Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c03b926-d2f5-3dc6-8d35-4891b6f7c4f2.roa
File:                     1c03b926-d2f5-3dc6-8d35-4891b6f7c4f2.roa (raw, json)
Hash identifier:          GxO63cPSlwhQG7+nWi9te4A8dG3bGRiNvlI0OM/csBc=
Subject key identifier:   B0:2D:B6:AB:F2:93:41:8F:6C:11:84:A6:9A:96:26:2C:21:40:9C:B7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F458872629C1E1EA6F6A21760
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c03b926-d2f5-3dc6-8d35-4891b6f7c4f2.roa
Signing time:             Wed 23 Sep 2026 15:21:09 +0000
ROA not before:           Wed 23 Sep 2026 15:21:09 +0000
ROA not after:            Tue 22 Dec 2026 16:21:09 +0000
asID:                     22773
IP address blocks:        68.2.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:45:88:72:62:9c:1e:1e:a6:f6:a2:17:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 23 15:21:09 2026 GMT
            Not After : Dec 22 16:21:09 2026 GMT
        Subject: CN=3d84d83b-7499-4eba-a721-496f310b63fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ad:a7:8d:c5:d1:26:5d:e6:34:4e:77:c1:1b:
                    df:55:55:99:39:3d:29:41:b9:3c:11:5d:b3:2b:27:
                    35:4c:7d:3d:02:f5:85:35:ea:6e:fb:a3:00:6e:c8:
                    34:88:ca:77:81:21:ed:fd:ff:78:2d:5b:cd:29:4b:
                    20:5d:99:3f:09:3d:10:61:91:40:da:8d:c6:3e:57:
                    ac:3a:0e:fd:8b:2a:7d:08:fc:8e:3c:d2:29:f6:35:
                    de:b7:ed:b7:d1:93:54:fd:88:52:21:84:0e:25:b0:
                    e0:1f:6c:b6:7b:01:b7:cd:26:75:45:de:7a:fb:2b:
                    a8:05:c7:b7:ab:09:5f:f4:3a:1b:13:3b:ec:cc:47:
                    ec:55:e4:78:43:74:6c:4e:99:64:21:d7:e0:9e:49:
                    16:10:f8:b0:f6:8a:c9:12:da:7e:50:ef:60:fa:24:
                    48:ec:c7:fb:94:0c:23:94:22:03:10:ea:83:18:e4:
                    88:eb:0b:a4:bf:2c:b5:57:80:ba:e5:31:47:b2:17:
                    fc:f3:16:d1:95:1e:2a:f5:39:bc:5d:88:69:cf:da:
                    fc:ee:db:bd:0f:04:1c:f1:db:d6:d5:93:66:aa:4d:
                    55:5b:57:f3:51:8f:a7:88:12:c0:d2:9c:95:d2:a0:
                    f5:25:06:12:1e:38:c1:de:3d:6d:e0:c0:33:e5:65:
                    d1:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2D:B6:AB:F2:93:41:8F:6C:11:84:A6:9A:96:26:2C:21:40:9C:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1c03b926-d2f5-3dc6-8d35-4891b6f7c4f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.2.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:24:58:86:90:07:a4:70:28:5e:9a:c3:6a:20:3e:08:b8:04:
         0d:b8:ea:69:44:17:4f:7b:87:96:c8:40:a8:2c:16:0f:8f:c9:
         c1:a9:2e:c6:cc:c3:42:e6:de:35:0a:c2:43:11:e5:e1:ab:5a:
         45:cf:8b:6c:48:36:08:a8:77:ec:05:10:40:a2:32:7f:5f:0c:
         83:ac:ee:d8:bf:4d:68:09:4e:6e:d9:df:c4:a5:a9:a9:c5:5e:
         ad:b3:13:d4:4e:1f:cd:f4:68:7b:34:2a:cd:2c:95:6b:3a:84:
         3f:eb:56:6a:06:bc:40:2e:12:68:53:2a:01:23:ee:b0:ac:ca:
         44:16:81:67:43:c6:fd:d7:78:fa:79:79:00:48:dc:8a:61:79:
         01:6a:0f:a1:70:92:c8:30:8d:6b:e6:f4:ae:4f:37:03:6f:c6:
         0b:30:86:1a:56:d6:68:fe:2e:df:3c:05:02:29:bb:76:f0:af:
         b9:73:3b:5a:c3:19:2c:3c:d7:e7:80:b5:1f:93:62:de:6e:31:
         2b:d3:74:60:20:d0:cc:16:50:25:3b:67:46:15:e1:ac:fb:7f:
         cd:e3:91:31:bc:df:ce:d6:1f:ee:a1:58:54:2c:0c:52:93:dc:
         41:6c:35:3a:33:51:78:14:de:26:00:0f:17:94:b6:ce:c0:b2:
         15:1f:ed:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:12:19 2026 by rpki-client