4f:3e:92:05:8f:66:d9:f4:15:20:29:4b:05:b9:f5:
                    bd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:29:2C:1F:96:AE:CE:C9:20:4B:F4:6D:62:84:D3:E6:5C:69:E2:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d3b1140-1b21-3901-a985-840564add3d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.96.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:b1:14:80:82:c0:ed:37:47:28:22:42:94:8b:a9:03:13:e5:
         e8:d3:5c:2d:06:79:b0:29:6c:fc:63:a2:dd:e9:82:36:e8:3f:
         04:19:83:e1:a9:4c:e6:5a:f1:43:c9:49:79:2f:51:f8:14:e1:
         10:ef:e8:da:a8:d2:6a:a3:69:ad:fa:9f:72:02:ea:f1:82:2b:
         b6:df:44:5e:07:50:93:9f:06:04:5d:9d:97:6c:96:bc:be:de:
         81:7b:48:04:fa:00:15:37:ae:8b:e2:d1:ab:c4:2a:ae:8e:e1:
         c6:aa:b3:c6:46:59:55:1d:5e:8d:3c:35:26:bb:e9:1e:f2:9f:
         09:d3:f0:05:d3:76:d9:94:77:97:17:61:f5:72:4e:f4:8e:ea:
         61:55:e6:2a:74:61:02:87:e9:e9:4e:cd:32:c5:30:71:d2:ff:
         28:67:df:b7:d0:c0:b3:ec:dd:f9:55:99:67:5d:8e:3f:66:2d:
         5c:28:27:5b:18:e3:a6:31:0b:fb:1e:d5:e1:20:e1:3d:bc:02:
         d3:e8:a2:6e:db:68:33:81:25:84:e5:47:3a:d2:9e:4e:59:8c:
         66:e1:10:7b:b9:cd:b0:c3:b8:9b:e6:db:11:3e:54:64:75:ec:
         52:46:9c:b0:c0:e2:39:12:1d:34:44:88:74:24:58:3b:7a:14:
         8c:d9:d1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:20:48 2026 by rpki-client