Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11093f3b-40da-3263-8237-78c5aa3c4eab.roa
File:                     11093f3b-40da-3263-8237-78c5aa3c4eab.roa (raw, json)
Hash identifier:          ARY6epboXXwkr+KS2US+m13BVj3lZghuR4esLdTf//4=
Subject key identifier:   0C:16:DF:90:DE:95:F5:9D:B3:D4:92:5B:2F:70:21:99:FB:EE:41:D1
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DBE6B1C1C4D308666E3474200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11093f3b-40da-3263-8237-78c5aa3c4eab.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     22773
IP address blocks:        68.231.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:1c:1c:4d:30:86:66:e3:47:42:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=655df4a5-8f4f-4ec0-8285-137dbb1b0559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0c:9a:18:99:f2:ef:18:a2:7b:73:ba:38:16:
                    b9:83:b1:de:2f:42:04:a5:a2:53:2b:de:54:50:49:
                    50:32:9b:72:26:4c:20:61:f3:15:09:29:1b:70:68:
                    3b:8e:d4:11:43:a5:05:37:5f:ae:54:8b:89:80:cf:
                    bc:46:de:51:4d:1c:89:94:ff:67:e8:c3:f1:4a:e8:
                    47:31:1d:7f:f2:c7:dd:62:a4:c7:50:64:cc:02:d5:
                    a5:28:72:18:03:b3:a4:43:88:e7:7a:66:1a:88:c6:
                    3d:53:9c:8f:2f:75:f5:2e:05:72:bd:a1:ff:77:73:
                    ed:89:40:41:ca:9d:b3:63:43:39:40:e8:92:af:68:
                    2f:ca:ec:96:a5:a0:d4:50:8b:15:a0:ff:c1:10:8d:
                    23:82:d1:f3:bb:5e:f8:22:54:fa:f6:bb:0a:b0:8f:
                    2b:35:55:25:7a:db:a0:0d:57:0d:36:39:65:d3:6f:
                    93:ad:38:43:fb:e8:bf:c2:82:f3:26:01:bc:16:93:
                    70:6a:94:81:81:61:b1:d5:84:af:91:af:25:e1:07:
                    21:a0:4f:a5:76:58:97:5e:6a:59:a4:00:a8:f9:6c:
                    a6:a7:b9:37:4b:48:02:34:8c:ad:19:e4:f6:69:51:
                    d1:db:06:0b:06:ba:c0:39:0d:66:ba:7d:9a:5f:ab:
                    9f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:16:DF:90:DE:95:F5:9D:B3:D4:92:5B:2F:70:21:99:FB:EE:41:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11093f3b-40da-3263-8237-78c5aa3c4eab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.231.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:3a:ed:d3:08:72:2d:ee:fb:fa:97:89:26:d1:59:f1:bd:d3:
         6c:8d:15:c3:41:6f:fc:1f:91:9b:11:b2:f5:78:85:35:d3:67:
         49:e9:50:f6:14:4c:fe:8e:69:c8:d8:1d:02:a9:f5:a7:95:c1:
         32:9e:cd:d2:1b:b8:14:8b:bf:ae:8b:6c:ba:1e:10:9e:78:70:
         a8:68:4b:ea:5c:b7:68:45:5d:5e:b8:49:9e:1e:60:59:9f:32:
         3e:ea:95:bc:c4:e0:10:97:ef:90:e9:5e:42:d7:0a:ba:b8:80:
         5f:b6:f7:f9:4f:a5:14:43:cc:3f:ae:bb:e8:d8:da:fc:e2:fb:
         89:21:72:5a:e2:30:e9:a9:ce:c8:dc:c6:b5:3e:6c:5d:52:22:
         9c:a5:47:22:a4:af:9c:17:5b:6a:18:be:34:e8:e4:d7:0d:69:
         20:b7:f4:3d:5c:3f:60:bd:02:07:7a:fd:4a:10:3b:e4:83:39:
         62:ae:85:1b:d8:81:0b:32:c6:f7:da:53:19:d1:0e:6d:d3:76:
         1a:5c:27:09:0b:27:d7:bd:de:97:e4:75:5b:0a:58:13:19:be:
         2c:28:8a:0c:15:5e:b0:26:40:c4:c9:0f:35:fa:9d:69:85:a3:
         ed:fa:78:41:9d:af:2a:31:cd:94:a4:f9:4c:27:e0:66:8f:06:
         f8:0b:ce:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:28 2026 by rpki-client