Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28d10951-f9aa-3536-9254-b69ddf95a6bc.roa
File:                     28d10951-f9aa-3536-9254-b69ddf95a6bc.roa (raw, json)
Hash identifier:          /H7SITN2/2C5B4eyK36fjrEizFAC/QhlvCPRIcwvP6w=
Subject key identifier:   D7:84:D3:D9:6F:00:67:2C:38:9F:58:59:E1:25:06:32:91:EF:AF:36
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EA685C27597C319E4E5E79B00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28d10951-f9aa-3536-9254-b69ddf95a6bc.roa
Signing time:             Tue 28 Jul 2026 16:22:12 +0000
ROA not before:           Tue 28 Jul 2026 16:22:12 +0000
ROA not after:            Mon 26 Oct 2026 16:22:12 +0000
asID:                     22773
IP address blocks:        24.253.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a6:85:c2:75:97:c3:19:e4:e5:e7:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 28 16:22:12 2026 GMT
            Not After : Oct 26 16:22:12 2026 GMT
        Subject: CN=378aa838-1a38-4b02-bd8e-0c9ef665d647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:79:d3:f4:63:ca:44:4b:31:23:fc:7f:5f:e8:
                    c7:8d:3c:c6:57:20:d8:63:5d:9d:f2:1d:4c:ed:bd:
                    65:9a:11:da:98:99:61:e3:a2:df:65:73:f2:0e:a9:
                    de:4e:77:3a:81:29:a7:fd:79:52:25:6f:dd:97:7f:
                    09:70:38:97:d5:ae:51:08:80:b1:ae:ac:42:de:90:
                    fb:80:dd:97:06:e1:68:6d:d1:e7:c1:5b:bd:ef:da:
                    98:01:02:65:b8:ff:07:e6:09:51:bc:45:4e:67:fe:
                    b3:c6:f7:e3:1a:d6:79:fd:c8:09:10:95:d1:43:37:
                    4c:ec:fb:f1:73:08:28:de:cd:ad:74:35:11:68:42:
                    be:ae:66:7a:56:51:d2:d7:86:dc:cc:aa:b5:d7:30:
                    4d:7c:bb:96:ed:9e:21:9b:57:6c:7a:30:8f:43:dc:
                    da:64:51:e3:5b:1a:72:90:29:cc:33:2d:73:70:7b:
                    28:ee:1a:0d:57:90:19:40:f9:e4:59:c3:96:ba:cd:
                    be:0e:f8:2a:c7:f6:0c:0c:98:8e:f1:2d:d1:e4:d9:
                    db:76:8f:89:7c:d1:a0:bc:4d:13:fe:ff:39:8e:52:
                    0e:43:83:13:fd:82:94:78:c2:cd:95:7f:3d:79:03:
                    fe:1d:89:da:72:80:04:b0:19:23:bd:38:92:bb:2f:
                    15:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:84:D3:D9:6F:00:67:2C:38:9F:58:59:E1:25:06:32:91:EF:AF:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/28d10951-f9aa-3536-9254-b69ddf95a6bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.253.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:2b:9f:74:15:fa:e1:c3:18:34:38:a8:2a:b5:33:20:b6:e0:
         f1:bc:f5:52:f9:f5:5e:02:7d:63:af:0b:2e:cd:18:59:c9:47:
         00:81:8f:c1:40:ab:f1:03:71:7c:f5:d8:bf:b7:a2:cc:c5:95:
         ed:ed:36:d7:84:3a:5a:7e:2d:fe:3d:65:06:1c:4e:8a:8e:c0:
         03:b3:2f:06:10:4a:66:10:f9:ff:81:81:19:f1:8e:e6:4f:f1:
         6a:8c:17:6f:c7:d9:c3:c9:64:f3:a8:71:ae:1b:3b:ea:60:54:
         6e:0c:26:d1:c7:11:b9:da:df:2d:72:8c:36:e9:ef:5b:68:3a:
         29:c8:0c:88:af:53:21:ae:86:af:0f:68:9f:2b:99:ec:03:4e:
         7c:d3:40:4f:ab:95:df:04:9e:aa:c9:50:f1:86:9f:b6:8b:e2:
         50:26:d2:a8:f3:a6:fb:22:0c:28:f9:55:5a:9b:92:f5:e1:89:
         4b:05:07:29:fb:c5:65:e2:79:d7:4f:7b:fd:f7:bf:d0:9d:86:
         7c:e9:28:1a:4c:2d:4c:64:f8:0e:7b:11:8a:85:f4:dd:0e:16:
         97:53:73:81:4d:af:b8:6e:dd:d2:a9:84:8f:6a:02:25:db:21:
         d4:a9:9b:03:4f:2e:78:34:1a:35:c8:d5:ec:f4:04:1d:83:f3:
         c2:70:65:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:54:28 2026 by rpki-client