Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/13b6f4ea-d0e2-3acf-9eac-0d8c8ae58558.roa
File:                     13b6f4ea-d0e2-3acf-9eac-0d8c8ae58558.roa (raw, json)
Hash identifier:          orWVDepaJF3Yu4uKk6ZqJaxLnckN1kyS4hjNHMHKPNE=
Subject key identifier:   CA:76:64:CE:6C:48:45:F9:EF:D8:C8:5E:E3:71:27:9B:95:02:8D:A5
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F43DD3F4C2C706394565DE280
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/13b6f4ea-d0e2-3acf-9eac-0d8c8ae58558.roa
Signing time:             Wed 23 Sep 2026 01:00:12 +0000
ROA not before:           Wed 23 Sep 2026 01:00:12 +0000
ROA not after:            Tue 22 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        72.207.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Nov 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:43:dd:3f:4c:2c:70:63:94:56:5d:e2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 23 01:00:12 2026 GMT
            Not After : Dec 22 02:00:12 2026 GMT
        Subject: CN=4a7fc45f-a710-4527-a4bb-3f7469f0266e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:49:ab:74:4e:50:1a:a6:27:41:0b:c8:e8:37:
                    27:2c:3e:93:bc:9f:ae:06:e9:8b:94:ae:7a:a9:c1:
                    1e:7f:01:c7:48:86:89:76:04:ff:3e:d1:bc:e0:85:
                    d8:f5:98:34:40:9a:c3:3b:9a:f1:0b:d0:4a:c7:e9:
                    df:93:2c:de:9c:d6:8f:28:d8:ad:5a:9f:b2:35:f9:
                    99:8f:94:c0:9e:51:04:10:41:da:b7:ea:1f:2f:e3:
                    dd:5d:82:1a:ae:60:a8:fc:05:83:23:8c:bd:bd:13:
                    07:c8:69:51:c5:7c:bd:2d:2c:99:e0:59:f0:62:c4:
                    3f:bb:43:0c:40:92:ad:87:3c:ea:b9:32:a6:6a:cd:
                    0a:80:ec:f7:e0:6e:96:32:37:7d:34:fd:08:dd:8c:
                    41:3d:b9:a7:97:8e:e8:0d:e1:3a:de:be:3c:a2:97:
                    00:b9:56:6a:b8:90:00:75:7a:aa:90:37:d8:c5:8c:
                    c8:86:f8:89:27:cc:04:68:2b:13:37:48:a2:5f:41:
                    68:4e:df:41:02:e9:42:71:e7:2f:8c:93:83:c4:66:
                    f9:33:b2:eb:6d:c8:23:40:7c:2d:d4:40:1c:69:58:
                    cc:15:f1:29:3b:3c:16:d2:ed:da:aa:4f:4f:f2:a6:
                    93:c8:63:1d:7f:7b:7b:a1:0e:a6:a3:a9:42:b3:9b:
                    21:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:76:64:CE:6C:48:45:F9:EF:D8:C8:5E:E3:71:27:9B:95:02:8D:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/13b6f4ea-d0e2-3acf-9eac-0d8c8ae58558.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.207.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:a1:26:86:f4:d2:c8:49:5a:0c:20:33:18:63:c9:49:c9:30:
         d8:ff:5f:b7:4a:a9:af:8a:eb:70:11:23:c3:a6:8d:16:0d:ed:
         a5:d0:a7:05:8b:60:92:20:ce:b8:7c:65:ef:6c:9d:35:c7:36:
         39:a7:25:0d:fe:c8:87:56:2e:53:14:15:6a:e7:9e:89:67:2a:
         b0:07:1d:11:18:7c:5a:19:23:02:c7:92:fc:69:d5:59:b9:99:
         f1:3b:15:dc:81:ed:7e:2c:9c:01:fd:b5:c4:8e:18:73:96:ad:
         23:cb:dc:cf:97:41:99:6e:ef:11:29:0f:8b:f4:b2:41:7d:62:
         3c:a1:5d:b7:6e:81:e0:cd:55:a6:d7:82:ad:dd:a2:3c:59:12:
         fa:5c:08:5c:b8:93:d2:ff:e9:c1:ef:e3:80:d4:9e:3e:8c:d4:
         3a:9d:b7:66:ce:5e:76:6b:e6:83:d8:f6:c2:0d:d2:77:4e:d2:
         8f:60:c6:5d:60:f6:df:7d:3d:b3:22:d2:a1:f7:c6:7d:83:74:
         b1:b5:42:62:6e:77:aa:6d:02:d2:de:a6:67:31:7c:8c:81:a5:
         5f:b4:33:14:28:0b:5f:84:4a:62:d4:5e:96:e7:8f:8c:83:f9:
         53:74:fd:d3:c9:23:0a:6a:f0:9a:84:78:26:a6:50:fc:89:10:
         df:2a:61:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 02:46:05 2026 by rpki-client