Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3090e55c-86c3-3aae-9732-cf57f1d97eb0.roa
File:                     3090e55c-86c3-3aae-9732-cf57f1d97eb0.roa (raw, json)
Hash identifier:          7LJZRXuUA+zUwIAZ07FoX0PjgWjfcF30wc4b1R1lVcM=
Subject key identifier:   F6:33:2F:29:00:FC:1E:90:89:D5:8C:7E:C2:EC:4E:02:68:C3:B2:CC
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EB847461696CFCAC9A730A100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3090e55c-86c3-3aae-9732-cf57f1d97eb0.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        68.14.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:46:16:96:cf:ca:c9:a7:30:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=9b38e160-a5c7-4b11-88f7-a8eed8dd17a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b2:fd:66:19:9b:df:0d:5e:bf:69:be:13:0d:
                    f9:bb:03:22:6e:13:20:be:dd:7a:2c:9d:b1:9d:f3:
                    07:b6:0b:5b:15:c2:03:f6:cf:cd:d0:dd:da:ed:f2:
                    a3:df:1e:99:df:0c:d4:c1:3f:62:d1:c6:69:20:0b:
                    26:e3:bb:dc:0a:28:f2:19:a7:f5:57:24:d3:7a:0c:
                    db:da:0c:07:aa:a0:ca:39:ef:76:85:18:0e:23:63:
                    dc:1b:49:b1:18:fb:b3:5a:8b:af:08:7d:d7:e1:fd:
                    e2:dc:0b:e7:d6:61:1c:38:c4:05:63:1a:8f:97:ba:
                    e9:10:5a:5e:ac:f8:a9:a1:b5:de:dd:44:69:7b:0e:
                    6f:b2:ef:55:ae:a4:57:33:82:93:24:fc:d3:43:2d:
                    85:f5:95:2a:91:37:d6:68:7e:04:b8:d6:9b:62:ab:
                    2b:ac:bb:11:6f:f9:06:80:5b:0b:6f:21:8c:e0:95:
                    8c:63:1a:bf:a6:9b:f1:62:36:ef:1f:b3:ff:e1:14:
                    cf:54:98:e7:aa:39:2f:11:df:d8:b6:c2:6b:1d:45:
                    e5:1d:dd:98:79:fe:b6:58:ce:45:4b:98:51:28:3f:
                    a6:82:36:d7:18:9d:bc:b7:88:06:2f:e8:56:53:0c:
                    33:46:4b:3a:22:d1:17:79:91:e4:01:e3:fd:f0:79:
                    74:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:33:2F:29:00:FC:1E:90:89:D5:8C:7E:C2:EC:4E:02:68:C3:B2:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3090e55c-86c3-3aae-9732-cf57f1d97eb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.14.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:77:53:52:cb:37:56:4a:32:3a:e1:9c:93:be:5a:d4:8b:a7:
         e0:5b:60:54:76:70:46:d1:dd:e5:12:2b:f7:4a:8f:91:2f:9f:
         e3:54:b2:40:fc:39:eb:f5:bf:0b:61:7d:09:d6:82:06:60:60:
         6e:c4:b1:44:00:4d:3e:a0:1c:f6:2c:0b:ea:ae:34:ed:2a:4f:
         cb:b5:98:48:d1:db:a0:83:16:27:20:02:fd:8f:4c:ae:c6:d9:
         1e:74:d5:5c:45:7a:59:ad:98:30:14:3a:e3:d0:c6:76:15:77:
         36:7e:5e:1f:93:c3:51:37:68:44:e6:00:32:1a:be:3a:bf:f2:
         56:f1:74:6e:23:48:61:c5:94:03:bb:8c:7b:8e:8d:a8:b2:ec:
         e7:2c:6a:38:04:a9:46:aa:d8:c6:52:b2:3c:3f:1c:22:d7:a9:
         2c:4c:aa:b9:fc:cc:53:1c:cd:5a:c6:e5:0e:ea:96:ee:0c:42:
         12:fe:93:3e:53:8f:1a:25:43:f6:ee:79:e3:30:8f:18:08:fd:
         eb:c5:44:f4:0b:06:cd:57:75:eb:e4:8e:f9:83:10:db:bf:8c:
         11:8a:8c:07:f9:8d:b6:11:78:7f:51:ed:6e:f2:68:81:9f:00:
         ea:b6:1e:96:bf:40:fa:e4:08:b7:e1:9a:0f:e1:4d:54:a0:d8:
         c6:90:a8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 04:05:34 2026 by rpki-client