Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/06c47406-b7cd-3d1b-a1c3-6131e9cd965b.roa
File:                     06c47406-b7cd-3d1b-a1c3-6131e9cd965b.roa (raw, json)
Hash identifier:          iMQLXZ5fWHvDsuDiDbfsaNZwTOcvilioSkIVOpd7U00=
Subject key identifier:   21:D7:8C:35:1E:03:28:AF:84:0F:8D:24:87:3D:04:32:49:B9:C3:26
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D359F8EE36961B8461D3E8300
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/06c47406-b7cd-3d1b-a1c3-6131e9cd965b.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        68.14.12.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 24 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:8e:e3:69:61:b8:46:1d:3e:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=058e8276-3477-4238-b7a0-437a67b2d79b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:5a:eb:ee:80:ef:34:c3:cb:cd:dd:e7:e1:e5:
                    fb:7a:13:5b:c7:0f:69:c8:c9:83:d1:bf:dd:6c:b6:
                    68:ea:ee:33:9e:73:ba:30:f1:18:0e:78:02:8c:5b:
                    79:58:8b:38:25:47:9b:29:7b:07:77:cd:4f:7f:65:
                    72:d2:d2:9d:c5:a1:a1:cc:0a:eb:d3:50:80:c6:c3:
                    9c:f6:f5:d3:0d:da:02:90:fe:3a:f6:eb:b5:9c:fc:
                    28:8f:84:db:85:5d:ca:b5:52:be:aa:2e:da:7e:34:
                    54:0f:b4:4f:86:25:65:13:67:09:78:6a:10:2a:c6:
                    a5:f4:68:73:9b:53:66:77:e6:bb:71:6c:43:8f:1e:
                    11:b1:12:6b:f5:a4:8f:7a:8d:dd:ab:51:9a:8d:18:
                    ad:40:45:d9:50:18:d1:c8:ff:e0:be:5a:e3:9d:a9:
                    9b:25:70:77:e8:97:c7:7d:55:8c:7b:73:7f:75:de:
                    ec:38:c0:e3:52:67:cd:df:dc:b1:05:ae:0e:f1:a7:
                    01:33:ba:25:90:18:02:d0:47:ac:cc:57:cd:b0:ad:
                    0f:11:b7:61:75:5d:5c:91:43:6e:6d:9f:f0:48:a7:
                    33:2e:90:c1:44:f8:96:16:47:ab:cd:4e:d9:17:bb:
                    fc:fa:be:fd:bc:a9:70:20:e6:6c:68:7a:cb:02:81:
                    3d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D7:8C:35:1E:03:28:AF:84:0F:8D:24:87:3D:04:32:49:B9:C3:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/06c47406-b7cd-3d1b-a1c3-6131e9cd965b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.14.12.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f0:2e:40:44:a0:72:43:b5:88:76:0d:37:d7:6c:da:ef:c2:
         c3:fe:c3:d2:7a:e1:f8:8b:7c:d4:ea:89:f2:66:88:a7:16:25:
         8c:ce:62:fd:87:9c:7d:7b:2a:c2:fb:ec:aa:95:33:2d:fe:1f:
         6f:ba:11:5a:94:be:34:2c:1f:8d:06:fb:54:a2:8f:d9:f0:b2:
         72:28:ed:63:0b:84:70:78:92:50:5a:9b:3b:fa:c9:cc:ed:c1:
         0d:7b:94:2e:52:86:a3:2f:f2:be:27:58:d5:0a:11:e4:41:b6:
         02:ee:77:e3:90:34:3c:04:5b:f9:33:1f:68:6d:89:8c:95:e1:
         93:be:99:3f:78:9d:78:9f:82:64:db:e4:44:bc:4d:02:f9:8b:
         8f:a1:ff:6d:71:29:92:e6:5b:24:6d:6a:85:5c:59:e3:53:37:
         5e:fa:43:0f:64:d8:79:05:a1:8b:46:16:71:a3:15:f9:86:0e:
         c7:17:8f:21:2e:fd:da:95:94:17:cd:b3:c7:21:49:36:1d:9b:
         3d:45:07:45:2a:f9:b5:38:c5:74:b8:92:1f:51:de:5e:78:e9:
         93:99:9e:ae:a8:99:36:b1:65:a4:5d:22:39:f2:bf:0e:bb:2a:
         36:1f:d4:31:af:fe:6b:e4:df:c8:68:b0:35:71:0d:0f:fb:5e:
         35:6e:47:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 22 06:58:32 2026 by rpki-client