Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/200c2f7b-3c37-3ca8-b163-d5c074c1dee8.roa
File:                     200c2f7b-3c37-3ca8-b163-d5c074c1dee8.roa (raw, json)
Hash identifier:          7fCq1Jj7lVf+ALNr4IEeiiaxmjDPOMXrAU1sYhlK9R0=
Subject key identifier:   DF:E0:4C:70:FF:DD:F5:0F:E1:19:A6:C4:1E:FB:8E:CE:A1:A9:99:68
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D35A00D02F63BA7D88AD1B300
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/200c2f7b-3c37-3ca8-b163-d5c074c1dee8.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        68.10.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:a0:0d:02:f6:3b:a7:d8:8a:d1:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=8f9e5e4f-0b72-49bc-870a-7177ada80c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bb:d3:76:22:e7:14:9d:70:b4:66:b3:56:63:
                    e9:ab:86:39:33:48:b4:2c:33:87:f2:92:b9:50:95:
                    c6:c7:02:3c:e6:ab:e1:b4:99:fa:3a:25:9c:99:50:
                    be:09:3d:83:25:9b:c5:f9:88:17:1d:35:cc:3a:36:
                    e5:77:cc:3e:68:ff:29:63:06:f3:1f:ee:0d:96:20:
                    91:b4:2f:d9:69:ae:dc:28:10:b1:90:ef:1e:19:a1:
                    ad:27:cc:a0:c8:57:50:b6:75:9a:54:ff:83:f7:ab:
                    a7:0e:94:c7:3b:a6:f8:39:7a:cb:4e:44:2d:9e:a8:
                    d8:78:65:37:1a:ec:b3:61:0b:a4:0c:4d:f7:43:5b:
                    5d:5a:bb:ac:bb:f3:11:00:70:df:ac:1c:b6:7d:7e:
                    2d:af:80:b7:c0:08:65:b3:d4:20:68:9e:e9:9c:dc:
                    7d:0c:2e:8d:57:6f:14:9d:c2:72:35:7a:86:c5:8a:
                    70:13:70:98:a0:42:8d:29:b9:e9:df:fb:66:b9:30:
                    b9:d8:79:a1:f2:04:31:bd:02:fb:44:26:e8:3e:af:
                    53:34:c7:41:0a:da:4b:e0:5b:74:f0:9f:d2:83:d9:
                    52:b7:b7:1f:b7:c1:8c:a6:d5:b6:b7:d2:96:c2:1b:
                    c7:14:08:40:82:ff:47:73:a1:6a:88:4f:3c:c5:e9:
                    e3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E0:4C:70:FF:DD:F5:0F:E1:19:A6:C4:1E:FB:8E:CE:A1:A9:99:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/200c2f7b-3c37-3ca8-b163-d5c074c1dee8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.10.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:99:2d:b9:9e:fa:d4:83:54:9d:0f:bf:af:c9:16:1e:24:a0:
         e3:6c:11:d8:75:6d:63:9c:50:f5:dc:c0:4b:53:2d:98:9e:15:
         59:ab:99:4e:08:27:38:13:e4:e6:e1:22:ce:21:b6:9c:0c:23:
         58:14:d7:3d:ff:5d:48:66:51:2d:ed:9a:eb:d3:58:f6:32:7a:
         f3:dd:32:10:46:dc:90:0e:d6:4c:83:3a:79:34:03:ca:11:5b:
         a5:c5:97:60:da:89:b0:e8:83:80:c6:b2:5c:91:ae:b5:cb:ea:
         ab:1a:1a:bf:79:65:cf:71:1f:2e:2f:b4:82:88:fb:30:98:a1:
         c2:26:a2:4e:fd:7d:f0:05:ac:d3:e6:5b:d8:61:1b:07:1b:43:
         eb:5f:eb:c9:af:89:7c:29:84:b5:55:9e:6a:22:66:7e:29:84:
         c2:b3:24:a1:89:5a:9e:a2:77:66:5b:6e:9b:63:5f:92:78:9b:
         ee:98:f0:26:8c:94:d0:e6:0c:8c:a5:b1:18:b3:59:fe:e6:20:
         ea:07:f7:fb:c5:52:9e:db:07:e9:77:19:c0:b2:43:72:24:08:
         87:be:f5:98:4a:88:16:68:b3:a3:a0:5a:cc:6b:18:42:be:22:
         c9:f3:fb:c8:e2:62:8f:c4:67:16:05:1f:0b:e8:d8:9b:84:5a:
         0a:d0:a2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 05:36:57 2026 by rpki-client