Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/532286bb-83f9-3ab2-856c-d4b63b5ceb3a.roa
File:                     532286bb-83f9-3ab2-856c-d4b63b5ceb3a.roa (raw, json)
Hash identifier:          OXMxqlkO2LSeDe889MxY2HB4XrlHtIsRCZBFsJrsSdE=
Subject key identifier:   57:5F:84:B0:A4:62:6A:9F:67:F3:C5:97:EA:53:9F:E5:53:63:91:E9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F3FAD2A9AA7A878B00F2C81B0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/532286bb-83f9-3ab2-856c-d4b63b5ceb3a.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        68.3.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:2a:9a:a7:a8:78:b0:0f:2c:81:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=1a68c52e-53ba-475d-9a39-aedf12e85483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4f:03:4b:b4:18:2b:a4:85:56:b3:6a:1e:61:
                    1c:6f:97:95:c6:5e:33:aa:4d:17:5a:21:cb:cf:8c:
                    08:b8:af:eb:90:ec:c2:38:9b:6b:76:b7:73:10:23:
                    3a:2e:50:da:2a:0d:0e:ae:f0:fb:57:8c:a0:26:59:
                    0f:29:f6:f5:1a:b7:ef:7a:c0:a8:22:d5:60:fa:e0:
                    6b:c0:c7:89:1f:60:20:33:a9:f5:a0:a3:da:6d:4b:
                    3f:6c:67:70:50:12:54:b4:b4:c9:8f:ca:6f:f7:ed:
                    80:72:33:0d:4e:bf:21:a1:43:33:e9:7d:c9:22:9b:
                    5e:83:54:22:6c:a0:d4:8f:ac:48:95:ec:80:1c:82:
                    69:1a:92:82:60:b5:84:81:97:9e:d8:ce:0e:48:91:
                    32:74:ec:72:51:ae:e3:f8:87:05:16:02:bf:7c:e3:
                    60:83:41:40:89:0c:a8:04:86:65:12:34:6d:1f:65:
                    d6:dc:9d:27:db:57:5f:7f:57:ef:2d:7b:6a:9f:82:
                    8a:2c:6a:cd:d4:19:6c:d2:1e:07:a0:1e:28:c1:24:
                    0b:95:6b:e3:f8:36:1e:c0:0b:3c:ed:a4:49:51:05:
                    0b:86:de:d9:cc:56:bd:2e:86:fd:97:d6:2e:e0:a5:
                    1a:21:33:18:d6:0f:af:d8:f9:d6:4e:86:7f:27:bb:
                    73:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:5F:84:B0:A4:62:6A:9F:67:F3:C5:97:EA:53:9F:E5:53:63:91:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/532286bb-83f9-3ab2-856c-d4b63b5ceb3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.3.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:a4:8d:f8:c9:92:27:7a:fe:cf:05:1a:b1:ef:af:e7:be:26:
         73:21:27:60:77:2d:09:7e:2c:80:a0:69:ec:a5:6e:f8:20:1a:
         28:46:ea:3c:22:b4:46:2d:5c:ba:9f:1d:73:ad:7e:26:71:1d:
         f7:57:e7:a4:a7:fc:d2:b7:9a:5b:3a:21:54:24:92:69:eb:fa:
         e7:da:51:77:27:2f:bd:f5:c1:64:35:8c:75:a2:fc:5d:2d:fc:
         0b:a6:1a:73:cc:47:8a:72:d4:4a:cd:2b:1d:ed:e9:99:33:99:
         70:fd:15:4d:bf:d7:5e:48:5b:3d:7a:ea:f7:7b:67:fb:49:e3:
         b9:0c:92:c1:61:73:2e:64:3a:ca:ce:3b:df:ec:ac:92:99:b7:
         e0:57:06:bc:c6:6f:94:45:86:3c:e8:05:c7:01:3f:50:71:ed:
         46:b2:ed:31:9c:68:e2:4f:28:5b:47:26:37:56:2e:d6:a4:ec:
         48:84:7c:8a:f7:88:ff:00:06:6a:f4:dd:f6:3b:f3:b2:c4:2f:
         45:23:bc:fc:76:bf:82:b8:82:b6:96:7a:c5:b7:76:f4:37:1d:
         54:c7:e1:bd:d4:f0:c3:cd:f1:c9:26:00:7e:a8:a0:6d:94:20:
         da:05:50:c4:8f:66:0c:f4:c3:66:7f:20:b0:1e:53:4e:3d:90:
         d6:55:5f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:58:54 2026 by rpki-client