Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3147b7e6-9d13-3546-85d7-c19bc0371acd.roa
File:                     3147b7e6-9d13-3546-85d7-c19bc0371acd.roa (raw, json)
Hash identifier:          1R+lOXAdforcdtHg9CIQ5x7vvtN84CkQzc97yIUpu20=
Subject key identifier:   80:49:90:05:41:78:97:DC:C3:FB:B8:1A:A4:53:3D:7C:D6:35:AD:83
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F497340D2623D86198F4BEE00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3147b7e6-9d13-3546-85d7-c19bc0371acd.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        68.15.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:73:40:d2:62:3d:86:19:8f:4b:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=aacee015-4542-4fe7-ba53-794ba9f9ec21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:3c:96:ac:02:58:3d:43:90:13:2e:f5:91:48:
                    1c:9d:1d:1c:fd:f2:1c:24:27:65:03:09:b2:fc:21:
                    9d:cc:d2:b5:ad:89:f4:7f:8d:a8:64:58:79:ca:17:
                    6e:00:08:3b:77:0e:90:29:6c:e2:b4:ed:9e:80:19:
                    b9:38:05:9e:f7:1b:2c:1b:02:a7:7d:19:49:36:00:
                    29:5d:05:ab:05:f0:0e:74:59:c0:fe:f0:b4:db:bb:
                    0b:f0:af:63:a6:ac:c7:a0:52:9d:56:1d:8e:95:58:
                    e0:e8:51:c4:37:53:ed:cb:bc:5d:b0:36:fd:e6:6e:
                    ef:ac:7f:06:6a:db:e3:65:ef:58:7f:41:af:51:a6:
                    56:98:75:06:12:6d:3b:99:90:54:a0:1b:90:dc:46:
                    e6:0c:e2:2d:5d:e7:8b:f0:84:89:74:30:84:ca:d3:
                    c4:6e:d7:12:02:67:d8:c5:0e:b0:29:5e:8d:d5:42:
                    9d:8f:51:64:83:34:8e:9c:47:36:84:e0:3e:51:a0:
                    1f:0d:ee:d7:1e:ec:fb:8f:7b:28:22:50:ce:d7:f7:
                    e8:f5:a6:c8:62:61:71:e4:db:87:4d:2b:78:76:fe:
                    9c:b2:0d:dc:d0:ef:34:60:30:1d:d6:80:c8:39:e8:
                    eb:48:82:6b:9a:6a:78:4f:02:40:40:7e:42:cf:1b:
                    4c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:49:90:05:41:78:97:DC:C3:FB:B8:1A:A4:53:3D:7C:D6:35:AD:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3147b7e6-9d13-3546-85d7-c19bc0371acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.15.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:36:9e:12:13:b7:0e:07:1e:e1:3f:a4:f5:d2:d5:3c:78:7b:
         ba:96:dd:3b:dd:da:d9:2e:38:6f:26:a1:80:59:81:f8:71:b6:
         de:0c:ea:69:b2:38:83:35:2f:fa:01:8a:fc:f6:b1:fc:82:90:
         e4:f2:e7:45:a5:ef:d2:52:af:24:95:65:98:b7:d7:8c:1c:bb:
         5d:9f:be:76:dd:34:9e:4f:b7:6b:5b:57:0d:a6:c6:aa:dc:95:
         66:43:1f:16:8e:57:ab:d8:81:6d:cb:15:d9:95:d3:c9:b3:a3:
         f3:b9:ac:bb:4a:cd:28:26:41:9c:26:2f:98:49:2d:7c:b2:d0:
         16:7a:70:af:45:6c:ae:70:76:04:1c:8c:3a:fc:bc:59:95:61:
         54:f0:ee:36:55:3b:c5:8d:02:a6:7a:3f:84:95:8d:78:5c:28:
         63:37:4d:e3:09:a1:e3:19:e9:0c:41:25:fe:0d:b4:ea:66:e0:
         07:c9:06:07:77:56:4d:72:32:7b:7c:b6:17:da:3f:36:1e:3e:
         5d:00:4a:b7:43:f8:94:20:93:08:6d:a7:07:4f:77:7a:8d:b2:
         a9:07:f7:88:c5:70:3d:47:d0:43:18:81:b8:1d:fd:28:06:ba:
         9a:9d:50:7d:6b:70:f2:ca:58:c9:fc:d1:36:34:d0:94:ba:b1:
         8b:24:4b:2c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc0DSYj2GGY9L7gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YWFjZWUwMTUtNDU0Mi00ZmU3LWJhNTMtNzk0YmE5ZjllYzIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzyWrAJYPUOQEy71kUgcnR0c/fIcJCdlAwmy
/CGdzNK1rYn0f42oZFh5yhduAAg7dw6QKWzitO2egBm5OAWe9xssGwKnfRlJNgAp
XQWrBfAOdFnA/vC027sL8K9jpqzHoFKdVh2OlVjg6FHEN1Pty7xdsDb95m7vrH8G
atvjZe9Yf0GvUaZWmHUGEm07mZBUoBuQ3EbmDOItXeeL8ISJdDCEytPEbtcSAmfY
xQ6wKV6N1UKdj1FkgzSOnEc2hOA+UaAfDe7XHuz7j3soIlDO1/fo9abIYmFx5NuH
TSt4dv6csg3c0O80YDAd1oDIOejrSIJrmmp4TwJAQH5CzxtMDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIBJkAVBeJfcw/u4GqRTPXzWNa2DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzE0N2I3ZTYtOWQxMy0z
NTQ2LTg1ZDctYzE5YmMwMzcxYWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRA82MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEA2nhITtw4HHuE/pPXS1Tx4e7qW3Tvd2tkuOG8moYBZgfhxtt4M6mmy
OIM1L/oBivz2sfyCkOTy50Wl79JSrySVZZi314wcu12fvnbdNJ5Pt2tbVw2mxqrc
lWZDHxaOV6vYgW3LFdmV08mzo/O5rLtKzSgmQZwmL5hJLXyy0BZ6cK9FbK5wdgQc
jDr8vFmVYVTw7jZVO8WNAqZ6P4SVjXhcKGM3TeMJoeMZ6QxBJf4NtOpm4AfJBgd3
Vk1yMnt8thfaPzYePl0ASrdD+JQgkwhtpwdPd3qNsqkH94jFcD1H0EMYgbgd/SgG
upqdUH1rcPLKWMn80TY00JS6sYskSyw=
-----END CERTIFICATE-----
Generated at Wed Oct 7 02:39:05 2026 by rpki-client