Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b296da1-bd05-3b93-b145-f03434bed59b.roa
File:                     6b296da1-bd05-3b93-b145-f03434bed59b.roa (raw, json)
Hash identifier:          JQnSByEy3llIVUBA/AsIuCm9DWZmtTujLhS7XdHTqpc=
Subject key identifier:   68:67:EA:7A:96:4A:14:EB:5D:98:80:EB:64:10:B0:03:3A:A8:6B:9A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E15E45F240757104B61458F80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b296da1-bd05-3b93-b145-f03434bed59b.roa
Signing time:             Sat 06 Jun 2026 21:00:13 +0000
ROA not before:           Sat 06 Jun 2026 21:00:13 +0000
ROA not after:            Fri 04 Sep 2026 21:00:13 +0000
asID:                     22773
IP address blocks:        68.14.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:15:e4:5f:24:07:57:10:4b:61:45:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jun  6 21:00:13 2026 GMT
            Not After : Sep  4 21:00:13 2026 GMT
        Subject: CN=029ed8c9-59f4-4042-8b39-ccce82233818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5b:ea:22:44:77:bc:e9:95:14:01:2b:b9:d7:
                    a1:55:c3:a8:ad:9d:1e:ae:34:e1:84:ac:b1:f8:ab:
                    ff:63:df:ed:a9:cc:4e:7d:60:c4:bc:f4:27:01:79:
                    70:70:87:80:83:6f:18:1c:fa:98:62:2e:b9:f8:ed:
                    c1:7f:97:0e:e0:71:17:d3:be:41:67:c6:d8:a0:92:
                    84:49:a2:0d:f9:c0:1a:e8:e4:df:84:d8:86:aa:f8:
                    96:c1:e8:1b:3a:04:ed:a7:99:96:e6:4e:18:cf:03:
                    97:1d:fd:41:b1:1d:7d:f0:e9:ab:44:bb:65:ae:b1:
                    60:01:aa:9a:5c:46:a2:a9:4d:b4:b5:bf:02:da:50:
                    ab:bd:ec:d5:41:85:f4:74:dc:3d:c1:45:ff:e4:2f:
                    7c:fe:bb:72:c8:0e:f0:38:92:25:71:58:68:f6:9a:
                    20:19:f8:9a:f1:b5:dd:85:95:2f:c6:f9:6c:63:db:
                    c9:7d:f0:0d:5c:8d:2e:e5:73:35:2e:99:1e:b2:87:
                    d3:ff:e6:cb:a3:27:b7:9e:bb:91:ad:d0:28:1d:16:
                    58:99:27:76:47:54:6b:6a:ca:07:9e:a0:24:64:fb:
                    e3:ed:ca:6b:96:71:82:ff:f2:29:93:0f:25:5e:18:
                    fe:58:2c:b3:f3:77:bd:3d:5f:73:fc:6e:cf:9b:4c:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:67:EA:7A:96:4A:14:EB:5D:98:80:EB:64:10:B0:03:3A:A8:6B:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6b296da1-bd05-3b93-b145-f03434bed59b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.14.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:d2:df:6c:61:e1:22:a5:67:57:5c:12:9c:ca:06:4e:16:1a:
         35:89:11:fe:ea:be:13:75:6c:9b:31:45:b2:50:ec:a3:77:6f:
         76:cc:65:42:86:c9:88:96:b1:2e:67:14:fe:e8:1b:9a:e4:d3:
         d9:a9:73:98:0b:69:9a:1e:0e:bc:5d:f4:40:dd:03:1b:6f:3d:
         25:1f:18:40:f8:29:b9:5e:31:bd:02:a7:b4:2e:a2:1f:76:27:
         d1:d7:9d:d4:0b:6a:26:db:ee:a5:e5:20:36:72:ca:ac:b4:2b:
         47:42:a2:61:6e:60:bc:5e:32:ba:44:ef:19:da:ee:b6:85:d9:
         86:e9:f9:c3:71:b4:eb:4f:05:6c:20:2f:f4:11:2c:6a:11:11:
         f9:7f:20:30:39:dc:f0:46:90:d8:96:ee:23:8f:67:e2:fa:06:
         ca:b2:40:6c:75:11:e9:1e:73:5a:98:cc:85:4d:b8:4f:6a:c5:
         04:74:a2:ad:65:3e:82:20:2c:b3:7d:76:a7:2e:e0:53:1d:69:
         0e:05:dc:7b:c6:64:73:92:cc:de:a3:00:f5:9d:9c:5f:8c:94:
         97:95:82:6e:08:91:d6:bd:7b:58:c6:1b:ae:f9:13:fa:4c:55:
         61:d4:90:b4:eb:47:a2:9a:c9:8e:e4:43:91:ce:ab:34:70:10:
         e5:be:36:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:53:38 2026 by rpki-client