Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0575a4ec-6bf9-39e7-bdcd-b672db63f8d4.roa
File:                     0575a4ec-6bf9-39e7-bdcd-b672db63f8d4.roa (raw, json)
Hash identifier:          6TgNl913nMATeNnOvb5kMv4XbNo7OVxON/qu5MmhWgY=
Subject key identifier:   62:5E:F4:BA:C4:94:FA:30:16:03:1A:46:77:C0:73:89:A4:BD:61:F0
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4112C01416F58A9DAF3D2EC0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0575a4ec-6bf9-39e7-bdcd-b672db63f8d4.roa
Signing time:             Tue 22 Sep 2026 01:00:12 +0000
ROA not before:           Tue 22 Sep 2026 01:00:12 +0000
ROA not after:            Mon 21 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        68.227.244.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:41:12:c0:14:16:f5:8a:9d:af:3d:2e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 01:00:12 2026 GMT
            Not After : Dec 21 02:00:12 2026 GMT
        Subject: CN=cf32eb3b-20ae-419f-b05a-67714e959eee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fe:90:37:ad:c9:1d:29:4d:2f:7f:f1:23:42:
                    6b:ce:8c:f0:a3:89:ed:28:05:b3:04:02:43:da:e4:
                    2b:0a:03:30:36:d7:76:64:f3:53:99:d6:02:15:d4:
                    96:ab:7f:48:61:72:3c:c8:00:67:47:77:f8:c9:0e:
                    30:2b:5d:9f:6e:98:8f:05:20:21:89:75:bd:14:42:
                    25:7d:35:a5:b1:1c:73:40:d6:42:9b:13:bf:87:a0:
                    b4:f9:33:ea:ca:ab:35:36:a9:93:29:8a:3c:29:43:
                    a7:d3:28:f9:78:78:9c:a5:a2:48:e4:a0:e0:6a:d8:
                    ad:90:8d:f1:ce:70:40:1d:af:49:a5:9a:68:d4:66:
                    16:e3:25:06:15:f7:6a:6a:cb:e4:bc:d8:03:11:c8:
                    12:70:a5:6e:e7:36:f5:ac:79:a7:63:d7:4b:62:9e:
                    e1:af:3e:b6:77:65:7e:35:af:9a:30:e7:7f:e2:14:
                    7a:6a:ef:76:1a:8d:5b:6e:aa:f4:00:13:58:59:7b:
                    ea:02:e4:4a:c3:b8:a1:85:59:e4:9f:12:b9:77:5b:
                    c4:f6:93:84:96:ae:b6:c9:32:69:54:02:bb:ea:d4:
                    3f:5f:2d:d9:ff:04:1a:d7:72:0d:c1:d0:24:ee:78:
                    4a:dd:c1:d6:50:55:7b:3f:94:6d:c8:ae:bc:4b:23:
                    08:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5E:F4:BA:C4:94:FA:30:16:03:1A:46:77:C0:73:89:A4:BD:61:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0575a4ec-6bf9-39e7-bdcd-b672db63f8d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.227.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:89:ec:4c:fe:70:8e:e4:47:d8:bc:cb:62:28:cc:d3:1e:0e:
         16:87:47:3a:c0:7d:fd:d5:48:4d:27:4e:6b:4e:ea:8e:cb:c9:
         09:3a:98:1d:17:6a:9e:5d:69:f3:45:45:dc:63:aa:55:62:43:
         c6:4f:5f:91:89:e8:d4:f9:a7:d9:56:42:db:18:cc:be:5e:51:
         88:fe:80:e1:94:e5:5a:01:c2:f8:24:26:f0:45:bf:96:ad:c1:
         e8:e4:8b:bb:ad:f9:90:ff:d4:ec:5c:72:10:32:17:87:3a:7c:
         29:1d:5f:b9:ac:6a:49:66:08:1d:48:df:d4:e6:57:8a:54:8b:
         44:f8:a0:bf:39:1d:d6:bd:12:b7:2c:f5:80:2e:f9:f8:f9:2f:
         78:be:1a:a9:07:c8:55:ec:37:dc:63:55:5c:f4:64:0b:a6:77:
         52:9a:94:a8:b7:4b:03:3c:72:57:1d:28:2d:99:78:ba:e2:27:
         5f:3a:ad:4d:56:8c:06:69:46:d5:93:fc:5e:69:64:55:b1:21:
         76:a5:15:61:97:ba:85:f4:c2:d3:48:ca:76:2e:6f:6f:eb:ef:
         90:74:e9:a3:c7:8b:b7:47:f8:13:7e:b7:13:0d:ce:f0:68:94:
         f0:39:b3:2d:62:d6:d8:72:d1:e5:2a:05:4d:4a:90:0b:3a:63:
         d5:92:5f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:57:49 2026 by rpki-client