Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d711376-55a4-3962-99dd-5961b4896a67.roa
File:                     3d711376-55a4-3962-99dd-5961b4896a67.roa (raw, json)
Hash identifier:          bxaI48SvksxBJyTRzt2Tu4mtefxzc6nLg+dz4+FjoAg=
Subject key identifier:   7E:3D:D1:0D:B2:0A:6A:E4:55:B2:E1:FC:22:25:1E:46:E6:BD:65:DA
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F43DD413CBCD8C0AE61A97C80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d711376-55a4-3962-99dd-5961b4896a67.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        68.104.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:41:3c:bc:d8:c0:ae:61:a9:7c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=d644a8ed-9496-47f7-867c-2984210deb0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3d:5a:01:56:b5:79:f5:b5:f2:75:c6:cc:83:
                    66:79:a1:b3:07:5c:58:c1:50:2b:8f:dd:6a:96:cd:
                    00:06:a8:ec:85:d5:70:07:e3:61:2a:82:3d:c7:a9:
                    34:aa:af:a8:d2:90:be:eb:6c:1a:44:86:ba:d9:4b:
                    2b:5e:fb:64:02:07:ee:2b:76:bd:7e:73:7d:1f:8e:
                    d4:47:79:8b:3a:a4:05:bb:1a:22:8a:4a:88:81:83:
                    bc:a5:7a:e6:c4:83:21:93:b5:71:85:af:5b:a9:b4:
                    61:08:7d:37:fa:ed:6f:f9:f3:96:25:8e:41:46:8e:
                    75:e6:48:7e:e0:5c:f5:10:4a:bd:70:2b:01:00:00:
                    47:e5:14:fd:39:a7:ef:bf:62:57:57:06:c1:db:c4:
                    6c:f2:6f:7a:99:00:d0:2e:8f:eb:6c:62:23:2f:92:
                    0d:21:9f:f1:f5:54:1a:83:84:61:4c:75:17:5c:4a:
                    0f:d7:8b:cd:21:0a:81:52:3f:95:4e:57:6f:1b:4c:
                    24:11:05:09:41:65:91:fe:ca:10:2e:41:3a:cf:de:
                    d5:48:5d:0d:fa:a8:e1:61:f0:99:02:1c:a2:73:47:
                    d4:12:bb:64:75:94:8d:1b:df:0f:67:f6:37:76:e3:
                    f1:c7:4e:a5:83:c4:42:de:35:60:5f:d3:b8:d3:c7:
                    3f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3D:D1:0D:B2:0A:6A:E4:55:B2:E1:FC:22:25:1E:46:E6:BD:65:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d711376-55a4-3962-99dd-5961b4896a67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.104.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:18:00:71:e9:5d:65:a6:39:3b:ee:a0:ea:ae:06:4a:6d:d6:
         46:bf:a4:9a:c9:2d:45:b2:ac:3d:6a:88:4e:6b:10:15:cf:ad:
         bf:de:fe:d3:df:43:43:bf:29:08:25:04:fa:60:3c:97:cd:29:
         d5:ff:dd:e9:99:ff:87:a7:1d:cb:13:65:ca:4c:43:3c:eb:34:
         fa:08:4b:ef:1f:0c:98:b5:4c:4f:b9:92:4c:be:8b:d1:53:af:
         23:7d:28:a8:62:bc:c9:db:d4:d0:75:91:9c:c1:ac:7c:b1:92:
         c3:1d:d3:ea:67:13:a7:a0:85:82:ac:0b:d7:08:45:8e:17:36:
         32:f4:7b:9e:e9:ce:90:2f:19:ba:f4:0e:ef:0c:de:81:f5:a7:
         19:e7:96:79:81:ca:63:31:64:0d:a9:8e:53:a3:95:be:d4:c0:
         7f:68:59:df:a8:7c:cd:31:73:d1:01:38:f3:47:77:e0:db:27:
         29:b4:1c:50:c0:be:57:ae:41:ce:0d:42:5f:11:06:04:d3:f7:
         b8:c2:37:11:d5:1f:f3:2f:28:7e:76:e2:c0:c0:81:37:e3:25:
         9c:dd:3e:63:cc:25:1a:0b:75:f1:13:a9:40:59:9f:61:70:c8:
         40:3c:5f:be:62:7c:48:28:b7:d1:e0:b4:bc:1b:e7:cf:06:aa:
         63:47:20:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:12:32 2026 by rpki-client