Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bb4761b-84a9-30f1-81b3-6e89a0effdd7.roa
File:                     0bb4761b-84a9-30f1-81b3-6e89a0effdd7.roa (raw, json)
Hash identifier:          QlVRfXsQ3vHDCXDtQ4VfaBFW+uQAlEcPwKVK1M7A8dE=
Subject key identifier:   EF:DF:89:F8:81:B1:6F:03:FE:CA:88:6F:73:09:4E:CF:08:7F:D2:2A
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F5A3336174FEC20A21B728000
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bb4761b-84a9-30f1-81b3-6e89a0effdd7.roa
Signing time:             Thu 01 Oct 2026 01:00:12 +0000
ROA not before:           Thu 01 Oct 2026 01:00:12 +0000
ROA not after:            Wed 30 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        24.250.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Nov 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:5a:33:36:17:4f:ec:20:a2:1b:72:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Oct  1 01:00:12 2026 GMT
            Not After : Dec 30 02:00:12 2026 GMT
        Subject: CN=b4c5bf1f-1488-4cc1-b74b-1ffc05cccca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:00:c8:33:90:a7:f6:7d:07:22:72:d7:ad:1e:
                    35:af:ab:eb:e3:ec:79:5f:ed:75:ca:1e:a1:df:aa:
                    63:8a:ec:7a:db:55:7c:5a:e6:c6:dd:f6:d8:71:3e:
                    a2:50:81:93:04:bd:e7:c2:f3:fb:20:19:8b:44:db:
                    0a:c7:c3:ac:95:19:b8:76:5f:b2:d2:99:ea:04:8a:
                    3d:78:85:b5:41:7a:55:f6:84:07:a1:69:35:15:16:
                    38:4a:0c:ac:5f:4f:75:bb:bc:ed:55:7a:1e:c4:13:
                    01:f9:04:43:b0:a7:79:a8:4c:1a:3a:27:64:42:78:
                    aa:f8:c1:3d:95:18:cf:e5:76:7b:17:98:05:83:26:
                    51:29:17:2d:91:39:4f:5d:92:38:45:66:93:ca:c2:
                    27:e5:a0:f9:ba:1a:b6:56:d7:8f:a1:13:a9:b6:d1:
                    9f:f9:0d:c0:b0:fb:01:cd:14:5b:5a:32:e1:82:55:
                    84:55:d1:55:64:dc:3c:f6:f5:03:ad:21:fc:0d:24:
                    79:2d:6f:2f:6b:e9:a1:54:2b:39:0e:31:99:9f:95:
                    98:64:c2:b9:32:0e:23:d4:5e:7c:5c:60:7a:e9:2c:
                    94:bd:73:53:be:42:e5:00:85:93:e5:de:b7:34:2c:
                    30:58:c6:c7:35:d8:a8:81:7e:42:eb:98:90:0e:a7:
                    c8:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DF:89:F8:81:B1:6F:03:FE:CA:88:6F:73:09:4E:CF:08:7F:D2:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0bb4761b-84a9-30f1-81b3-6e89a0effdd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.250.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:71:55:c0:c6:b2:8b:e1:3f:93:a6:d8:12:06:6d:dd:cd:50:
         a5:3a:c8:54:54:8d:d3:6c:dc:84:f0:75:b9:a1:40:6d:c9:83:
         87:c4:34:e6:be:3f:09:2a:b9:f9:c7:47:79:69:99:50:67:22:
         aa:44:20:e8:bc:09:25:8d:ad:ca:8d:ab:1f:92:44:58:3f:bf:
         91:25:4a:40:5e:27:4f:55:fe:6c:d6:63:9a:8f:e5:b4:9f:2d:
         08:77:47:70:46:3a:ad:26:85:e5:29:e8:9c:c3:f8:c9:d8:e0:
         e5:f7:dd:86:75:54:92:d2:8f:41:96:c9:b4:4f:4d:ce:98:a7:
         61:f9:d1:c5:f5:9d:3f:de:7a:58:f1:50:26:0d:67:c7:9b:5e:
         18:53:0b:5f:db:f3:c5:f2:a3:8a:95:41:86:02:29:57:c2:42:
         77:a2:91:dd:66:95:57:19:5b:dc:2a:fc:54:37:66:9a:17:7e:
         bf:1b:f7:c5:4f:45:df:19:c7:13:f3:00:8c:9a:4a:bf:21:f3:
         56:f1:86:4e:f6:15:36:ff:bc:b3:fb:23:58:4c:14:40:8a:a9:
         4f:ca:87:62:0f:67:d5:f9:e8:2b:59:f7:e2:cf:39:57:19:9d:
         da:dc:f4:b0:9e:58:ca:1c:86:77:ff:0f:aa:ce:0c:b5:d9:f2:
         93:47:4c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:38:03 2026 by rpki-client