Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1abd71e2-0c2d-3512-a6ce-e0083370dc5e.roa
File:                     1abd71e2-0c2d-3512-a6ce-e0083370dc5e.roa (raw, json)
Hash identifier:          dl3XSCyhlEfFaf3eD3RY311RRz1rw0sz3oeWcYoUrv4=
Subject key identifier:   4A:DC:D2:C8:FB:89:C7:DB:AA:A7:E7:4D:02:57:54:60:DF:25:DC:8B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4277DB525A39A94EEB318C00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1abd71e2-0c2d-3512-a6ce-e0083370dc5e.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        72.222.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:77:db:52:5a:39:a9:4e:eb:31:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=ab5cbfd0-3a32-4e2a-a3e7-48f12e20df87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bf:3b:10:53:63:a4:60:56:ad:23:01:93:23:
                    7a:6d:93:78:b7:ee:60:60:a7:66:6d:f0:58:28:19:
                    72:92:53:49:0c:b0:f1:22:50:a1:67:e1:4c:11:6c:
                    ff:4d:9c:d8:2c:ef:b1:03:55:55:4b:7c:80:49:a3:
                    a6:3b:a5:0b:68:51:2f:bf:df:b0:77:aa:00:58:88:
                    09:76:7e:67:20:5c:c8:a6:66:70:c6:33:28:9b:21:
                    18:ac:50:88:e4:b4:33:71:c3:dc:3a:25:06:1e:07:
                    cf:49:44:75:a4:73:d5:f3:e0:5d:9d:0d:18:1c:c0:
                    8b:62:b4:0a:ef:3e:96:59:5b:e1:fa:05:17:48:94:
                    ea:50:02:1c:07:3d:a2:58:23:a8:eb:a6:e6:33:92:
                    eb:30:56:f9:dc:0b:d8:6f:6c:80:ef:ad:32:ea:ae:
                    e0:7f:a6:c7:3f:7f:cb:08:fd:41:05:27:c6:db:8d:
                    6a:4b:3a:4a:6e:6a:55:c6:f7:09:a2:13:01:ae:bc:
                    ca:5c:d2:c9:a1:6d:1e:cc:fd:d8:d8:44:be:3d:16:
                    69:26:38:3c:c3:8a:c2:7b:d7:97:6a:38:bd:6b:4d:
                    45:c9:34:b8:b9:8e:e5:0d:34:36:57:e7:f6:ea:a3:
                    48:d9:d1:88:d6:5b:49:6c:87:e4:17:27:3b:ee:28:
                    05:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:DC:D2:C8:FB:89:C7:DB:AA:A7:E7:4D:02:57:54:60:DF:25:DC:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1abd71e2-0c2d-3512-a6ce-e0083370dc5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.222.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:f1:18:cf:7a:89:74:68:09:3d:cf:83:8d:b2:56:f0:27:ec:
         3c:94:65:2e:e9:f3:be:a7:b5:83:14:e9:ad:3d:4d:05:c4:d7:
         69:0f:c2:34:9b:ac:11:b3:0b:e4:55:7f:e1:5e:93:87:db:04:
         e4:d1:ef:fe:53:c0:49:20:78:00:73:b5:5c:27:35:ba:80:23:
         d5:75:cf:a9:cb:d9:0c:78:df:21:3f:92:2c:69:9f:a6:e5:d0:
         36:4a:9e:04:57:8c:fd:37:63:6f:29:6e:31:6b:ec:5a:66:73:
         1b:c0:94:fe:cc:fe:a3:8a:4c:4d:37:20:8a:76:b0:36:1b:46:
         13:ae:f2:e3:55:b6:08:ec:c6:ab:f9:be:89:1c:2d:3c:5a:ea:
         85:e9:61:ca:78:c3:1d:f0:40:1b:7d:e4:66:ea:94:4e:6a:67:
         6f:db:42:76:a0:af:9d:98:5e:8a:39:98:23:79:12:cb:e4:26:
         97:ee:3b:c4:f8:45:6d:a7:0c:e1:3e:aa:66:6e:4e:f2:ed:25:
         0d:b3:34:4c:0c:3f:be:bf:99:98:96:8c:38:81:59:4f:d0:41:
         4c:4d:b1:3c:b7:7b:18:e6:2b:a9:d5:ef:6b:46:21:7e:d6:f9:
         dc:13:22:98:d9:69:f3:c7:0b:40:28:a9:01:17:e4:3b:b6:f2:
         e9:be:c3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:09:35 2026 by rpki-client