Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/75e3f97f-8c7e-3df4-afe0-07b4d22ff8b7.roa
File:                     75e3f97f-8c7e-3df4-afe0-07b4d22ff8b7.roa (raw, json)
Hash identifier:          IrbfS3uGTPxnE8Z6qXFq+ItS4Mm7TV2EDSZBuf+/xeQ=
Subject key identifier:   19:B1:C3:29:2E:28:83:FC:93:E3:AD:12:29:DB:EE:5A:A9:31:6A:D3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4277DB4443CF6DC8A9B989C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/75e3f97f-8c7e-3df4-afe0-07b4d22ff8b7.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        72.217.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:77:db:44:43:cf:6d:c8:a9:b9:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=bacc69d9-c129-42f2-8d29-0782945dd7b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:50:00:57:12:fc:5a:18:a5:e1:d2:14:4b:f1:
                    af:57:0f:a7:cb:41:2b:58:87:62:d3:42:79:60:b1:
                    59:ca:c8:3e:cd:45:78:e1:cd:ae:93:5c:36:4d:75:
                    bb:0c:5d:59:a3:0b:34:fb:a2:42:0b:f6:bc:ac:63:
                    67:45:32:66:49:d7:af:d2:82:3b:33:26:11:6e:20:
                    90:d8:7c:67:f3:73:cc:d7:b7:4e:93:90:c9:5a:f5:
                    22:c7:7f:ff:db:77:25:cc:a6:61:c6:08:f8:0e:57:
                    98:09:0e:3f:03:c2:98:ca:99:8a:fb:4f:c6:0d:06:
                    98:b0:e8:4e:50:b8:ea:cb:82:db:2c:d6:e1:58:f7:
                    fc:d9:34:ed:0d:cd:3e:83:84:36:a6:af:1b:29:cc:
                    44:29:f6:59:6f:1f:bf:79:f9:55:68:28:4a:86:19:
                    5a:93:3c:2a:c5:b2:57:2f:0c:0d:e1:27:22:8e:fa:
                    95:7d:65:6d:b4:8a:ad:8c:35:4b:a0:4d:92:ca:c4:
                    31:dd:5f:5f:dc:5d:46:a5:6d:7d:a6:46:e6:ce:0a:
                    41:1f:1e:a5:1d:ef:23:98:37:02:b9:61:43:67:8a:
                    ec:81:d3:55:c1:8a:54:71:b7:ac:27:af:6c:37:9c:
                    da:bb:d3:14:62:42:a0:3b:5a:f8:d1:57:57:d1:fc:
                    28:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:B1:C3:29:2E:28:83:FC:93:E3:AD:12:29:DB:EE:5A:A9:31:6A:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/75e3f97f-8c7e-3df4-afe0-07b4d22ff8b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.217.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:85:a5:55:b6:fc:44:48:09:8c:06:5f:00:10:99:27:88:b8:
         59:2a:0d:ff:20:63:50:3f:20:d6:65:b7:ee:63:de:9b:f8:76:
         43:91:58:52:77:68:fc:64:91:6f:04:6d:57:07:30:7c:09:3d:
         8d:ab:ab:7e:2a:81:e2:a3:5e:e1:1d:e6:46:06:69:18:5e:b1:
         67:83:a4:75:5c:7d:8f:81:5e:9d:da:b9:73:eb:1f:43:be:51:
         35:86:a9:72:33:d4:1e:93:17:22:1f:f0:9f:a2:93:ad:a8:1f:
         2a:f0:f8:63:2d:0c:89:d9:01:95:55:ad:31:86:6b:c0:84:b4:
         c1:8b:37:82:a7:29:5d:5a:d5:54:b7:4d:53:2c:30:33:ff:fa:
         44:83:6a:8a:0f:7d:12:5b:0a:82:2a:76:a5:2f:fa:23:54:1c:
         74:a2:1b:6e:d8:5b:ee:e6:12:45:6d:2f:75:2c:44:48:a8:17:
         f7:ff:5e:f5:45:81:be:f5:3e:d0:b1:cf:e4:84:b2:71:a5:02:
         c6:9f:9c:ae:2f:37:86:1e:ba:23:60:0f:d0:1c:68:5a:28:e3:
         20:0f:d9:0c:79:45:62:9d:73:90:62:2e:fa:9f:86:f5:49:2a:
         d3:bb:10:f1:00:4f:5c:31:ea:7f:70:ac:5b:05:73:88:02:aa:
         6a:f4:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:50:54 2026 by rpki-client