Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33319fb4-2080-3ad7-8205-2824a4b5cb01.roa
File:                     33319fb4-2080-3ad7-8205-2824a4b5cb01.roa (raw, json)
Hash identifier:          1rxdaCAGNitrgN5aUQJtwtyk/wF+WZg8wr8D4ttstnA=
Subject key identifier:   9E:F9:63:A7:8E:7B:3C:A4:EC:E9:0F:D6:36:6C:0D:64:20:8E:0F:FB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DBD05E50081189067F63D8B00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33319fb4-2080-3ad7-8205-2824a4b5cb01.roa
Signing time:             Wed 06 May 2026 01:00:24 +0000
ROA not before:           Wed 06 May 2026 01:00:24 +0000
ROA not after:            Tue 04 Aug 2026 01:00:24 +0000
asID:                     22773
IP address blocks:        68.3.34.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:bd:05:e5:00:81:18:90:67:f6:3d:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  6 01:00:24 2026 GMT
            Not After : Aug  4 01:00:24 2026 GMT
        Subject: CN=82fbb582-c0d4-46f7-90f1-f0e4fe55bca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:21:c2:9a:01:f8:15:8a:89:12:1a:0a:20:c5:
                    06:c6:18:d4:27:21:00:6e:37:23:96:61:21:99:64:
                    b4:60:90:ba:38:18:60:e5:a7:e1:4d:20:35:51:cf:
                    bb:65:9e:95:9e:92:94:42:9b:48:60:a7:68:5e:9e:
                    5d:b2:1d:3e:47:38:6b:d8:8c:20:60:73:65:cd:86:
                    ab:46:f5:0f:11:55:f3:6b:06:f1:ae:cf:55:a2:7e:
                    c5:20:cb:ba:ef:2e:6e:3d:cd:79:73:41:84:c2:d5:
                    17:3f:19:d6:8a:03:d3:90:88:90:e8:dd:1c:73:9d:
                    73:3a:7a:2a:61:38:58:be:fe:c3:42:ba:01:8b:04:
                    08:68:53:0d:9b:af:33:fd:13:48:ab:c6:6b:cd:b3:
                    a1:4e:0b:0d:a6:11:8a:8f:0c:fb:5f:03:d7:be:c4:
                    18:bf:84:a1:0b:1d:53:c7:57:6c:3f:e0:7c:8a:23:
                    24:79:6a:ae:7b:df:4d:67:4c:f3:ba:f7:87:36:0f:
                    03:47:ba:e2:73:84:ca:54:dd:36:59:e8:00:c7:a1:
                    9c:20:10:0f:ec:9e:8c:c1:97:d6:45:2a:34:86:36:
                    68:12:ef:c2:c2:fc:f0:a5:d5:10:7c:d0:fa:d1:29:
                    db:e9:4f:8d:8e:48:f0:82:b3:17:69:92:cb:44:30:
                    9b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F9:63:A7:8E:7B:3C:A4:EC:E9:0F:D6:36:6C:0D:64:20:8E:0F:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33319fb4-2080-3ad7-8205-2824a4b5cb01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.3.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:b7:67:61:18:f3:c4:60:1f:e0:7a:a9:f7:65:7c:bf:04:ec:
         11:3d:b8:91:6e:d7:5b:1b:15:58:ab:dd:02:2f:5f:9a:1e:b1:
         01:c7:43:25:1c:37:7c:90:90:09:3a:fa:26:8d:b4:6c:e3:90:
         d8:5e:5b:d1:28:05:93:ac:46:64:38:1b:ff:15:54:c0:c7:78:
         9b:ba:6c:aa:b9:ed:43:54:33:2f:ce:5a:bb:24:3d:39:27:21:
         13:bd:9a:f9:c2:f0:3f:aa:c8:16:87:99:74:a3:9b:17:16:d6:
         48:ed:48:d4:47:9e:af:20:68:a3:20:03:a2:08:94:7f:9a:af:
         b9:30:aa:3a:27:02:38:f7:b6:e6:4b:57:d1:d6:15:95:d2:61:
         e2:27:e3:9e:8e:c0:b0:32:c7:97:9a:af:d9:32:5c:0d:5e:59:
         4c:3e:d5:74:18:a6:c5:bd:84:d1:e4:83:c3:f5:18:4c:6f:f8:
         11:46:af:ef:a6:95:c2:9e:c9:c2:29:94:a5:43:1f:b0:9e:7c:
         f6:0a:0e:85:c1:3b:e0:d1:3b:e8:7b:f8:3b:ee:24:a5:c2:70:
         03:e5:2e:47:97:89:b0:1c:75:e5:0d:fb:d2:66:fa:7c:6f:db:
         0d:2e:00:53:1e:18:01:96:fa:99:6a:38:fb:d0:83:1b:d0:c4:
         2c:08:2b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:37:22 2026 by rpki-client