Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e576c63-142e-32ec-a9e4-83f6eb479f82.roa
File:                     0e576c63-142e-32ec-a9e4-83f6eb479f82.roa (raw, json)
Hash identifier:          xm+KAl7jpLrfhE+sgt3tnscyRfJO1wHmcew0vqyEJp0=
Subject key identifier:   FF:AF:C9:00:AB:A8:0B:40:D4:29:25:1F:F8:6D:18:13:0B:CE:AB:2B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F42781648199E91720A759200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e576c63-142e-32ec-a9e4-83f6eb479f82.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        72.222.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:16:48:19:9e:91:72:0a:75:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=29724cde-b7e1-4103-8cba-fda39154ff74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:09:b9:70:dd:7a:42:30:db:02:71:d4:28:
                    1a:6e:98:64:b7:6f:71:3a:0c:28:47:ad:fa:f0:85:
                    47:01:c0:01:6a:61:fe:bb:be:e0:31:3e:49:bf:19:
                    1b:08:a6:f3:8f:d6:90:d7:65:9d:16:f5:64:d7:66:
                    31:db:2c:f7:86:dd:85:bb:23:fd:25:9e:5f:5c:57:
                    90:bf:ea:97:a8:69:7e:4c:6d:35:8b:c1:fa:e1:06:
                    dc:63:cc:51:84:11:a0:c8:d1:df:22:2b:13:5d:e5:
                    f4:c1:ed:ab:78:a1:fb:fd:2e:86:29:57:b2:55:06:
                    57:32:86:de:ea:dc:99:6e:ec:98:5a:33:ed:5f:1f:
                    06:36:eb:cd:3f:fc:42:71:03:81:3b:0a:d3:41:f3:
                    b0:42:fb:6d:23:c9:27:77:99:e4:f6:cb:c8:6c:13:
                    1b:2e:f9:70:e2:c0:eb:42:1c:dc:c0:e3:5d:40:2a:
                    0f:ae:84:76:73:e6:31:0f:bb:33:f6:7b:b5:ad:99:
                    69:e8:58:28:ae:e7:66:d0:db:92:50:ab:7d:94:5d:
                    3a:21:a6:ec:4d:31:31:15:80:ee:92:61:c3:f9:c9:
                    47:1a:9f:2d:20:27:60:54:95:e3:d5:6a:fe:57:49:
                    6f:8c:f2:2d:78:90:ff:22:7d:77:15:ff:f8:93:6b:
                    ec:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:AF:C9:00:AB:A8:0B:40:D4:29:25:1F:F8:6D:18:13:0B:CE:AB:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0e576c63-142e-32ec-a9e4-83f6eb479f82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.222.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:e5:a7:1a:1b:d0:d3:8d:82:e2:48:b7:4e:f3:b1:a7:d1:33:
         d9:0f:1e:ff:97:49:0f:02:fe:98:c6:13:93:b3:61:57:8f:6f:
         1c:de:2a:7d:d7:47:b0:5d:77:99:6d:e3:1f:24:86:74:c2:c7:
         df:80:63:6b:a8:6e:c6:7c:1a:e4:b2:1e:7e:4d:77:42:4a:94:
         4e:a9:1f:2b:27:b3:0f:d7:5a:9f:9f:4f:a9:8c:9a:e8:f8:41:
         39:fc:f6:22:59:1a:99:cc:7f:2e:a9:9d:4a:3d:fa:b8:33:e7:
         7f:fd:f8:53:a6:06:02:7e:02:b2:81:8f:64:d5:c0:20:06:5f:
         5e:0d:cb:42:42:34:1a:1d:9c:f9:8f:6b:d7:46:17:6d:a4:b3:
         f1:61:c5:2e:3d:8f:84:bd:99:63:be:d0:88:22:18:a9:81:08:
         f4:68:3a:45:2e:f8:3f:b8:92:69:82:19:15:d7:fe:10:92:95:
         ba:ac:70:05:f1:58:0b:3b:af:10:2f:2e:80:3c:85:82:ae:ec:
         b4:8a:4b:86:87:69:af:e0:73:fd:a5:5c:88:92:76:79:db:db:
         31:32:cf:8b:b7:a4:51:43:03:a6:f0:99:70:6f:d8:04:da:5b:
         c0:94:2b:3a:d4:60:4c:32:a9:b2:3c:19:51:33:91:7f:2b:dd:
         f3:fc:78:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:53:02 2026 by rpki-client