Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e74d68cd-d6e6-346e-bfd2-3e85d174fe63.roa
File:                     e74d68cd-d6e6-346e-bfd2-3e85d174fe63.roa (raw, json)
Hash identifier:          yKHGzY7JS5kSacJBQxpz1Tuw1o1FTy9rKeBfWOAiDyg=
Subject key identifier:   28:BB:3D:01:64:36:0E:B2:72:DD:E4:ED:9B:12:CA:3B:26:55:E7:86
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CE0976BC3183ACA1DB4E1F9C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e74d68cd-d6e6-346e-bfd2-3e85d174fe63.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        68.104.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:6b:c3:18:3a:ca:1d:b4:e1:f9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=1e23a7e0-5347-4878-9adb-da2caf93ce3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:99:e1:02:6b:54:2a:7e:76:25:83:20:16:9e:
                    7b:ff:6b:f6:ed:96:93:06:5a:b4:f8:54:87:fc:01:
                    9b:e2:d1:e8:4d:da:06:bc:a1:a4:52:ae:65:3d:b4:
                    de:d4:90:16:a0:9c:c9:dc:f3:dc:06:db:de:19:09:
                    ce:71:ec:68:dd:43:0b:98:6f:0b:d6:d8:bd:76:26:
                    46:75:f2:e7:5f:d7:cc:7a:51:1f:53:0b:25:53:93:
                    2a:50:00:d8:bb:9b:ec:0d:99:12:83:8a:43:57:3b:
                    df:86:3b:51:0a:44:fa:a8:e4:f8:84:2a:71:bd:a3:
                    e8:28:4f:5e:d3:85:07:01:b3:82:72:5c:15:6f:6e:
                    a5:09:b7:17:63:69:b6:f4:d2:59:53:c5:57:1e:38:
                    26:61:e9:d4:a3:3a:ab:d6:be:c4:90:0d:6f:ed:c8:
                    03:24:46:e6:6b:ae:b2:93:84:62:f5:bd:40:cc:b7:
                    9f:cc:5c:65:e0:1b:e3:22:8d:db:86:da:4c:d7:52:
                    7d:35:ca:0e:4b:5c:ca:45:d7:ec:66:48:6a:fc:7c:
                    e8:79:f9:2c:19:38:bd:11:88:c9:58:9b:10:98:44:
                    2d:01:07:a0:06:b8:a1:73:f3:d0:be:6a:d5:e9:b3:
                    45:b2:ed:6f:a3:64:16:59:20:3e:ed:59:fe:dd:2a:
                    19:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BB:3D:01:64:36:0E:B2:72:DD:E4:ED:9B:12:CA:3B:26:55:E7:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e74d68cd-d6e6-346e-bfd2-3e85d174fe63.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.104.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:d6:22:05:30:0e:2a:32:35:2a:6f:da:82:33:4e:29:45:0c:
         0b:e4:d1:ee:22:5c:83:8d:7a:a0:44:79:5c:35:2a:09:5b:dd:
         40:8d:a9:30:3a:eb:07:f0:4b:4a:c1:76:25:3e:b4:14:af:9e:
         fc:d7:63:57:1d:65:c0:57:4b:5d:63:71:34:76:65:99:32:62:
         18:38:52:5b:b5:5d:68:2a:df:15:c1:81:10:97:7a:43:ae:68:
         16:99:c4:70:d0:c9:9e:e6:52:f6:40:19:7b:8f:5f:e5:df:22:
         42:38:a5:9c:67:5e:46:22:5f:fc:f7:6c:eb:97:82:f2:b4:09:
         79:0c:19:6e:5e:f6:92:7c:8a:57:0f:02:85:cb:79:5f:f2:66:
         e8:5c:f4:d8:d8:28:77:85:22:67:87:af:30:34:b2:a6:7b:21:
         6c:e9:8e:d8:12:b8:bf:77:d6:69:51:a9:fb:82:c7:de:5f:aa:
         e7:c4:b2:b9:c7:1c:9f:88:75:73:9d:fb:04:40:53:9b:5e:b4:
         52:83:86:6b:90:92:67:a5:7b:c0:1b:fb:5f:52:54:02:d6:b5:
         0d:d0:a5:11:26:2a:b4:86:89:1f:43:92:fd:22:f4:69:45:39:
         36:65:28:98:c7:7e:9a:08:12:7d:15:f1:da:f0:fc:60:62:2c:
         79:79:cf:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl2vDGDrKHbTh+cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk
MWUyM2E3ZTAtNTM0Ny00ODc4LTlhZGItZGEyY2FmOTNjZTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+5nhAmtUKn52JYMgFp57/2v27ZaTBlq0+FSH
/AGb4tHoTdoGvKGkUq5lPbTe1JAWoJzJ3PPcBtveGQnOcexo3UMLmG8L1ti9diZG
dfLnX9fMelEfUwslU5MqUADYu5vsDZkSg4pDVzvfhjtRCkT6qOT4hCpxvaPoKE9e
04UHAbOCclwVb26lCbcXY2m29NJZU8VXHjgmYenUozqr1r7EkA1v7cgDJEbma66y
k4Ri9b1AzLefzFxl4BvjIo3bhtpM11J9NcoOS1zKRdfsZkhq/HzoefksGTi9EYjJ
WJsQmEQtAQegBrihc/PQvmrV6bNFsu1vo2QWWSA+7Vn+3SoZ4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCi7PQFkNg6yct3k7ZsSyjsmVeeGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvZTc0ZDY4Y2QtZDZlNi0z
NDZlLWJmZDItM2U4NWQxNzRmZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRGgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD3WIgUwDioyNSpv2oIzTilFDAvk0e4iXIONeqBEeVw1Kglb3UCNqTA6
6wfwS0rBdiU+tBSvnvzXY1cdZcBXS11jcTR2ZZkyYhg4Ulu1XWgq3xXBgRCXekOu
aBaZxHDQyZ7mUvZAGXuPX+XfIkI4pZxnXkYiX/z3bOuXgvK0CXkMGW5e9pJ8ilcP
AoXLeV/yZuhc9NjYKHeFImeHrzA0sqZ7IWzpjtgSuL931mlRqfuCx95fqufEsrnH
HJ+IdXOd+wRAU5tetFKDhmuQkmele8Ab+19SVALWtQ3QpREmKrSGiR9Dkv0i9GlF
OTZlKJjHfpoIEn0V8drw/GBiLHl5z3M=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:54 2026 by rpki-client