Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/69e90794-13c6-35b4-82d8-096f40c40230.roa
File:                     69e90794-13c6-35b4-82d8-096f40c40230.roa (raw, json)
Hash identifier:          9AXk3uW4t1ia05oIke8VMrHVHmhf0/FgFLj+qecBDG8=
Subject key identifier:   BF:3F:C0:C7:9F:9A:04:09:12:ED:15:AE:4E:49:19:5F:99:4F:C6:47
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E15E4653BA0CF48685DF35600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/69e90794-13c6-35b4-82d8-096f40c40230.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     22773
IP address blocks:        174.65.212.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:65:3b:a0:cf:48:68:5d:f3:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=0c0349db-1dba-4e1c-98a1-2e878a905aa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4b:a9:5c:3c:e6:46:b9:ef:eb:8f:26:1c:07:
                    1b:0f:54:02:09:1e:dd:bf:8f:4b:96:a7:43:a8:23:
                    a8:47:bd:27:1a:70:82:1a:93:a4:c1:97:bb:c7:40:
                    86:e1:f2:a2:49:08:44:d3:17:f4:44:41:84:a1:5d:
                    ce:71:86:cc:6a:c8:f6:e6:d3:ad:74:ca:a8:b7:c9:
                    65:50:7f:f5:56:69:b9:f4:eb:d2:8f:07:5f:b7:e3:
                    1c:2c:ed:1f:75:4c:e4:05:5e:ad:56:6f:79:9f:55:
                    28:06:5e:29:22:d6:cb:f9:77:86:99:b5:3b:3c:8e:
                    aa:68:f8:ea:0e:2e:ac:fa:56:04:de:9a:50:7d:36:
                    00:40:81:00:87:44:59:8d:9f:f6:68:20:ec:76:17:
                    ca:45:3e:55:cd:6b:ab:77:64:1a:3c:df:ab:d2:67:
                    6e:aa:dc:d3:54:eb:ba:1d:a3:e6:d9:12:dd:0f:fa:
                    b4:d9:ac:fb:fd:8e:fe:b5:52:db:9a:ef:97:aa:b6:
                    3c:81:9b:c5:dd:46:eb:46:b8:69:76:93:7b:17:ec:
                    7b:9d:db:59:21:28:99:88:f8:24:19:71:78:a3:2f:
                    8b:81:fc:09:f6:4e:ad:35:6c:82:4a:e0:23:94:a9:
                    cc:36:51:8d:0a:3a:9f:ee:13:c4:a9:dd:60:59:34:
                    fd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3F:C0:C7:9F:9A:04:09:12:ED:15:AE:4E:49:19:5F:99:4F:C6:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/69e90794-13c6-35b4-82d8-096f40c40230.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.65.212.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:7c:00:14:01:68:98:42:cb:06:bb:27:e6:e3:75:16:9b:94:
         70:98:55:e9:f2:ba:cf:e6:02:59:d0:e2:f6:aa:98:55:c9:f3:
         3a:a0:0a:af:fd:82:f6:c3:fc:ce:26:5b:a8:dd:b1:1c:71:59:
         a8:aa:44:32:e3:1e:c4:15:25:59:10:26:09:d7:ed:21:cc:17:
         4f:f9:a6:f2:b4:e2:45:24:24:33:6f:4b:cf:9a:1f:4c:62:e0:
         d3:46:18:26:7f:fd:0d:ae:12:17:60:e0:73:5a:fa:35:3d:b1:
         1b:69:07:d6:3c:8f:08:8b:a5:d1:d9:16:1c:d1:b1:34:81:9f:
         3e:55:52:13:e7:37:4e:b2:45:c0:77:0d:4b:97:5b:01:03:c9:
         c3:0e:1b:cb:53:78:d0:46:4f:f9:bf:e9:0a:51:85:49:83:3b:
         45:8f:9f:c4:a4:2c:cd:90:3c:a5:f9:fc:da:86:5b:28:64:ba:
         0a:4a:0c:3a:8e:90:7e:d1:84:0e:69:37:62:86:69:86:14:3c:
         d2:47:a9:a3:8b:65:19:ce:23:de:da:7f:cf:d1:c0:74:52:47:
         21:80:27:01:60:92:ed:9f:66:38:dc:c6:ac:95:4b:ba:64:5c:
         b6:eb:0b:b4:5f:a7:b9:db:a9:3b:d9:95:d3:ea:bb:e4:9d:d8:
         94:a8:cd:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4V5GU7oM9IaF3zVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDYwNjIxMDAxM1oXDTI2MDkwNDIxMDAxM1owLzEtMCsGA1UEAxMk
MGMwMzQ5ZGItMWRiYS00ZTFjLTk4YTEtMmU4NzhhOTA1YWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgkupXDzmRrnv648mHAcbD1QCCR7dv49LlqdD
qCOoR70nGnCCGpOkwZe7x0CG4fKiSQhE0xf0REGEoV3OcYbMasj25tOtdMqot8ll
UH/1Vmm59OvSjwdft+McLO0fdUzkBV6tVm95n1UoBl4pItbL+XeGmbU7PI6qaPjq
Di6s+lYE3ppQfTYAQIEAh0RZjZ/2aCDsdhfKRT5VzWurd2QaPN+r0mduqtzTVOu6
HaPm2RLdD/q02az7/Y7+tVLbmu+XqrY8gZvF3UbrRrhpdpN7F+x7ndtZISiZiPgk
GXF4oy+LgfwJ9k6tNWyCSuAjlKnMNlGNCjqf7hPEqd1gWTT9UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL8/wMefmgQJEu0Vrk5JGV+ZT8ZHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvNjllOTA3OTQtMTNjNi0z
NWI0LTgyZDgtMDk2ZjQwYzQwMjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkHUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH98ABQBaJhCywa7J+bjdRablHCYVenyus/mAlnQ4vaqmFXJ8zqgCq/9
gvbD/M4mW6jdsRxxWaiqRDLjHsQVJVkQJgnX7SHMF0/5pvK04kUkJDNvS8+aH0xi
4NNGGCZ//Q2uEhdg4HNa+jU9sRtpB9Y8jwiLpdHZFhzRsTSBnz5VUhPnN06yRcB3
DUuXWwEDycMOG8tTeNBGT/m/6QpRhUmDO0WPn8SkLM2QPKX5/NqGWyhkugpKDDqO
kH7RhA5pN2KGaYYUPNJHqaOLZRnOI97af8/RwHRSRyGAJwFgku2fZjjcxqyVS7pk
XLbrC7Rfp7nbqTvZldPqu+Sd2JSozTE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:21:17 2026 by rpki-client