Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1312df3c-9658-3fc5-9b58-0537f88bb69b.roa
File:                     1312df3c-9658-3fc5-9b58-0537f88bb69b.roa (raw, json)
Hash identifier:          LDsz0rQ0zVtxEtgzOreEyoL9KYaBqtuvdo8XqFHSN1Q=
Subject key identifier:   69:2B:35:7A:0A:55:1E:05:5B:6F:F9:35:71:C9:B3:2E:3F:37:51:5E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F42784146E06DA90A6E72FA10
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1312df3c-9658-3fc5-9b58-0537f88bb69b.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        72.216.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:41:46:e0:6d:a9:0a:6e:72:fa:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=ed100b7c-8c06-4e81-88b5-ecf78223dd8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8c:08:80:43:29:8e:69:b6:cc:19:10:59:26:
                    eb:bc:38:15:2b:d1:68:d0:0e:4f:4a:e2:b6:24:c2:
                    24:71:86:f0:a1:27:fd:69:bb:81:df:98:aa:1a:83:
                    84:49:f2:33:51:5c:76:a8:0d:86:f6:b9:ed:f5:0f:
                    5d:74:b6:1a:f5:e7:ba:84:d4:4e:d9:2f:3c:32:e1:
                    ca:11:06:f5:26:1a:8b:b8:9f:99:99:5e:97:2b:16:
                    e0:c9:7c:d6:82:61:8d:a8:c4:37:53:69:9c:81:5f:
                    69:cf:e0:2c:71:22:25:b8:80:06:02:27:1f:6e:ba:
                    8f:9e:fc:e0:f5:3c:8b:f4:3c:36:2a:ba:d4:69:8c:
                    59:d6:5f:ab:51:bb:10:d4:4a:fc:1e:35:d7:11:e0:
                    37:80:f7:c3:95:b1:01:aa:0b:59:e5:23:41:14:bd:
                    f2:5c:12:2a:10:49:f6:a8:d2:e4:89:eb:ab:11:9a:
                    de:26:22:b1:e6:1e:3b:c4:ed:f0:5a:ad:33:f4:ca:
                    44:8e:a4:d9:79:41:e4:52:87:f6:be:b0:d6:74:07:
                    7a:19:16:a3:50:3b:2b:ef:af:7f:5c:f7:17:ab:45:
                    5f:69:2d:80:45:a2:2f:3a:e8:f2:37:07:8e:a6:8a:
                    58:1e:4e:58:a5:6f:3c:4a:af:7b:cd:4e:b9:c5:fa:
                    68:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2B:35:7A:0A:55:1E:05:5B:6F:F9:35:71:C9:B3:2E:3F:37:51:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1312df3c-9658-3fc5-9b58-0537f88bb69b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.216.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:cb:d5:b1:3a:90:42:56:74:7f:e9:4e:37:b6:3a:36:cd:31:
         0f:a8:68:c0:5d:a0:e3:5f:be:2a:82:b4:21:47:5a:57:38:18:
         7e:8b:7c:86:74:a4:03:e3:73:a9:f1:ef:4e:4e:fd:e3:5a:2b:
         d1:96:57:cb:c9:22:6a:e9:e6:bb:f6:83:38:e4:e9:cd:db:18:
         5e:14:ae:27:43:16:ab:7e:d0:70:8b:cd:4c:c0:4d:7a:1a:66:
         ad:55:fe:e7:37:ce:c7:d2:86:37:32:0e:4f:15:2b:73:fb:ae:
         a0:f3:61:79:6a:0f:20:fc:ee:25:02:80:e3:83:7d:bc:72:55:
         e9:49:25:d2:79:19:04:8f:20:b6:dd:ef:3c:80:37:8e:e4:66:
         d6:01:dd:c3:22:3f:d8:14:b1:bf:41:ad:7b:99:ef:a0:9a:d7:
         73:1c:8b:19:31:ea:bd:67:a9:23:70:76:f1:81:7f:03:49:c7:
         4a:0b:87:9b:2f:bb:e1:77:aa:11:8b:83:fb:20:11:e7:33:af:
         15:96:2b:da:b3:ba:72:b6:f6:7e:6c:aa:ed:c9:3c:82:b0:88:
         e4:a2:3a:59:be:29:2a:37:2c:75:05:59:9d:27:c9:32:3c:ca:
         1f:82:95:ac:b0:26:50:77:8a:6f:0c:f5:ec:84:45:c7:c8:97:
         d7:ec:ec:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:56:07 2026 by rpki-client