Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29b1f831-6c8d-3c93-bae9-39f0db397398.roa
File:                     29b1f831-6c8d-3c93-bae9-39f0db397398.roa (raw, json)
Hash identifier:          vMyx38V7A1jcO7z6cVrfNd+chou1TyfJ/aY9rdtdbfI=
Subject key identifier:   AA:26:3E:18:EF:F0:42:24:83:2E:66:EA:3C:7D:E3:94:55:9A:94:09
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D35A021F1A01C18F902AD1B00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29b1f831-6c8d-3c93-bae9-39f0db397398.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        72.220.64.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:a0:21:f1:a0:1c:18:f9:02:ad:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=ef750370-f58b-4818-bd9a-12d319af1d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:4a:5d:8e:ab:3f:1a:d1:ea:59:a9:08:4b:9e:
                    10:45:ec:24:93:70:2b:d0:97:56:b6:de:f0:29:4a:
                    2c:d2:5b:58:bf:df:e7:d3:29:71:78:28:48:9e:c9:
                    4f:da:b8:a5:9c:f5:96:bc:b4:81:6b:28:a1:4d:5a:
                    42:bf:39:67:da:c8:7b:9a:62:9e:34:e5:16:21:d3:
                    4a:ca:a6:62:d0:65:f1:dc:ae:99:ba:73:a8:77:70:
                    91:65:db:20:b8:93:08:89:14:7f:5f:77:5d:6b:dd:
                    42:78:0e:02:25:37:24:0c:a3:1f:2a:6d:11:94:86:
                    d4:46:44:41:d1:af:65:05:92:76:6d:03:64:68:84:
                    4c:a7:c7:4c:6d:b5:7b:dd:50:db:f1:69:82:f2:b2:
                    a8:d7:0a:f7:c8:ad:6b:f0:fc:d4:18:3f:17:56:a9:
                    93:24:5a:37:15:9b:54:d6:6c:f7:0a:1b:8e:d0:b7:
                    d3:f3:d5:cf:ae:4d:ac:96:f5:9e:19:fe:70:50:c0:
                    07:eb:91:26:f6:1b:99:5e:19:24:cc:b0:61:de:54:
                    a4:9f:b4:26:8e:e8:b1:f5:84:10:2c:f5:38:8a:8c:
                    06:ae:e7:98:3d:e6:4f:ba:a5:14:59:65:c4:95:17:
                    6a:a7:c1:23:9e:69:ac:d5:1f:12:d4:be:a5:37:0b:
                    a9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:26:3E:18:EF:F0:42:24:83:2E:66:EA:3C:7D:E3:94:55:9A:94:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/29b1f831-6c8d-3c93-bae9-39f0db397398.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.220.64.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:22:3d:03:81:9c:59:fb:9d:9f:a8:b3:be:a0:9b:19:9d:08:
         09:80:03:47:83:ac:11:8f:6c:3d:95:fc:b9:fc:40:fe:10:6b:
         87:0e:d0:1b:8c:0f:3f:f2:98:cf:0d:ec:90:48:cd:86:c1:22:
         cc:6d:1e:78:66:6f:94:aa:d2:05:c3:5b:f3:b7:1d:05:8f:b3:
         d0:dc:af:a6:00:fb:b4:3b:18:40:f7:cc:2c:58:eb:41:9a:87:
         c4:33:e2:2d:b6:8e:26:f8:17:62:0c:6e:24:08:77:3d:4f:ff:
         d3:73:34:32:45:ec:9b:5b:40:85:e7:cf:55:92:89:d9:21:f1:
         ab:6a:93:72:6a:b7:06:f3:a8:07:b1:b0:d4:ab:29:e7:df:31:
         1c:c3:95:7a:3f:6d:bd:38:d2:50:d1:5e:e6:22:4c:cc:53:db:
         7d:35:99:63:41:86:0e:d1:56:0f:50:ad:d1:c2:e5:b2:de:d1:
         5e:27:a1:cc:71:09:60:3a:50:e2:ae:ac:72:73:df:73:93:bb:
         35:eb:24:a6:b6:2f:ea:1e:a0:91:a2:56:99:54:88:6b:d8:9e:
         83:db:d3:d2:44:6d:04:46:38:e9:69:99:91:73:23:34:97:8c:
         2c:d7:d6:72:c6:73:47:69:4b:cc:54:7f:a8:a7:f7:63:6d:f3:
         78:f3:43:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 07:04:57 2026 by rpki-client