Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7dc32de7-e5ef-3415-8eaa-256fdd0ea461.roa
File:                     7dc32de7-e5ef-3415-8eaa-256fdd0ea461.roa (raw, json)
Hash identifier:          c00yB77Lu6qSGMa5jbmXhv1ouzfO2Q98jaNrPDGB2EQ=
Subject key identifier:   45:81:23:1E:6F:B0:EA:5D:34:4F:58:FF:7F:03:7B:7B:2C:99:2E:5F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CE0979D65F1A6A975C44353C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7dc32de7-e5ef-3415-8eaa-256fdd0ea461.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        68.108.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:9d:65:f1:a6:a9:75:c4:43:53:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=527b1549-99fc-4c7b-84c6-13141caeda8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:03:00:9d:9f:b8:10:b4:56:de:33:fb:37:7b:
                    24:78:55:6d:5b:c8:d7:86:8d:57:8c:e2:59:e9:56:
                    e0:e7:18:e8:81:0f:ca:be:04:a9:dd:13:ff:e6:8f:
                    36:5a:95:58:74:ea:8f:03:d3:b9:30:0a:4b:c7:57:
                    cd:2a:cf:ac:79:21:5e:fa:49:44:ff:96:fb:40:b3:
                    a5:cb:77:86:2f:ee:05:48:f0:e7:0b:e0:b1:ad:30:
                    62:76:7b:37:51:57:1d:36:fc:ab:bb:c6:17:5b:97:
                    5b:ff:c0:b7:a8:24:e3:40:7b:df:d1:8e:e4:7b:38:
                    c0:7d:b1:02:84:62:8f:5e:e7:35:53:07:c0:03:7a:
                    b3:f8:c5:ed:c1:9b:e8:7e:79:0f:3f:4a:0f:d9:a9:
                    5f:24:4e:23:52:26:c6:93:b8:d0:31:c1:f7:9c:ad:
                    63:d4:2d:e3:0c:66:e0:21:e3:5a:2f:38:96:77:87:
                    d0:8f:ed:f5:c7:a0:bb:24:60:8e:c2:9e:86:a4:b8:
                    9b:8d:83:94:2f:2e:fd:29:38:a3:f3:78:88:97:e3:
                    67:4f:35:95:df:27:0e:18:7a:c6:34:61:e3:d7:1a:
                    55:fd:24:45:d1:39:42:23:3c:72:34:d5:7e:44:d1:
                    57:f3:3d:05:a4:29:35:63:03:cd:05:a9:97:37:72:
                    f5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:81:23:1E:6F:B0:EA:5D:34:4F:58:FF:7F:03:7B:7B:2C:99:2E:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/7dc32de7-e5ef-3415-8eaa-256fdd0ea461.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.108.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:8b:80:0d:10:16:32:c6:4e:10:7c:bb:74:9c:ae:5c:db:db:
         7e:2b:ad:7b:d3:a1:30:3a:7a:a2:d9:38:b1:c9:8f:0c:21:fb:
         80:3d:60:de:f8:a1:48:89:82:fc:92:d1:b4:af:57:63:c3:1e:
         0d:29:05:ce:ac:69:cc:92:ce:af:b0:67:19:09:0a:45:ff:26:
         40:12:4a:76:6e:df:1e:fc:58:dc:78:f7:7b:6e:c3:14:a8:53:
         fa:0d:f7:a9:18:1d:fd:1d:d6:ef:81:5a:33:20:d8:35:d8:96:
         48:79:84:a0:26:3d:06:d5:ba:1d:0b:70:41:ac:13:5b:75:db:
         07:0b:b2:28:55:95:3a:b8:66:cc:f9:62:e6:6b:ef:c9:e0:a8:
         81:73:bb:50:17:84:d9:b6:1e:45:01:55:da:ea:91:82:65:6f:
         f5:7b:41:f6:80:aa:ba:76:ce:0f:4c:d8:c4:a1:8d:17:a7:5d:
         1c:ea:a4:f4:38:99:40:de:27:0e:14:ab:f2:95:c7:7f:a0:58:
         dc:cd:dc:8c:6a:b0:e6:5d:e0:84:ed:6f:c3:5e:4f:d4:2b:aa:
         a3:b5:9e:c2:07:f0:41:41:a6:dc:4d:ad:e4:c5:e1:71:11:95:
         c8:90:e0:5d:b5:6f:fa:8b:70:74:4a:93:51:0a:da:7b:cc:da:
         89:d8:d3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:40:55 2026 by rpki-client