Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/51354354-f681-315b-bb88-1ad949ca4e25.roa
File:                     51354354-f681-315b-bb88-1ad949ca4e25.roa (raw, json)
Hash identifier:          hJ9AYrbE21o6KxG2hWz80SM4vky4+f7bRyX+/TVkfnA=
Subject key identifier:   DC:70:74:4E:B6:65:84:13:7D:5F:13:22:C8:49:E4:CD:2D:50:71:4C
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F3FAD38AC5F6D44AFE6FE0DF8
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/51354354-f681-315b-bb88-1ad949ca4e25.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        68.3.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:38:ac:5f:6d:44:af:e6:fe:0d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=dbfb6daf-f9e9-4ece-833a-5e21d08206cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c8:1c:cb:83:18:b1:e3:90:b8:82:17:e0:42:
                    d9:e9:8f:cb:5e:60:10:51:11:57:f3:31:47:30:e7:
                    0c:3c:21:44:83:21:f1:e6:a6:3a:a6:2d:6a:dd:c4:
                    a3:4f:fc:96:ed:e7:d1:5f:38:c5:d1:f7:94:71:6c:
                    48:ff:5e:57:3f:dc:9b:2a:d5:5f:35:3f:a1:0a:bb:
                    2c:9a:d6:33:11:75:dd:0b:6f:bf:e8:02:33:ce:a0:
                    bb:f5:34:4f:f0:bd:78:0e:14:4f:9b:c9:45:c6:2b:
                    73:b6:30:6a:f1:c4:7a:de:3c:99:51:8d:c8:00:66:
                    63:df:37:d0:d0:63:35:cb:0b:52:cd:c8:cc:48:ec:
                    79:ff:4d:4c:f1:2f:03:06:3b:5b:58:92:fd:db:4f:
                    12:20:ae:d5:8a:a8:1c:7a:c7:3f:5f:10:66:6c:72:
                    fe:45:9f:ad:0b:12:1c:0d:40:7a:97:85:b8:5c:f3:
                    1d:c3:07:17:88:f2:8e:af:0f:cd:8a:2d:ff:ee:6b:
                    47:ff:0e:b6:5b:50:b4:4d:82:c8:55:0f:76:95:b8:
                    25:7b:00:3c:95:e0:5b:8e:72:8d:aa:84:fa:df:1b:
                    61:84:73:6f:46:89:d4:49:84:c7:e0:54:17:6a:ba:
                    41:d8:4d:a8:ee:c0:d3:e2:43:1c:48:9f:22:cd:11:
                    61:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:70:74:4E:B6:65:84:13:7D:5F:13:22:C8:49:E4:CD:2D:50:71:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/51354354-f681-315b-bb88-1ad949ca4e25.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.3.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:bd:a6:86:2d:dd:63:0b:83:ea:ca:ee:ad:5a:76:16:7c:b9:
         49:a2:6f:c7:9b:ab:b4:4e:1a:fd:c0:39:09:06:29:46:63:1b:
         6e:71:12:3f:b0:8d:0c:67:e3:e2:76:dc:ba:bc:b2:73:54:76:
         26:c0:81:59:dd:48:7d:58:46:f0:57:0a:38:ca:ce:13:a8:b1:
         3c:87:0d:6b:c6:31:d0:aa:79:23:87:f3:68:a4:85:98:ad:9f:
         f9:57:90:e1:2a:fe:dc:be:b4:3a:3f:d5:c0:7e:88:0c:45:4c:
         02:61:d2:1a:24:c1:c3:0b:ff:3f:59:4d:59:a7:f4:a0:76:7f:
         37:06:a9:98:c5:be:d9:c9:ab:9a:ed:04:57:0e:d0:62:6f:6e:
         fc:1f:2c:1b:4a:f2:85:cf:fc:82:76:17:2e:f3:48:4b:ef:67:
         10:36:92:ca:72:ae:f8:b9:f1:f5:22:3e:22:2f:ff:30:f9:f9:
         90:e6:c3:cf:34:90:5f:62:f2:9e:8a:d6:05:ed:b6:73:b4:af:
         56:e7:dd:29:f3:62:45:14:b9:7c:66:2b:a1:12:44:be:8e:b1:
         8c:23:a4:6c:dc:41:cc:a9:d7:a5:04:de:93:be:32:58:b0:fd:
         6e:d5:88:a7:f9:c4:82:6b:45:f7:c1:8b:9f:0e:84:08:bd:4a:
         4f:71:ef:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:42:33 2026 by rpki-client