Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dbe20ade-0c17-33cd-b306-38372d03b0fc.roa
File:                     dbe20ade-0c17-33cd-b306-38372d03b0fc.roa (raw, json)
Hash identifier:          aW+Bg4s1D5jpsU6sio1cuN989Yu87+CAKrq+0zs9ZUk=
Subject key identifier:   56:13:32:32:4D:46:C3:08:B8:21:76:FD:6B:43:72:F5:41:38:FD:7C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CE09775F3294386A590FA1280
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dbe20ade-0c17-33cd-b306-38372d03b0fc.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        68.96.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:75:f3:29:43:86:a5:90:fa:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=02910f4c-773e-4391-997b-e9d5935aae4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7a:67:24:39:79:ae:f1:31:17:dc:69:ad:28:
                    6d:37:79:f8:87:81:e4:e0:1b:9d:40:89:6d:c5:b6:
                    2e:ef:6a:38:36:5d:2e:61:c2:23:7d:88:27:93:b1:
                    77:e1:1f:94:d4:e0:22:00:05:6f:a0:00:50:c0:18:
                    7e:d4:eb:98:8c:a9:f0:d9:38:7e:d3:a2:de:fa:72:
                    c6:a1:e1:78:77:3e:42:8a:79:4a:4b:d5:a8:6c:aa:
                    6d:a2:f7:21:a6:ef:12:4e:a4:2b:0b:59:f4:dd:50:
                    31:30:af:c2:68:df:73:91:89:95:c1:aa:80:45:74:
                    21:b5:67:f8:a5:14:58:7b:71:d2:6b:f9:59:6f:b8:
                    35:20:55:1f:c1:da:05:24:e8:b7:8f:03:61:96:9b:
                    96:72:0f:ea:85:6e:a7:3d:11:fa:c7:76:03:79:cb:
                    c2:ba:11:6d:02:4b:63:38:d5:92:ff:82:84:e9:83:
                    02:65:30:95:03:4e:48:58:a4:6d:a7:e3:f2:c1:6d:
                    d7:2d:8e:57:a1:6c:72:28:70:15:f8:10:38:fd:7c:
                    07:7a:c4:0a:2d:4a:b4:10:9d:98:45:08:2d:a1:6f:
                    f2:08:0d:29:19:45:dd:b0:87:f2:2f:b3:1c:1b:0e:
                    8a:5f:75:d5:4a:00:86:86:72:cf:66:6d:bf:b1:53:
                    9f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:13:32:32:4D:46:C3:08:B8:21:76:FD:6B:43:72:F5:41:38:FD:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/dbe20ade-0c17-33cd-b306-38372d03b0fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.96.106.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:52:65:00:8d:1f:79:21:ac:7f:c1:85:cd:e8:b7:f4:46:d2:
         93:d9:a0:e3:a7:a5:b2:31:99:0a:7b:57:e8:eb:dd:dc:07:09:
         b2:af:ec:4f:3c:c3:d2:88:5e:50:94:f4:40:63:8a:a3:fe:ec:
         0a:86:9f:9e:4d:89:06:84:9c:a6:cc:e9:33:bf:0d:00:77:20:
         f9:67:c3:0a:1b:3f:0a:7e:ee:64:76:12:39:2a:6d:4b:ac:91:
         88:07:0d:5c:e4:6e:0b:12:de:a1:88:0e:25:90:26:1f:11:b3:
         83:a2:ae:6d:88:57:5a:d0:67:05:d2:6b:e3:18:d3:f1:34:2f:
         9f:86:44:8a:a1:7a:98:76:95:d1:61:90:e4:78:36:7d:d6:43:
         8d:5f:29:eb:eb:ae:3f:88:14:db:1f:da:db:23:6a:33:fb:4f:
         b8:77:b5:c0:8e:8c:e9:bb:e7:63:40:e2:e5:09:eb:12:9e:2a:
         6d:eb:44:c2:1c:f4:ad:e0:3d:7e:3e:f8:bb:91:fd:2a:c8:39:
         4e:b6:17:a2:91:e5:d3:3e:c4:82:79:78:5b:cb:13:54:ea:b3:
         2e:f1:65:e2:c3:f8:dd:c5:fa:a1:10:3b:74:3c:87:c4:90:1e:
         ac:3c:73:f3:ba:c8:ad:1d:f7:fe:c9:61:61:4e:6f:8d:fd:7d:
         c2:55:0d:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl3XzKUOGpZD6EoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk
MDI5MTBmNGMtNzczZS00MzkxLTk5N2ItZTlkNTkzNWFhZTRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXpnJDl5rvExF9xprShtN3n4h4Hk4BudQIlt
xbYu72o4Nl0uYcIjfYgnk7F34R+U1OAiAAVvoABQwBh+1OuYjKnw2Th+06Le+nLG
oeF4dz5CinlKS9WobKptovchpu8STqQrC1n03VAxMK/CaN9zkYmVwaqARXQhtWf4
pRRYe3HSa/lZb7g1IFUfwdoFJOi3jwNhlpuWcg/qhW6nPRH6x3YDecvCuhFtAktj
ONWS/4KE6YMCZTCVA05IWKRtp+PywW3XLY5XoWxyKHAV+BA4/XwHesQKLUq0EJ2Y
RQgtoW/yCA0pGUXdsIfyL7McGw6KX3XVSgCGhnLPZm2/sVOfXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFYTMjJNRsMIuCF2/WtDcvVBOP18MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZGJlMjBhZGUtMGMxNy0z
M2NkLWIzMDYtMzgzNzJkMDNiMGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRGBqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHpSZQCNH3khrH/Bhc3ot/RG0pPZoOOnpbIxmQp7V+jr3dwHCbKv7E88
w9KIXlCU9EBjiqP+7AqGn55NiQaEnKbM6TO/DQB3IPlnwwobPwp+7mR2EjkqbUus
kYgHDVzkbgsS3qGIDiWQJh8Rs4Oirm2IV1rQZwXSa+MY0/E0L5+GRIqheph2ldFh
kOR4Nn3WQ41fKevrrj+IFNsf2tsjajP7T7h3tcCOjOm752NA4uUJ6xKeKm3rRMIc
9K3gPX4++LuR/SrIOU62F6KR5dM+xIJ5eFvLE1Tqsy7xZeLD+N3F+qEQO3Q8h8SQ
Hqw8c/O6yK0d9/7JYWFOb439fcJVDUo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:25:27 2026 by rpki-client