Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6c68f0d9-21f7-39e9-a6fb-477bc3bbd77a.roa
File:                     6c68f0d9-21f7-39e9-a6fb-477bc3bbd77a.roa (raw, json)
Hash identifier:          Z92O+1gNdOdT5WY3TXUTPZFGmPHJw4IGa3hjdUtnqUk=
Subject key identifier:   89:69:91:00:2B:70:B3:EE:14:B3:C7:DF:DF:E6:B4:02:4A:C2:04:F9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D59EAB36282BF2D4EAB915A40
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6c68f0d9-21f7-39e9-a6fb-477bc3bbd77a.roa
Signing time:             Tue 31 Mar 2026 13:00:30 +0000
ROA not before:           Tue 31 Mar 2026 13:00:30 +0000
ROA not after:            Mon 29 Jun 2026 13:00:30 +0000
asID:                     22773
IP address blocks:        68.8.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:59:ea:b3:62:82:bf:2d:4e:ab:91:5a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 31 13:00:30 2026 GMT
            Not After : Jun 29 13:00:30 2026 GMT
        Subject: CN=b1429981-b61b-417b-b45c-ebba461759a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d1:0c:12:17:14:06:c3:71:93:b8:35:e3:42:
                    59:84:1a:5a:8e:ec:15:35:f3:c9:80:fe:db:7b:9f:
                    82:5f:af:3a:e6:3e:0c:85:a4:d8:b7:b8:91:a6:35:
                    16:d2:1c:aa:ae:71:7e:e8:d1:c4:f2:7f:2c:bb:f6:
                    35:0e:01:e6:7d:c3:3f:8a:99:5a:6b:f2:30:4d:90:
                    ce:5c:8e:8d:42:da:b0:0f:02:d5:7a:3d:d1:d4:83:
                    1d:42:0c:cf:c9:70:3f:01:1b:15:69:f2:86:af:e9:
                    20:2b:15:ad:f0:4e:6e:8f:80:33:c2:fb:91:b9:c4:
                    44:03:47:ed:94:c0:e9:b4:af:08:8e:bc:3b:c8:54:
                    1c:bc:12:62:fc:56:5f:58:6a:d0:11:93:41:aa:79:
                    ca:b7:f2:80:3a:e2:45:91:35:63:36:db:47:b2:13:
                    cb:cf:d0:68:ad:c5:0f:53:4a:2e:1d:d9:98:f7:ca:
                    32:ca:c1:8e:44:1b:09:bb:07:48:f4:c9:77:23:04:
                    46:96:6f:95:a6:79:88:0c:b5:9d:78:b3:65:9d:12:
                    4a:f7:4f:d4:f6:35:6e:d0:39:01:39:55:8f:e6:ee:
                    48:20:34:ae:cd:da:a1:ed:37:ae:c9:1d:cf:08:70:
                    7e:ca:9b:9a:b6:56:67:68:dd:64:4a:16:9f:60:65:
                    ce:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:69:91:00:2B:70:B3:EE:14:B3:C7:DF:DF:E6:B4:02:4A:C2:04:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6c68f0d9-21f7-39e9-a6fb-477bc3bbd77a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.8.249.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:b5:6d:86:59:05:27:62:25:50:08:ac:bf:78:57:89:71:f5:
         6a:2a:88:51:6e:36:0d:db:dc:cc:e9:2e:12:ea:3b:c3:d3:e9:
         f7:26:5f:64:6f:e9:0b:78:2e:55:ee:59:49:a8:34:69:0d:11:
         11:9c:a6:3d:b1:c9:79:59:41:55:09:b5:26:7a:9c:5f:af:0c:
         6d:33:19:bd:f8:5a:33:7b:84:79:5b:62:00:70:ce:7f:6e:b0:
         70:96:5f:f5:fe:2a:f3:97:a3:82:d3:51:e5:62:93:e8:e5:76:
         d4:34:89:37:b0:10:ce:51:54:bc:12:ea:32:c2:20:2f:62:9f:
         e1:3e:c4:82:a5:20:90:00:40:09:c4:08:fa:c1:cd:a2:05:1b:
         43:a6:16:a2:7a:74:47:9f:46:0d:04:cc:c1:58:ba:8d:31:92:
         91:0e:2a:bb:8a:58:20:eb:f1:71:49:8d:a5:c0:6e:13:28:83:
         4d:a1:c6:f4:58:97:20:5d:cd:d5:a7:86:bc:27:7a:ef:12:98:
         79:a0:3f:75:84:8e:0d:00:a2:ee:38:90:b9:c6:e4:ee:1f:13:
         f9:2b:08:5f:73:76:08:af:0b:63:01:0e:58:08:fc:89:cf:1e:
         6e:ff:69:e2:0c:49:ff:5e:14:28:ec:07:48:b7:d6:b5:14:d1:
         03:61:0d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:11:49 2026 by rpki-client