Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/47c34ed4-966a-3da5-b004-572e0d5e251f.roa
File:                     47c34ed4-966a-3da5-b004-572e0d5e251f.roa (raw, json)
Hash identifier:          HOmoDFsTnDzh72IvIJG7HGDtxZIMNjCW8VYcDQem0W0=
Subject key identifier:   4B:3F:34:32:49:4F:D1:C0:93:06:38:21:B7:B4:1F:D8:F1:79:23:8C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E5A49FB8ABFA42ABFFB36C360
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/47c34ed4-966a-3da5-b004-572e0d5e251f.roa
Signing time:             Wed 01 Jul 2026 09:00:12 +0000
ROA not before:           Wed 01 Jul 2026 09:00:12 +0000
ROA not after:            Tue 29 Sep 2026 09:00:12 +0000
asID:                     22773
IP address blocks:        184.186.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5a:49:fb:8a:bf:a4:2a:bf:fb:36:c3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul  1 09:00:12 2026 GMT
            Not After : Sep 29 09:00:12 2026 GMT
        Subject: CN=f90dbc0e-f72c-4f71-bab4-2d4e32e45fed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:22:43:0b:47:d2:b4:ac:d8:2b:26:e8:bf:e3:
                    9b:b2:e9:a2:30:2f:82:b3:01:9e:8f:81:19:6c:02:
                    91:20:eb:75:6d:13:4b:79:22:74:7d:a3:59:72:53:
                    e2:91:2b:98:ce:00:82:aa:1b:ad:fa:87:d2:68:a9:
                    54:40:67:94:a6:ea:bc:1a:4c:c1:30:a4:6b:8b:10:
                    e0:8d:0d:5a:3e:de:8f:51:61:4f:f2:bd:98:7f:c7:
                    97:a5:a3:13:88:7e:5c:51:e1:f3:83:92:88:4c:86:
                    db:4e:53:ce:70:16:44:10:78:3d:18:48:03:88:3b:
                    e6:64:a4:b3:9e:4f:a7:15:3f:fe:ef:9a:b0:2d:48:
                    af:d7:5f:83:69:d2:e5:c9:75:72:55:d0:ae:21:47:
                    82:66:fe:28:31:88:30:23:6b:06:c7:9f:09:2f:75:
                    8f:ae:d5:4b:c6:06:a4:d0:61:6d:13:8c:cf:21:a3:
                    96:09:94:58:5c:5c:3b:ec:24:8a:4c:0c:05:a6:28:
                    26:5e:1e:eb:e5:ee:b5:fb:30:44:1b:32:1c:7e:96:
                    66:b3:fe:7e:74:0d:76:85:66:42:28:11:98:ca:79:
                    c1:68:93:2d:5e:e9:ec:2f:50:c0:4c:18:e9:8f:1e:
                    08:6b:21:cb:02:a8:ef:c6:32:cb:38:3e:3c:16:0b:
                    d3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:3F:34:32:49:4F:D1:C0:93:06:38:21:B7:B4:1F:D8:F1:79:23:8C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/47c34ed4-966a-3da5-b004-572e0d5e251f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.186.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:eb:18:6a:1f:aa:16:79:1a:79:93:8a:a2:ea:53:82:7d:af:
         41:28:b2:06:02:81:54:f3:84:8a:e6:8a:ea:81:68:24:5f:5d:
         93:b7:63:2b:1c:c0:33:a1:ba:bd:00:8a:aa:28:42:dc:06:80:
         4f:38:ec:02:4b:c4:6e:e3:9f:e6:74:83:02:bb:b4:db:5e:ba:
         a8:69:69:0f:15:99:69:f5:38:e4:62:5d:ee:6d:d9:7f:cd:aa:
         6c:a9:53:76:1e:af:2f:9f:e0:ca:0d:0e:27:f4:54:83:8e:6f:
         eb:26:82:c2:3b:f9:e3:9c:9b:38:d7:ac:90:46:5c:ae:30:c0:
         1f:7f:4e:ee:fb:fb:f1:85:06:13:1b:07:19:5e:ea:1b:ba:59:
         fe:00:0b:7e:65:92:45:77:eb:5e:59:92:36:ac:ac:dd:89:af:
         73:2b:46:0a:43:99:ce:ee:05:39:0a:75:dc:2e:3d:8f:7a:dd:
         b4:4f:81:d2:d0:c5:6a:e2:e4:03:16:cb:18:41:6a:b9:80:6e:
         cc:30:13:4b:44:5b:95:1d:45:9e:f0:b7:9d:c0:58:cb:c8:c9:
         22:4c:33:19:7e:88:be:41:42:cf:f0:0a:17:fb:b4:9e:3a:4f:
         ce:9e:29:99:e5:a1:ca:0f:c9:f2:fc:48:3b:01:89:3f:f3:45:
         59:23:71:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:45:04 2026 by rpki-client