Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33f4d1bd-cbb5-3d6c-858a-f73d243bea49.roa
File:                     33f4d1bd-cbb5-3d6c-858a-f73d243bea49.roa (raw, json)
Hash identifier:          fJqeDvxROln+NyCHf1OGw8PtTZLWvpHxqL8ukgCu3ow=
Subject key identifier:   C4:F7:11:BE:AA:79:49:94:B9:BA:EA:1C:47:6A:24:95:BC:C4:4D:D7
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F4278547CD3FA0E27A0C100C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33f4d1bd-cbb5-3d6c-858a-f73d243bea49.roa
Signing time:             Tue 22 Sep 2026 13:00:12 +0000
ROA not before:           Tue 22 Sep 2026 13:00:12 +0000
ROA not after:            Mon 21 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        72.216.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:42:78:54:7c:d3:fa:0e:27:a0:c1:00:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 22 13:00:12 2026 GMT
            Not After : Dec 21 14:00:12 2026 GMT
        Subject: CN=96af5418-e0fc-4127-9869-123980aa5f27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3c:d6:eb:3c:03:0b:67:9f:85:a0:9f:7b:fc:
                    20:7d:4c:d4:60:8a:15:36:38:50:6e:f8:e7:62:52:
                    1d:e9:78:8b:09:24:11:e6:32:b0:02:01:93:3f:cc:
                    37:bc:1d:5c:6a:79:cc:f2:1b:17:f5:2d:d7:7e:7d:
                    fe:bf:5b:8f:95:2e:09:6a:17:b8:3d:86:2b:ed:3b:
                    e6:5a:7e:f5:6f:c8:bc:ed:fa:7e:94:b6:ef:7c:5e:
                    d4:28:1d:fa:27:2b:fc:21:a0:55:62:60:3c:8e:79:
                    a9:e4:c5:c9:31:3e:5b:3e:d4:a3:f5:8b:93:98:00:
                    6c:20:e3:fa:c9:f0:de:ba:dd:cc:e8:5d:e9:8a:b3:
                    f8:a9:78:13:03:f5:8e:ad:03:ab:c2:7a:19:68:7e:
                    5f:32:b0:9f:9a:52:0b:38:58:f5:05:f0:26:a3:3b:
                    48:8d:87:64:e7:c6:a2:eb:96:07:99:7e:ea:4d:d2:
                    a5:78:e0:bd:d0:05:88:96:0d:ad:56:04:b4:31:bf:
                    66:0c:75:e0:c3:f0:df:4d:15:a4:0f:d7:43:0e:d7:
                    ed:36:e6:4b:26:2d:51:71:07:1e:4d:22:58:27:20:
                    50:dd:f3:a3:35:99:25:e2:54:b1:46:ab:85:3b:c5:
                    91:04:20:7f:f4:ab:ad:ff:2f:b7:02:01:ae:fc:e0:
                    8b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F7:11:BE:AA:79:49:94:B9:BA:EA:1C:47:6A:24:95:BC:C4:4D:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/33f4d1bd-cbb5-3d6c-858a-f73d243bea49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.216.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:b0:81:ae:87:81:d3:d8:7a:33:46:c5:a8:d2:9e:df:1b:1c:
         2a:6a:eb:67:e9:f2:53:22:20:5d:d1:fe:09:66:76:a1:42:bb:
         d6:2c:11:73:ae:e5:5e:52:4d:df:42:1f:f0:cc:0f:d0:ec:dc:
         b4:0e:41:8f:10:9f:9a:9b:29:00:6b:59:08:29:b1:7c:e6:f6:
         f1:3c:10:c9:6d:31:bd:a0:bb:56:6f:d8:70:44:c0:05:1d:37:
         df:61:fa:d1:11:f9:95:f7:70:ab:a8:4c:02:6a:c1:4f:95:5b:
         fe:cc:40:14:d4:db:a2:37:5a:79:75:06:5b:d5:8b:04:2d:70:
         76:c8:2e:5e:5c:e7:be:8f:08:32:cd:7d:62:47:db:46:42:53:
         45:a7:b9:fc:94:d3:ef:b3:fb:4f:d1:0c:c3:f8:ca:c5:99:68:
         2b:8a:61:90:bb:00:cb:50:9e:d0:5d:60:62:21:f5:fa:ff:3b:
         20:7b:82:52:14:9d:eb:c5:56:19:5e:90:81:42:78:39:53:97:
         da:0e:0e:75:b6:86:db:37:5f:c6:46:97:59:a2:03:ab:0e:72:
         04:2c:e6:ee:ec:6e:93:51:f8:7e:7e:23:cc:87:1e:52:f7:c0:
         fd:b3:8b:de:d4:5d:56:08:68:28:29:11:54:ef:0b:69:2f:a2:
         b3:a0:5c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:40:32 2026 by rpki-client