Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dfcfde6-4afc-30f4-b858-842833f54e68.roa
File:                     2dfcfde6-4afc-30f4-b858-842833f54e68.roa (raw, json)
Hash identifier:          pcmo3M3+Nd2AS29G+wAg1SnC8THwusQoAJxrCAAomdI=
Subject key identifier:   7C:7A:51:31:04:A7:A3:17:1B:37:F1:55:F0:C8:27:77:87:D6:1B:A5
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F539E241D2A4E92D34E9E2620
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dfcfde6-4afc-30f4-b858-842833f54e68.roa
Signing time:             Mon 28 Sep 2026 16:26:11 +0000
ROA not before:           Mon 28 Sep 2026 16:26:11 +0000
ROA not after:            Sun 27 Dec 2026 17:26:11 +0000
asID:                     22773
IP address blocks:        24.249.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:53:9e:24:1d:2a:4e:92:d3:4e:9e:26:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 28 16:26:11 2026 GMT
            Not After : Dec 27 17:26:11 2026 GMT
        Subject: CN=7545828d-9ee2-4e69-93d8-60780a5a3063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:57:8b:6b:b9:b0:e6:13:9f:bd:13:93:d3:65:
                    28:ce:d7:65:e6:78:13:b3:2b:22:5d:f8:02:2c:d1:
                    73:38:e7:9e:5d:16:19:75:ec:af:2e:bd:88:83:d7:
                    ed:70:95:cd:11:f7:a4:ad:09:a4:61:78:4b:99:01:
                    70:70:66:13:ea:1c:41:d2:29:97:c7:50:01:0a:e6:
                    65:0c:1f:52:ab:59:57:e4:74:2a:84:53:a9:c5:5d:
                    d3:e7:d7:b4:3a:f0:e3:3c:91:ef:1d:b8:1d:d0:ef:
                    3b:9c:41:7e:4a:e0:59:92:52:57:51:db:29:2f:18:
                    34:61:62:ff:df:77:ef:20:35:08:f8:ab:25:ec:19:
                    c1:6b:14:ad:68:04:82:d3:61:e1:ff:a4:4c:de:9d:
                    81:75:09:fb:6e:60:58:bb:5f:de:a6:f2:df:d1:34:
                    1c:bd:55:89:4d:40:8e:ec:8c:92:24:bc:e4:14:71:
                    f6:90:bf:6f:5a:1d:b5:11:4e:8c:7e:78:ab:42:1d:
                    88:54:8e:84:3c:13:42:15:c6:f3:bb:a0:35:cc:ad:
                    b9:7d:25:4f:ff:5b:9f:f4:2c:01:b6:00:58:ab:63:
                    00:62:98:d3:b4:02:21:8b:d9:5c:c7:b0:48:c3:30:
                    62:7c:d4:64:8c:48:1c:67:f1:37:a1:8c:fe:15:62:
                    e1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7A:51:31:04:A7:A3:17:1B:37:F1:55:F0:C8:27:77:87:D6:1B:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/2dfcfde6-4afc-30f4-b858-842833f54e68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.249.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:63:4f:60:40:36:9f:aa:81:a6:b4:10:bd:92:ad:19:ea:31:
         f3:28:be:99:a1:5e:66:de:ce:9d:60:94:70:59:5d:cb:c7:db:
         65:92:4a:17:72:d6:6f:ae:8a:86:e1:47:31:95:94:98:42:30:
         20:f5:06:dd:6b:37:18:c6:b3:c3:90:34:a6:cc:ad:bf:01:68:
         97:92:76:4b:25:6b:3b:bf:0a:28:f0:1e:a2:5e:d5:84:3c:28:
         51:05:da:58:84:2b:d3:83:a2:eb:e4:1e:f0:4d:e1:d7:f4:23:
         7c:6a:1a:98:a3:62:a0:74:a8:3a:80:97:65:87:8b:a2:69:93:
         af:59:4f:34:cc:16:a7:b5:f3:89:cc:a9:e4:13:05:92:c0:be:
         1d:26:93:d8:d5:27:be:d8:d2:e4:f2:e5:b2:77:04:d3:c3:45:
         96:74:6f:5c:3e:fa:62:6e:e2:12:ce:60:57:ab:1a:eb:72:a5:
         8e:3b:98:70:66:f8:21:7a:b6:72:9c:f0:5b:d8:83:f9:39:09:
         9f:5e:a5:10:17:88:d6:00:90:17:a5:6a:ba:18:68:d4:aa:91:
         7d:89:23:f0:e3:e7:ad:93:71:8e:6c:da:30:48:70:85:1e:38:
         93:22:2a:fb:f5:52:77:01:ff:ce:d9:39:e4:4b:3d:c7:c5:29:
         f5:21:2a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:14:51 2026 by rpki-client