Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/043b9134-dece-3458-a4ce-c2581a19c198.roa
File:                     043b9134-dece-3458-a4ce-c2581a19c198.roa (raw, json)
Hash identifier:          pPWGMfhYxD7kkDsTPt1K+6Qlep/By9CcKFRfDw/X0iI=
Subject key identifier:   B5:A6:BB:21:67:A2:85:EA:E4:CA:88:9D:AC:02:04:FD:9B:E3:AF:62
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4112ACC4AC6C5756F4C7F100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/043b9134-dece-3458-a4ce-c2581a19c198.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        68.225.204.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:ac:c4:ac:6c:57:56:f4:c7:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=5aaf0b74-8d5b-40eb-b215-423854902b77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a9:87:78:5c:d9:34:44:ce:4c:56:09:1b:ed:
                    be:d5:41:27:e2:d5:d6:74:e2:93:47:15:04:ba:71:
                    75:4a:88:97:18:c5:10:0d:65:a3:76:fe:40:66:1d:
                    cf:4f:3c:4d:a7:9a:a8:3b:b3:b9:82:0c:3f:ac:c4:
                    97:2e:84:ef:82:1f:57:bf:f9:84:d3:fe:5c:5c:d7:
                    a1:87:f4:9b:f3:75:f6:5e:2c:c3:7e:9e:85:57:d1:
                    a6:1b:4b:56:31:fd:84:0c:8d:01:f2:bb:34:18:36:
                    a3:0f:33:9e:49:b0:bc:93:c3:f8:fc:ee:be:27:35:
                    e4:62:43:8a:0c:dd:d5:ee:94:97:82:ca:0e:a5:d9:
                    3c:d3:f6:1a:68:f3:e9:46:b6:26:68:aa:22:e3:60:
                    bf:72:3e:84:9a:61:0e:0d:53:9b:22:e3:f8:0c:07:
                    db:6c:b3:67:36:b8:54:a5:60:ce:80:17:8d:46:c3:
                    73:1d:02:ca:df:14:a0:98:4f:b2:94:06:bd:6e:0b:
                    76:0e:68:a2:6a:da:b6:5b:94:dd:7f:f3:45:c8:6c:
                    41:b1:2a:2a:c1:2f:a1:13:cf:a0:60:3e:9b:77:9f:
                    13:c9:aa:b6:53:21:a8:b3:cd:39:dd:af:cc:6e:c3:
                    01:f3:9a:82:0a:d9:b3:cf:48:2d:ab:45:79:64:54:
                    41:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A6:BB:21:67:A2:85:EA:E4:CA:88:9D:AC:02:04:FD:9B:E3:AF:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/043b9134-dece-3458-a4ce-c2581a19c198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.225.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b9:7e:d6:cd:c3:ce:3c:00:f2:2f:38:2c:f7:b3:6d:f0:50:
         69:56:81:60:44:db:d3:fe:a3:97:88:69:46:3f:34:b4:21:2f:
         7b:20:b6:ef:34:12:17:04:0b:ff:7f:ab:53:6e:7f:65:91:23:
         6a:2d:a2:7a:5e:12:79:26:38:82:50:80:bc:3b:cc:b4:94:f7:
         70:41:1b:a9:97:9a:8b:e7:41:9e:cb:06:4e:6f:62:c8:d7:e2:
         96:28:ea:c2:70:31:ba:31:2b:b3:63:f6:03:94:6a:3f:f2:5c:
         93:11:8c:b0:b3:77:28:74:9f:ef:a6:0a:c5:c1:76:b9:45:c9:
         21:03:39:d3:bc:0b:23:fe:c9:31:8b:7f:c8:c7:d7:5e:92:46:
         00:31:74:b7:d2:41:db:6d:1a:c6:07:34:ce:db:65:ad:cd:a7:
         dd:07:ca:ee:e4:09:85:6b:fc:0b:ba:7b:9a:03:c7:8c:3b:cb:
         95:59:11:e9:ea:2c:c3:a3:38:c0:7c:47:c3:a7:fd:7f:26:24:
         70:de:3e:62:10:f5:ac:35:7b:cc:f1:c5:b7:26:7a:49:80:3a:
         b3:bb:4f:0e:52:86:b9:02:d3:c6:c5:8f:7a:25:96:02:72:7c:
         15:e4:ea:03:83:5b:c6:3c:83:d5:b4:bd:24:41:77:ff:58:8e:
         56:25:66:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:21:48 2026 by rpki-client