Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66b9c0dd-9601-3b68-829b-33993efbf185.roa
File:                     66b9c0dd-9601-3b68-829b-33993efbf185.roa (raw, json)
Hash identifier:          mXJ0EbEFSJS0FAIdAYj36QdYZ3VWe5lSmBjIahO0ddM=
Subject key identifier:   B3:07:34:6E:D2:4F:36:93:7D:E0:2D:4E:61:C3:C3:59:90:30:9F:9D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E5BAF49B713CAB646A43513F0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66b9c0dd-9601-3b68-829b-33993efbf185.roa
Signing time:             Wed 01 Jul 2026 21:00:12 +0000
ROA not before:           Wed 01 Jul 2026 21:00:12 +0000
ROA not after:            Tue 29 Sep 2026 21:00:12 +0000
asID:                     22773
IP address blocks:        174.77.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:5b:af:49:b7:13:ca:b6:46:a4:35:13:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul  1 21:00:12 2026 GMT
            Not After : Sep 29 21:00:12 2026 GMT
        Subject: CN=274da725-7d5d-4743-ad50-220bca82a37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:a2:2c:67:bd:c7:09:70:4f:50:7c:5a:64:
                    42:74:89:25:c1:6b:3d:c0:52:21:42:24:aa:21:39:
                    1a:2f:96:ef:68:3b:0a:52:9d:12:ef:dd:43:14:6a:
                    ce:7c:c9:83:18:cd:99:2c:a4:7b:0f:21:5b:a6:6c:
                    38:92:e5:b7:df:26:73:9c:e9:40:7a:4f:dd:22:be:
                    96:39:e6:fa:4b:da:e7:8f:7d:96:00:4a:74:a1:06:
                    e6:60:4b:e5:17:ad:77:65:82:04:08:63:56:bc:34:
                    14:14:cd:4d:25:8f:92:79:f0:f4:c0:51:24:19:f2:
                    9d:10:ae:de:8a:c3:4b:4c:15:a1:31:14:32:9c:06:
                    ed:b2:27:61:43:fe:78:4e:1f:0d:64:b9:71:a8:2d:
                    e2:5e:95:0a:83:ab:21:ed:bd:fa:b2:0e:de:cf:65:
                    e7:4d:47:8f:42:e0:bb:49:a4:14:c4:95:50:f3:08:
                    0c:f8:f0:7a:74:eb:81:d6:b2:f0:f4:9d:0a:99:8f:
                    e0:97:25:9a:05:ae:ff:17:1f:3b:1a:67:f4:e0:41:
                    ba:75:3f:f1:7f:a8:54:3a:91:04:e3:74:e8:52:3d:
                    99:3a:47:63:8e:77:33:02:e1:9b:5c:3b:bb:ad:bf:
                    6e:76:bb:21:09:a8:dd:8a:2c:5f:8f:e0:ea:29:4e:
                    dc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:07:34:6E:D2:4F:36:93:7D:E0:2D:4E:61:C3:C3:59:90:30:9F:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66b9c0dd-9601-3b68-829b-33993efbf185.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.77.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:36:32:f3:01:e9:57:c0:2e:77:08:53:da:53:4b:64:4d:8f:
         5e:65:37:5f:82:47:79:e2:6a:6c:e9:47:d7:8a:21:e8:a6:41:
         d5:cb:2c:53:00:d3:c1:ff:4d:2d:cf:ac:40:81:fe:83:0c:54:
         ab:17:e4:44:b3:6e:f5:fe:b4:6e:1d:4f:07:35:38:b5:cb:dc:
         92:4c:8e:b2:88:f6:f0:8d:ce:35:3c:1e:cf:ae:13:a4:8c:17:
         78:ee:99:d4:57:41:a6:9c:20:97:b5:1b:48:28:6c:b0:b1:94:
         04:b0:2d:d3:4e:a4:3e:99:0a:c5:24:46:7a:1b:ce:70:9b:bd:
         7b:e3:ae:e5:6c:6c:af:6a:ae:1d:80:0c:f0:62:b3:30:3b:51:
         75:1f:89:86:ab:84:dc:9b:e9:e6:2f:2c:b5:54:01:18:0c:dd:
         2f:fe:95:04:19:f7:24:ef:bc:98:e7:35:d2:f4:6c:57:8c:dd:
         fd:32:2d:87:69:1a:07:df:ad:b9:6a:c1:d3:52:52:d4:3e:20:
         85:b8:e5:09:58:87:8e:e4:8e:04:5d:d4:b2:80:14:18:5a:a2:
         be:cd:8e:a8:9a:93:43:66:36:9b:f9:07:bb:ad:bc:31:32:5b:
         88:81:50:73:63:ef:ff:d2:6b:12:de:ea:a6:ca:79:61:c5:1e:
         c8:ec:1a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:24:56 2026 by rpki-client