Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d48ea37-0549-3951-9c69-8e53a999646c.roa
File:                     0d48ea37-0549-3951-9c69-8e53a999646c.roa (raw, json)
Hash identifier:          fXd5qhIJ1Fl+3cvHL5DL/WbzHaU+eBpdYylP/v70aKw=
Subject key identifier:   6C:D7:64:40:A6:35:0C:E6:54:D2:14:3E:C8:CE:04:D4:A2:3A:B5:76
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F53A5EC9BCD64B2D2B498FC80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d48ea37-0549-3951-9c69-8e53a999646c.roa
Signing time:             Mon 28 Sep 2026 16:41:52 +0000
ROA not before:           Mon 28 Sep 2026 16:41:52 +0000
ROA not after:            Sun 27 Dec 2026 17:41:52 +0000
asID:                     22773
IP address blocks:        174.77.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:a5:ec:9b:cd:64:b2:d2:b4:98:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 28 16:41:52 2026 GMT
            Not After : Dec 27 17:41:52 2026 GMT
        Subject: CN=3c513acd-ec53-4d86-9d35-7a63babad475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a7:e1:03:7f:cc:26:89:29:ac:2d:54:4c:7a:
                    0f:45:e1:e1:74:40:12:cd:fa:ff:da:0f:bb:9d:c8:
                    07:80:3e:45:4f:5e:c6:16:dc:e0:86:19:8d:5a:54:
                    a3:87:d0:87:3b:92:cf:17:ca:7f:99:c7:6f:92:c0:
                    53:81:a5:28:79:0a:84:1e:72:87:99:9c:54:a8:f1:
                    eb:af:bb:ee:e2:a9:4a:bf:bf:ed:d3:aa:35:8a:b9:
                    74:68:78:04:dc:8e:84:bb:0a:82:a4:d6:9f:ec:ad:
                    b2:8c:90:0f:ce:ad:24:36:ac:d5:ba:cb:c6:19:55:
                    8b:5a:f9:3a:7a:19:b9:1d:e7:80:2e:58:f6:a1:25:
                    3e:bf:49:ae:6f:1f:73:46:13:f1:07:8e:38:dd:3a:
                    71:56:a8:47:c4:1a:7d:23:e5:8e:6a:26:aa:1a:0f:
                    5a:6c:0d:b8:03:db:66:87:b1:d0:0f:2f:42:73:ff:
                    49:37:06:7b:f2:f4:28:fa:3e:15:14:67:75:ee:fb:
                    8d:cf:ef:ff:19:54:be:de:fd:a3:fc:e0:02:ab:e3:
                    1c:45:d2:49:4a:83:b2:f2:83:3f:55:88:c5:52:7d:
                    83:16:ee:f0:e8:36:0d:85:7a:00:23:70:05:25:5c:
                    82:66:82:99:1e:dc:c1:40:58:34:11:a5:f0:a8:54:
                    ab:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D7:64:40:A6:35:0C:E6:54:D2:14:3E:C8:CE:04:D4:A2:3A:B5:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0d48ea37-0549-3951-9c69-8e53a999646c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.77.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:e1:26:91:33:aa:a0:b0:3b:3b:d7:9e:03:ff:8d:52:6f:14:
         4a:1e:99:34:02:f2:3b:f4:10:6e:c1:a1:75:b5:08:27:64:d5:
         d7:ed:7b:fe:e1:69:70:52:04:fe:6d:e6:67:2b:e9:cd:56:49:
         3d:a2:89:7f:e0:20:ba:55:6d:8a:9c:34:97:2c:c6:10:98:06:
         7b:0c:31:80:39:68:26:7f:27:a1:94:1c:f3:44:28:3c:6a:56:
         a8:91:77:81:a6:5c:46:9c:7e:c3:64:6e:4c:f5:4e:15:8d:69:
         d9:f2:d2:c6:5d:99:5d:dc:d1:32:5f:f7:d1:ae:96:5d:60:db:
         45:9f:3a:30:f1:2b:0d:a0:b9:a1:6b:e9:3c:5a:e0:b5:b9:a9:
         4d:c3:c8:ed:14:ff:73:b5:73:07:4f:d0:12:86:d7:19:97:79:
         67:af:d0:04:86:e5:22:4a:25:a5:cb:f8:e9:ad:61:64:64:de:
         c4:ac:97:30:cf:5e:b7:10:b7:eb:af:a3:87:eb:68:5d:0a:3e:
         81:07:a3:b5:fc:73:4b:f5:d5:bd:d1:7b:7a:90:f1:c7:f8:4f:
         9b:19:1b:3b:6a:f9:1b:88:ad:ca:6a:2a:87:38:fe:47:2d:9d:
         0d:f7:bd:39:d3:12:85:26:27:8f:b5:d3:8a:14:64:8f:25:92:
         6e:da:c5:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 08:55:10 2026 by rpki-client