Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9746367f-44c9-3697-9ff5-4fb7a58f5978.roa
File:                     9746367f-44c9-3697-9ff5-4fb7a58f5978.roa (raw, json)
Hash identifier:          f71EwFKbIXsr04AeC7QUx5s5uDIacyesfp4RB1oxUoM=
Subject key identifier:   4B:A0:42:4A:EC:20:09:93:3F:01:6D:9D:15:CF:20:1C:0B:AD:B2:D7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDDCD1E18B8895392EFB1CD1C
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9746367f-44c9-3697-9ff5-4fb7a58f5978.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        68.227.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cd:1e:18:b8:89:53:92:ef:b1:cd:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=795f82af-a65a-451b-ac91-98643563bc65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:49:c5:86:fa:d4:14:c6:0b:c7:aa:8c:7f:8e:
                    10:51:a3:6e:71:e9:9c:7d:57:b3:bb:87:0c:3a:eb:
                    16:b7:e7:25:84:0b:f9:78:ac:35:6a:f3:e4:65:7b:
                    04:20:20:6b:57:64:53:75:ce:bc:4d:4f:8a:d7:10:
                    57:7c:d6:ff:ee:03:ba:50:96:80:dc:b9:fc:ae:a5:
                    ae:82:39:ba:ac:a6:cf:44:f5:67:70:0a:05:a0:06:
                    a1:21:ae:c2:2f:ee:98:f1:2a:bb:4a:2d:0e:08:f5:
                    7d:1c:bd:37:de:1f:8c:b5:ae:0d:d3:d4:34:21:d3:
                    dd:88:a9:2d:61:85:32:d5:1d:5e:56:3d:ac:8f:19:
                    7e:93:42:bb:e4:a8:0c:c1:4e:8a:69:d5:ce:a0:82:
                    2f:a4:6a:b0:94:5f:95:aa:93:fe:e1:96:7d:55:76:
                    8a:d6:13:ff:d4:b7:61:23:74:0e:ad:ef:96:f1:74:
                    e2:ca:c3:57:f9:69:53:0c:3a:4e:e9:3e:00:8b:93:
                    95:1c:68:1e:e3:76:9c:7a:f3:f8:c3:67:a1:e4:13:
                    02:64:e1:a4:b1:5f:e4:90:cc:15:4d:34:b5:00:b0:
                    d9:c2:77:d3:5a:cc:b3:77:76:cf:02:48:7c:0a:88:
                    7b:a8:26:d9:ea:1c:3e:e1:25:97:b5:ae:45:af:f6:
                    a1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:A0:42:4A:EC:20:09:93:3F:01:6D:9D:15:CF:20:1C:0B:AD:B2:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/9746367f-44c9-3697-9ff5-4fb7a58f5978.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.227.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:13:f0:b2:ac:fc:4c:cb:f0:91:7c:a8:49:41:40:e0:17:76:
         62:16:cf:9c:ea:81:dd:b3:cf:2c:8f:1e:d0:06:71:26:21:86:
         82:d2:8f:0d:10:1a:93:69:6c:7e:44:2f:75:00:6c:16:f9:aa:
         b2:8e:f3:9c:68:d8:c3:96:12:fd:8a:00:d2:bc:0a:69:ef:00:
         00:b4:a2:91:56:b1:fc:63:04:4d:e5:1d:88:39:a7:9f:0a:88:
         5f:5b:a8:c5:94:9a:dd:ff:92:26:1a:0a:6a:df:23:63:2a:54:
         f3:67:99:50:0f:b8:de:78:e5:aa:7f:c5:56:fe:67:1a:96:24:
         67:7a:bb:65:67:56:50:69:6b:6c:4e:d4:f0:40:c6:11:c5:b6:
         d8:5e:b4:b6:92:8f:4a:b8:ee:4b:06:aa:97:b9:7d:0b:d9:31:
         ca:be:6a:c2:58:35:b0:2e:93:b2:12:02:a0:1a:44:d5:d7:2d:
         cc:db:29:32:7b:27:96:6b:c2:53:ab:48:6c:b0:04:ba:0a:93:
         72:c1:94:97:9f:5e:56:68:69:46:50:38:99:13:2b:10:0d:49:
         56:e2:3a:4a:7f:c7:a4:ef:f0:14:0d:50:e8:31:29:38:b0:09:
         95:dd:65:b5:61:13:a4:0c:24:03:5c:13:89:a9:53:0d:e3:4c:
         49:2d:2e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:30:31 2026 by rpki-client