Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20e63a87-db07-3948-a721-70b39911d06a.roa
File:                     20e63a87-db07-3948-a721-70b39911d06a.roa (raw, json)
Hash identifier:          cWR+J5G1jDpZ1sK4W8d4ZsB1UFrzPXhLR2bYWQCL0D8=
Subject key identifier:   3A:50:35:CE:A5:AD:0F:9C:42:4F:89:39:40:85:CC:37:0D:0E:C7:90
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EF18B4395893D289A70B5B300
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20e63a87-db07-3948-a721-70b39911d06a.roa
Signing time:             Mon 24 Aug 2026 13:18:55 +0000
ROA not before:           Mon 24 Aug 2026 13:18:55 +0000
ROA not after:            Sun 22 Nov 2026 14:18:55 +0000
asID:                     22773
IP address blocks:        68.108.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:f1:8b:43:95:89:3d:28:9a:70:b5:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug 24 13:18:55 2026 GMT
            Not After : Nov 22 14:18:55 2026 GMT
        Subject: CN=d692f756-a83e-417a-a250-fc3199875853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:54:f2:40:65:66:f7:dc:be:8a:e7:84:94:6e:
                    08:15:81:d3:c3:01:51:e4:63:3f:ea:68:fb:fe:ab:
                    26:2d:48:0f:54:b5:47:39:75:4e:39:e8:33:54:ca:
                    50:aa:39:34:fb:60:a4:e8:66:b7:a3:05:22:63:19:
                    56:05:f0:11:6a:9d:a6:b5:78:b5:c7:20:c4:bf:09:
                    2d:ae:bb:04:9a:e8:af:87:8e:e0:d4:f6:6d:7e:9f:
                    aa:bb:bd:65:8f:ef:d2:59:b4:31:c3:5c:f6:0e:9f:
                    58:63:e9:be:c8:98:80:eb:06:07:8c:41:2b:18:35:
                    eb:3b:0a:e6:ad:c4:55:b6:a5:f4:ca:be:5a:bc:42:
                    3b:b8:48:b4:a1:dc:31:11:82:0a:d9:8d:1f:6b:5c:
                    b1:26:9e:de:93:81:3f:70:56:93:31:30:95:10:81:
                    97:21:8b:32:f2:27:e8:a4:1b:cf:9a:59:58:5e:24:
                    fa:fa:be:70:d2:c1:83:d8:2b:e0:7a:f1:e9:d5:ce:
                    a5:28:80:99:c8:f9:3f:1c:7e:1c:a1:82:67:bc:e3:
                    3e:77:c7:fe:97:b4:f3:0a:c2:f6:04:85:41:ce:17:
                    da:a4:5b:01:fc:71:05:de:4c:c5:53:fd:9c:05:44:
                    7a:f0:27:8e:84:b9:ba:f1:db:a7:76:29:65:b6:bb:
                    f9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:50:35:CE:A5:AD:0F:9C:42:4F:89:39:40:85:CC:37:0D:0E:C7:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/20e63a87-db07-3948-a721-70b39911d06a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.108.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:3f:a3:87:3e:61:83:3c:b1:c1:75:43:6f:f4:52:9a:1b:da:
         c7:69:f5:a3:c3:0a:fb:f9:33:16:be:d1:c3:5f:79:f1:08:db:
         b3:cf:b3:8f:c0:18:df:57:7d:30:0e:ec:b8:a7:90:ac:92:d9:
         ff:e8:c7:c2:69:be:fa:1c:70:bc:67:64:d5:22:ae:89:33:3b:
         20:d5:c0:b9:37:88:a0:74:ab:8d:88:09:65:c3:96:3b:2c:8d:
         66:50:5f:86:84:4b:7b:fd:b5:3e:f3:96:68:0c:91:6c:24:37:
         bb:2b:37:b1:74:91:dc:4e:f7:87:76:3a:df:82:5a:98:af:5d:
         ce:fb:a1:56:09:2b:b5:04:7f:08:b8:09:d3:6b:6b:66:d4:c1:
         bb:fa:f2:c4:b9:7e:60:58:13:bd:70:76:10:91:43:67:9c:29:
         e9:32:f0:5d:0d:30:e9:8d:37:70:59:b3:ce:63:0f:f4:21:91:
         ac:ad:59:4d:0c:ce:99:40:a6:20:bd:df:d9:17:64:c6:1e:cb:
         ff:79:b8:e0:42:05:0b:c6:c4:48:e0:46:df:2e:a3:95:09:de:
         85:b8:94:34:6a:e1:f2:83:e6:cd:48:4c:83:d5:3e:28:0f:51:
         a2:90:70:e1:c9:f3:0f:62:69:e4:11:e0:57:9a:a0:4e:79:3d:
         fc:95:54:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xi0OViT0omnC1swAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDgyNDEzMTg1NVoXDTI2MTEyMjE0MTg1NVowLzEtMCsGA1UEAxMk
ZDY5MmY3NTYtYTgzZS00MTdhLWEyNTAtZmMzMTk5ODc1ODUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lTyQGVm99y+iueElG4IFYHTwwFR5GM/6mj7
/qsmLUgPVLVHOXVOOegzVMpQqjk0+2Ck6Ga3owUiYxlWBfARap2mtXi1xyDEvwkt
rrsEmuivh47g1PZtfp+qu71lj+/SWbQxw1z2Dp9YY+m+yJiA6wYHjEErGDXrOwrm
rcRVtqX0yr5avEI7uEi0odwxEYIK2Y0fa1yxJp7ek4E/cFaTMTCVEIGXIYsy8ifo
pBvPmllYXiT6+r5w0sGD2CvgevHp1c6lKICZyPk/HH4coYJnvOM+d8f+l7TzCsL2
BIVBzhfapFsB/HEF3kzFU/2cBUR68CeOhLm68dundilltrv5lwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDpQNc6lrQ+cQk+JOUCFzDcNDseQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjBlNjNhODctZGIwNy0z
OTQ4LWE3MjEtNzBiMzk5MTFkMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGxpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ4/o4c+YYM8scF1Q2/0Upob2sdp9aPDCvv5Mxa+0cNfefEI27PPs4/A
GN9XfTAO7LinkKyS2f/ox8JpvvoccLxnZNUirokzOyDVwLk3iKB0q42ICWXDljss
jWZQX4aES3v9tT7zlmgMkWwkN7srN7F0kdxO94d2Ot+CWpivXc77oVYJK7UEfwi4
CdNra2bUwbv68sS5fmBYE71wdhCRQ2ecKeky8F0NMOmNN3BZs85jD/QhkaytWU0M
zplApiC939kXZMYey/95uOBCBQvGxEjgRt8uo5UJ3oW4lDRq4fKD5s1ITIPVPigP
UaKQcOHJ8w9iaeQR4FeaoE55PfyVVHo=
-----END CERTIFICATE-----
Generated at Wed Aug 26 13:52:37 2026 by rpki-client