Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66e92a54-b469-38a8-af10-d5f01d0f4cf1.roa
File:                     66e92a54-b469-38a8-af10-d5f01d0f4cf1.roa (raw, json)
Hash identifier:          9OFTYxSs73QB5PGDsKUdoYrf8hnLQZIu7TrRrD8TX2A=
Subject key identifier:   E5:EE:F5:81:8F:80:10:22:D9:81:A6:DA:13:A0:57:E7:41:57:72:D2
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DBA3B1301B7E1704677A3E300
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66e92a54-b469-38a8-af10-d5f01d0f4cf1.roa
Signing time:             Tue 05 May 2026 01:00:23 +0000
ROA not before:           Tue 05 May 2026 01:00:23 +0000
ROA not after:            Mon 03 Aug 2026 01:00:23 +0000
asID:                     22773
IP address blocks:        68.2.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:ba:3b:13:01:b7:e1:70:46:77:a3:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  5 01:00:23 2026 GMT
            Not After : Aug  3 01:00:23 2026 GMT
        Subject: CN=6e94bb50-7f05-4da4-8dfd-30bd482272ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:22:5e:97:22:f9:3d:9b:14:18:60:f5:16:cd:
                    50:04:ea:0a:f1:80:96:d4:4c:06:9d:5e:df:90:2d:
                    c5:8f:69:de:2d:74:e0:35:8a:7e:55:b7:73:99:55:
                    b1:e3:fb:c1:f8:22:78:c6:1d:d8:92:bc:e9:55:17:
                    e6:8e:13:43:b1:af:d8:ae:12:e7:11:bf:38:4b:83:
                    e9:6c:ec:cb:53:e1:02:cc:9a:34:61:ec:28:ef:30:
                    74:19:6e:ee:dd:ae:00:34:31:d7:7f:b8:4e:a1:d4:
                    8b:bf:7a:ee:76:76:3e:6e:ef:fd:0a:14:96:fb:06:
                    c2:b9:b3:a3:0d:28:6c:4e:dd:8b:f1:6b:8e:2a:c7:
                    28:c7:45:43:73:62:aa:c1:f7:bc:97:81:ac:e1:12:
                    28:61:37:82:52:f6:b1:97:db:10:90:46:48:03:f5:
                    52:da:14:55:b0:ff:ab:66:cb:a7:f6:6a:41:50:2a:
                    50:03:3b:7b:5f:d8:9e:22:3c:94:ee:cc:15:a1:24:
                    e2:b8:0a:96:54:7f:07:1f:93:eb:a8:5e:0a:94:74:
                    a8:e5:0f:05:f2:ba:9d:e8:39:b7:87:3c:5c:35:33:
                    21:38:43:5d:b3:c0:32:01:4c:19:24:f6:0e:cf:0d:
                    5b:9d:8e:7d:22:cf:0d:f8:27:ed:6b:b6:87:01:3a:
                    ce:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:EE:F5:81:8F:80:10:22:D9:81:A6:DA:13:A0:57:E7:41:57:72:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/66e92a54-b469-38a8-af10-d5f01d0f4cf1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.2.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:6c:7f:cb:14:ae:aa:22:3b:29:ac:79:a0:86:4f:89:8c:f5:
         7b:17:04:d0:81:10:e3:ff:b2:5f:2b:57:78:d9:9d:ee:ea:99:
         eb:9a:be:82:9d:c6:c2:8b:ec:8f:93:d7:3a:53:f2:e7:f4:6c:
         0d:fb:53:b4:5c:49:b4:6c:22:e4:51:94:40:7b:62:c0:ed:3e:
         1c:c8:1c:b0:e0:f4:d2:f7:52:fc:34:52:b1:b9:a0:12:9d:2d:
         31:78:0e:d5:15:bb:b5:47:00:fb:80:bb:b8:19:e6:32:d6:d9:
         3b:79:b4:cf:02:49:df:77:25:e3:bb:a4:5e:3f:82:4f:68:e9:
         5a:4a:1d:6d:6f:7b:06:de:5a:43:a3:f4:6a:35:9e:b1:cd:de:
         69:79:b0:6e:12:90:9b:4d:b8:7a:99:a5:6b:87:69:30:5b:bc:
         ce:40:0e:39:0d:0c:8b:1b:9c:2d:4f:c6:6e:e9:35:66:2d:8b:
         5d:3f:50:1e:eb:2d:55:f8:cc:92:52:89:8b:48:24:17:86:8d:
         fc:33:d6:d5:f6:5a:68:33:48:bd:8c:b6:16:b8:6a:37:d1:40:
         a8:68:94:7e:f1:70:3d:b0:22:c9:b3:77:b9:29:5d:10:b3:b5:
         83:4d:25:66:6d:17:b8:a2:cc:f7:94:40:e6:c3:be:ff:32:a4:
         a9:1e:9e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:02:23 2026 by rpki-client