Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a4dc9f63-cf05-3583-b884-79110ec61bcf.roa
File:                     a4dc9f63-cf05-3583-b884-79110ec61bcf.roa (raw, json)
Hash identifier:          A6v581/XIz3bBT392hjhKqEFYd3sA2Z+s3AYot918No=
Subject key identifier:   E8:F0:D3:79:50:24:F9:64:23:0C:15:63:B1:1A:A1:DC:01:85:4D:5E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CE0977A4F575E0E58573CE980
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a4dc9f63-cf05-3583-b884-79110ec61bcf.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        68.96.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:7a:4f:57:5e:0e:58:57:3c:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=042d40a6-8b3e-496f-8c4e-61e74f1a9e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:df:e7:28:fc:94:43:d2:7c:31:a9:0c:9f:be:
                    61:f5:75:04:00:16:70:50:e3:4b:ea:3b:31:f0:47:
                    a4:91:dc:1a:91:62:9b:5c:95:12:c0:51:fb:f4:58:
                    9d:fe:7f:bb:dd:38:04:aa:be:3a:98:e5:d9:14:0a:
                    9d:d8:4c:f1:ed:ab:ac:2e:7e:41:ee:66:ba:c7:dc:
                    c4:d3:5b:a2:18:f3:e4:04:7a:8b:df:9e:d7:ef:18:
                    c3:c4:f5:39:f7:c7:69:c8:bd:48:e7:08:a0:ca:56:
                    13:1c:df:6f:e4:db:13:91:19:09:40:db:0a:1d:3b:
                    34:57:08:3a:23:3b:4a:ae:2a:f9:73:e0:3e:a2:be:
                    a5:12:1b:4d:6d:fc:17:dd:fa:16:31:27:4a:78:f0:
                    e0:bd:e5:31:0b:ca:ab:fd:57:03:5e:bc:82:59:6b:
                    5e:50:ce:6f:45:c8:65:1b:37:88:2f:c1:e2:20:a7:
                    62:4c:2b:ae:c3:a5:bb:8c:d2:3e:b1:15:6f:fa:25:
                    9b:15:8d:ea:64:46:15:be:cd:ba:cb:9a:9a:c2:4c:
                    43:7d:2c:72:a0:00:69:a2:47:9d:6e:a1:43:96:1e:
                    8e:54:78:66:f3:6f:1d:a5:b1:5f:d3:44:76:c2:c1:
                    8d:84:30:b5:1d:cb:7d:81:d0:67:eb:b7:60:b2:e7:
                    61:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F0:D3:79:50:24:F9:64:23:0C:15:63:B1:1A:A1:DC:01:85:4D:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a4dc9f63-cf05-3583-b884-79110ec61bcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.96.192.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:61:c0:9d:d7:2b:ea:02:83:50:53:53:24:e8:8a:f9:35:67:
         e8:57:83:9e:2b:a2:1d:1a:01:31:d5:b4:de:71:2c:00:0f:ec:
         a7:b5:66:96:ea:8d:39:b2:ba:11:96:4e:ee:c0:97:89:78:8b:
         cb:34:bb:6e:57:84:ea:e2:43:e3:53:63:50:9c:8e:79:a1:9f:
         8e:7b:a7:f2:d1:83:5a:db:fd:bf:db:1a:26:5e:be:64:39:a7:
         17:b3:ab:35:43:83:68:2c:e4:d4:24:d9:77:2d:d9:61:00:0a:
         aa:67:f7:e1:26:bb:4a:46:29:11:3c:85:9b:69:b2:f6:f4:82:
         76:05:70:ac:ef:78:15:d4:d2:76:70:1b:34:a2:7d:8a:bf:8e:
         b1:ed:35:1e:5f:34:6a:05:fe:4e:3b:91:72:f3:76:cd:e1:68:
         13:07:4a:0a:a8:c2:6d:25:7f:aa:e5:1f:6e:b7:a2:43:45:e8:
         bf:25:07:a2:7b:4b:d7:22:83:92:a9:38:51:7a:1a:91:56:b4:
         cc:a7:47:5b:c8:b5:c0:73:d4:10:5a:85:e4:0c:20:89:8e:9b:
         fc:5d:bf:3b:86:ce:43:fe:36:c7:bd:ae:86:c0:da:55:fc:b0:
         31:8c:1b:64:82:22:16:ba:66:a9:7f:64:9b:af:26:a5:58:c5:
         2c:5a:5c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:31 2026 by rpki-client