Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00c935f4-7604-3df9-a94b-0327ae38244d.roa
File:                     00c935f4-7604-3df9-a94b-0327ae38244d.roa (raw, json)
Hash identifier:          f4rRK+7RXhRp6ShBREDbOkNjjNDT7HYfFaw1H3mPuWI=
Subject key identifier:   F4:5B:A0:37:60:56:74:23:4F:73:92:F2:A3:5C:62:10:30:2F:28:A1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DBE6B4FD7D3EC5774E6247680
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00c935f4-7604-3df9-a94b-0327ae38244d.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     22773
IP address blocks:        174.74.250.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:4f:d7:d3:ec:57:74:e6:24:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=4849e0d5-2427-46e6-b7fb-36b752e366c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bc:37:b3:42:0f:d5:7e:f1:5b:ab:cb:c5:55:
                    56:2b:51:cb:7b:66:9d:25:dc:64:7d:1e:c0:42:e6:
                    49:6c:44:3b:03:8e:fe:72:d9:b7:b6:9a:83:71:c8:
                    2a:26:19:0d:a0:1f:52:6a:1f:46:4a:69:ff:fe:55:
                    93:be:2c:9b:99:62:c0:d5:97:c1:51:73:45:cd:e7:
                    b2:68:1a:ee:c9:f0:77:7c:2d:d2:50:25:64:bb:8d:
                    68:a6:b6:93:b1:f2:8a:5f:32:64:9b:9e:c8:e6:96:
                    37:36:09:aa:db:3d:61:d9:45:9e:4a:9a:da:a5:55:
                    75:ae:77:a1:cd:2d:e1:78:40:9f:7a:94:ee:13:b3:
                    50:7c:8f:95:7b:15:d5:55:be:55:eb:97:a8:57:dc:
                    f0:8f:73:04:7d:25:54:78:92:4f:ff:19:a5:61:8c:
                    76:81:d7:ae:14:e9:f3:2f:75:68:60:6f:dd:49:95:
                    81:42:04:7d:63:a3:63:c1:41:9a:fe:8e:82:c4:95:
                    40:44:b0:2b:4e:f4:9a:3f:66:f9:c9:03:af:b0:91:
                    b2:9c:fd:7c:7c:13:b0:69:de:df:40:e1:5b:49:9c:
                    ec:2f:b0:a5:db:89:39:cd:e1:97:ec:bf:f9:f9:3f:
                    5d:0c:2f:d0:d2:eb:ff:f6:2a:a0:61:81:55:95:b0:
                    fc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:5B:A0:37:60:56:74:23:4F:73:92:F2:A3:5C:62:10:30:2F:28:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/00c935f4-7604-3df9-a94b-0327ae38244d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.74.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:f7:8f:c1:ee:80:61:df:1e:b5:2a:b4:93:23:47:7e:eb:65:
         a3:1e:8c:bf:9e:f5:66:2b:bf:9b:e7:fa:31:84:53:06:5d:19:
         ce:14:d8:62:c8:7b:42:8b:44:8c:83:37:95:30:f1:a5:e9:6b:
         91:1e:28:76:dc:cc:01:37:22:02:12:ef:4b:2d:f6:35:c0:5a:
         a9:20:0f:a9:1d:83:d7:b3:a4:7d:9a:05:32:42:7d:a4:4a:2c:
         45:41:23:2c:aa:3c:48:eb:51:3b:dc:7f:a4:65:3f:90:bf:ef:
         38:86:78:53:50:07:c6:45:22:c9:93:0a:65:90:bb:11:bd:b5:
         96:41:8f:34:c0:a1:6c:d6:3d:ba:6e:ac:fa:bc:82:1d:dc:3f:
         5b:fa:b9:9d:78:7f:73:c2:57:28:c0:52:86:cc:0e:df:10:b6:
         6c:50:95:b0:25:0c:2b:ac:7d:57:6d:a7:e1:86:ed:65:41:ef:
         bd:8c:0b:4b:4f:60:d5:8f:be:f2:87:81:88:7f:b5:ec:8e:30:
         a9:e2:f0:08:a4:3e:bf:4a:06:79:77:80:d4:6a:66:c9:d0:98:
         92:da:d3:d6:13:6d:c0:e6:23:29:b4:58:0c:c6:ea:47:81:37:
         ac:79:f6:9b:78:68:e1:5e:52:1e:52:f1:a7:ba:2e:8e:61:3d:
         85:aa:d9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:30:59 2026 by rpki-client