Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f8f84cb-6016-347f-a631-517d7361b4a6.roa
File:                     0f8f84cb-6016-347f-a631-517d7361b4a6.roa (raw, json)
Hash identifier:          Ysb1EtZBIPu1DCdgYqnpl0um8kx0YJ72byBzpUZmtnE=
Subject key identifier:   F1:0D:B4:E2:C6:96:5E:07:F1:BB:C2:81:20:55:AA:A9:0D:02:50:72
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D359FF576C92041EC81307900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f8f84cb-6016-347f-a631-517d7361b4a6.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        68.14.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:f5:76:c9:20:41:ec:81:30:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=d5e93df6-343d-4342-88ab-df73f5619acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:af:7e:0c:59:b1:1a:c5:04:40:64:a1:3f:47:
                    43:51:dd:ee:b2:12:58:6e:fa:7d:77:60:f4:93:4a:
                    14:cb:b2:e5:3c:e7:d3:f0:1c:cf:c6:13:90:c9:3e:
                    7f:c7:3b:b0:f7:e9:3e:b2:1d:e7:8a:a8:12:91:bd:
                    b5:b2:91:04:55:8e:fd:f2:d3:e3:da:37:3f:2a:e3:
                    ff:ea:f1:17:42:a6:7d:45:1b:e2:9e:d4:7a:46:41:
                    94:58:12:3b:42:90:4f:d3:0f:d8:99:07:a5:cd:00:
                    eb:ee:d9:4e:7e:a5:47:1a:45:7c:b5:f3:f0:39:81:
                    cb:b8:d5:52:c9:ea:12:ab:a1:c3:0c:32:be:1b:d5:
                    59:b6:c2:44:da:4d:dc:1b:04:35:a6:17:ff:8f:24:
                    bb:ac:4c:66:c4:0e:90:40:e6:ce:ac:d2:18:af:e6:
                    11:dc:31:5c:9b:4a:89:c5:8e:9c:86:bf:37:15:25:
                    ae:ec:c6:40:8e:7f:33:b1:19:df:ec:b4:55:7c:4f:
                    75:5d:3d:36:30:64:6e:10:31:21:a4:4d:4f:26:18:
                    43:da:e3:ec:b5:e6:6b:63:ac:44:7d:a2:9d:07:2d:
                    ea:84:51:53:d6:c6:f7:34:cc:5a:ac:42:21:b4:d6:
                    f2:16:24:0e:c0:46:bf:d2:5f:74:9d:7c:d5:16:07:
                    d5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:0D:B4:E2:C6:96:5E:07:F1:BB:C2:81:20:55:AA:A9:0D:02:50:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0f8f84cb-6016-347f-a631-517d7361b4a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.14.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:a6:9f:bd:35:a6:36:ec:44:c5:aa:af:52:08:23:fa:91:5f:
         de:1e:61:ef:9a:3b:e5:35:3c:a3:bc:ee:91:10:1c:b4:56:05:
         a3:5d:9c:69:56:a8:c5:6a:55:54:b1:1b:70:3c:b8:e0:a5:ec:
         36:fd:3d:7d:d9:ec:27:41:01:cd:d6:fe:be:a7:9d:7f:53:d3:
         4c:7d:94:0d:38:58:58:65:3b:88:50:3c:1c:86:2d:d4:3f:e3:
         45:ef:cb:d5:f8:36:21:7b:40:0f:f0:ad:d0:aa:cb:fa:50:93:
         4c:b0:47:08:96:0f:34:a3:5a:e1:9a:51:cc:9b:76:71:46:5e:
         2d:77:75:ff:bc:8f:5d:0a:39:51:44:b6:0b:2c:69:c7:0e:b0:
         5a:34:6d:92:bb:12:4d:41:8f:67:96:49:5a:78:cc:1b:21:ba:
         94:68:ae:90:fb:9e:49:53:6b:74:8c:ea:4b:4e:30:e2:bf:34:
         60:2a:fe:a2:00:b0:73:ad:a7:11:c9:b3:08:90:60:d2:d0:2a:
         a5:53:cd:ad:6c:ce:31:94:c5:ad:37:93:9e:93:bd:d8:e9:44:
         c0:c2:76:7f:e1:f2:22:3c:be:0e:54:e5:ef:e4:ea:6c:37:77:
         db:40:83:3d:5e:5e:00:6c:cf:18:a3:90:4d:7c:b4:29:76:00:
         fd:cd:68:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n/V2ySBB7IEweQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk
ZDVlOTNkZjYtMzQzZC00MzQyLTg4YWItZGY3M2Y1NjE5YWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq9+DFmxGsUEQGShP0dDUd3ushJYbvp9d2D0
k0oUy7LlPOfT8BzPxhOQyT5/xzuw9+k+sh3niqgSkb21spEEVY798tPj2jc/KuP/
6vEXQqZ9RRvintR6RkGUWBI7QpBP0w/YmQelzQDr7tlOfqVHGkV8tfPwOYHLuNVS
yeoSq6HDDDK+G9VZtsJE2k3cGwQ1phf/jyS7rExmxA6QQObOrNIYr+YR3DFcm0qJ
xY6chr83FSWu7MZAjn8zsRnf7LRVfE91XT02MGRuEDEhpE1PJhhD2uPsteZrY6xE
faKdBy3qhFFT1sb3NMxarEIhtNbyFiQOwEa/0l90nXzVFgfVRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPENtOLGll4H8bvCgSBVqqkNAlByMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGY4Zjg0Y2ItNjAxNi0z
NDdmLWE2MzEtNTE3ZDczNjFiNGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARA5AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWmn701pjbsRMWqr1III/qRX94eYe+aO+U1PKO87pEQHLRWBaNdnGlW
qMVqVVSxG3A8uOCl7Db9PX3Z7CdBAc3W/r6nnX9T00x9lA04WFhlO4hQPByGLdQ/
40Xvy9X4NiF7QA/wrdCqy/pQk0ywRwiWDzSjWuGaUcybdnFGXi13df+8j10KOVFE
tgssaccOsFo0bZK7Ek1Bj2eWSVp4zBshupRorpD7nklTa3SM6ktOMOK/NGAq/qIA
sHOtpxHJswiQYNLQKqVTza1szjGUxa03k56TvdjpRMDCdn/h8iI8vg5U5e/k6mw3
d9tAgz1eXgBszxijkE18tCl2AP3NaOs=
-----END CERTIFICATE-----
Generated at Thu Mar 19 07:14:29 2026 by rpki-client