Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d711376-55a4-3962-99dd-5961b4896a67.roa
File:                     3d711376-55a4-3962-99dd-5961b4896a67.roa (raw, json)
Hash identifier:          F2QhsP+9w9x1b7QI3WrbTlTV1P3OXcXOTbHdkBjVGVA=
Subject key identifier:   37:F5:3B:4B:08:AE:EE:B3:20:BC:88:66:84:FE:87:73:E0:6A:DF:1E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DC135AFF34E0ECC23029334C4
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d711376-55a4-3962-99dd-5961b4896a67.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     22773
IP address blocks:        68.104.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:af:f3:4e:0e:cc:23:02:93:34:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=4e300452-29bd-4c04-80b5-2dfecf81499d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1d:8a:54:76:26:03:fd:86:e9:7f:69:de:59:
                    2f:19:c0:05:7b:a3:23:6b:bc:d4:ea:28:c0:e7:e0:
                    71:37:79:3d:df:66:0e:fd:30:1f:e7:a4:4a:5d:8c:
                    28:e5:cc:bf:69:41:cc:3c:12:75:ec:83:ae:0c:22:
                    e5:a6:98:3d:08:8e:b0:eb:d3:f6:6a:7c:7d:7f:75:
                    f8:90:4a:98:e1:64:1b:a5:3b:b9:17:1d:08:25:d4:
                    a7:80:ac:51:55:b4:a1:17:e2:96:6e:fa:03:29:17:
                    0a:bc:e5:e3:27:93:47:87:ee:3f:8c:3d:ff:36:3f:
                    1b:56:0c:04:b9:78:89:d3:17:b1:be:f0:97:76:b2:
                    ea:91:ef:aa:e9:94:cb:c5:5b:10:cc:61:5f:6e:19:
                    6f:ec:4b:5d:9c:87:c1:4f:be:88:ce:f5:85:f9:ec:
                    e4:b7:a2:a1:6d:96:29:90:0a:f9:87:71:ce:a0:03:
                    ac:fa:d5:e7:9c:15:20:be:28:ea:e8:f3:ad:6c:1e:
                    9a:4c:46:b3:1d:c3:14:e6:1d:9b:72:b2:76:40:df:
                    2b:b8:08:59:70:1e:3c:da:55:1f:60:e9:bd:3b:82:
                    11:32:b0:56:3c:0a:62:30:04:f0:85:96:5f:77:b0:
                    2d:4a:98:1a:de:78:d5:08:b3:15:10:59:58:19:61:
                    6a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F5:3B:4B:08:AE:EE:B3:20:BC:88:66:84:FE:87:73:E0:6A:DF:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3d711376-55a4-3962-99dd-5961b4896a67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.104.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:56:c8:30:1f:f7:ac:0c:9c:2c:44:53:72:e2:9b:a3:c4:0f:
         58:7d:8b:ab:1f:9b:9e:a5:51:80:48:4a:19:d3:6d:87:a1:aa:
         31:9f:ee:b0:93:4a:c2:5e:8c:67:60:67:ff:59:55:cc:be:4b:
         c1:df:2e:6d:ab:b1:8c:60:8d:5f:24:a5:02:7b:4b:48:fa:fa:
         e0:8d:f1:54:03:49:98:30:e9:cc:6d:a7:be:1f:44:37:72:c9:
         20:ab:e3:2e:7a:5c:36:cd:92:4c:df:76:b9:a8:2c:38:75:78:
         b5:11:d5:77:64:a7:17:ce:74:4f:21:db:08:95:bd:30:f9:00:
         b1:f9:3e:24:b0:17:60:22:11:af:c5:0f:1a:59:e8:c4:76:63:
         df:af:d1:7f:92:d9:08:97:13:98:d9:ac:70:62:ad:76:24:ab:
         a1:40:4e:6a:ab:38:d5:39:84:de:1d:74:7b:cb:df:00:82:27:
         c5:1f:1d:88:4b:2c:94:23:81:44:d1:43:be:79:f6:3e:89:5e:
         66:e3:b5:a5:d0:cf:01:e0:5c:a7:27:5c:af:81:5a:63:33:48:
         1b:99:54:b2:10:e0:e7:0e:16:59:87:c2:63:eb:32:bf:ca:76:
         31:cc:d8:37:0b:7c:e8:10:8a:ab:d6:ed:7a:45:24:bf:d9:4f:
         ed:f1:8d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:06:19 2026 by rpki-client