Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3663f84a-6122-33da-a41b-d250b9ca73fe.roa
File:                     3663f84a-6122-33da-a41b-d250b9ca73fe.roa (raw, json)
Hash identifier:          R9XEOrMGjIvJ+FDAGjpHuH10pNdU/HgLvgAMvK2Ayvc=
Subject key identifier:   BA:DF:26:E7:22:C8:6D:4B:50:99:3D:91:FC:68:13:99:C5:24:22:42
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EB84765506A68084559042B80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3663f84a-6122-33da-a41b-d250b9ca73fe.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        174.66.136.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:65:50:6a:68:08:45:59:04:2b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=506dda8b-706a-4699-b983-60cefd50a555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b4:10:0f:c9:59:48:6f:0b:2f:7a:9c:74:14:
                    19:33:e0:f9:29:78:c5:dc:42:97:32:c9:5e:60:88:
                    85:86:d2:19:25:19:cf:e2:9e:48:59:e1:2a:1b:d7:
                    c5:df:e6:18:2c:63:46:40:c7:35:7e:d0:bb:4a:8c:
                    8d:3d:ea:5a:dc:2f:53:9b:03:b7:00:e1:3e:df:fa:
                    d0:ad:88:5a:8f:68:c1:bf:48:bc:87:0e:77:5c:7f:
                    ad:f7:06:b2:cb:bb:bd:9d:74:97:f0:64:1e:1a:fa:
                    cc:5c:09:f2:88:a9:6e:56:d5:c6:b2:eb:e0:04:3c:
                    49:18:de:13:02:b4:e9:0f:c2:e6:03:5d:4c:ea:ee:
                    20:56:fb:80:aa:e7:2d:58:28:c5:dc:e4:0c:35:ff:
                    2c:60:74:46:aa:45:04:46:fc:4d:00:ab:ee:5b:5b:
                    8b:62:07:c3:5b:ae:84:b2:32:a2:ec:11:04:07:d1:
                    ee:6e:3f:98:32:90:99:55:6c:19:e4:cc:68:86:4d:
                    26:24:1c:59:b7:29:0b:ff:ec:a9:99:ec:23:32:49:
                    de:64:1d:2f:4a:fd:10:0e:b7:f2:6e:59:ea:8c:22:
                    be:5e:92:d9:0d:e9:21:8b:20:82:b3:1c:e5:05:74:
                    13:ea:2b:8e:9d:5d:5a:61:54:a4:b0:d7:07:3d:7d:
                    48:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DF:26:E7:22:C8:6D:4B:50:99:3D:91:FC:68:13:99:C5:24:22:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3663f84a-6122-33da-a41b-d250b9ca73fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.66.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:78:a3:c3:95:f1:71:e6:43:61:f4:ea:2e:8d:83:67:f9:4c:
         6d:6a:e2:a1:e2:75:cd:18:6c:95:ca:4c:f6:71:e3:13:db:36:
         0e:9d:8c:b7:18:f4:0a:5f:ca:1b:4d:65:0b:f7:89:de:87:34:
         87:99:12:5e:61:da:47:d8:84:7a:91:ae:db:ba:da:52:ab:0f:
         d5:98:b8:59:19:5b:cb:61:a1:0b:43:53:50:cf:2f:99:ff:65:
         a8:93:3b:13:49:e0:4c:68:77:82:a7:f7:b0:a7:99:59:a8:2f:
         3b:a0:2c:12:d6:05:90:c7:f2:20:4d:fb:a8:16:38:87:46:3d:
         64:2e:c9:c7:75:6a:ed:96:dc:08:4c:d4:d0:d0:37:56:2b:9c:
         32:e8:5a:33:15:48:98:98:33:bc:76:a1:a1:92:d0:9d:44:d5:
         91:58:40:4b:21:73:c1:04:29:aa:86:64:95:bc:1c:fd:77:7f:
         2d:89:3a:2d:4e:08:47:68:c9:98:82:b1:32:bb:d1:01:ac:22:
         21:54:ba:99:84:7d:11:6c:cd:86:a9:f6:4e:98:da:5d:bc:28:
         52:15:05:6e:ba:82:e3:31:77:06:54:a6:19:a8:2d:4f:4b:12:
         66:0e:42:17:42:e1:55:a8:88:21:7a:b9:ce:47:a0:1d:eb:f6:
         14:1e:02:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE64R2VQamgIRVkEK4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDgwNDAxMDAxMloXDTI2MTEwMjAyMDAxMlowLzEtMCsGA1UEAxMk
NTA2ZGRhOGItNzA2YS00Njk5LWI5ODMtNjBjZWZkNTBhNTU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibQQD8lZSG8LL3qcdBQZM+D5KXjF3EKXMsle
YIiFhtIZJRnP4p5IWeEqG9fF3+YYLGNGQMc1ftC7SoyNPepa3C9TmwO3AOE+3/rQ
rYhaj2jBv0i8hw53XH+t9wayy7u9nXSX8GQeGvrMXAnyiKluVtXGsuvgBDxJGN4T
ArTpD8LmA11M6u4gVvuAquctWCjF3OQMNf8sYHRGqkUERvxNAKvuW1uLYgfDW66E
sjKi7BEEB9Hubj+YMpCZVWwZ5Mxohk0mJBxZtykL/+ypmewjMkneZB0vSv0QDrfy
blnqjCK+XpLZDekhiyCCsxzlBXQT6iuOnV1aYVSksNcHPX1IvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLrfJuciyG1LUJk9kfxoE5nFJCJCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMzY2M2Y4NGEtNjEyMi0z
M2RhLWE0MWItZDI1MGI5Y2E3M2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrkKIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI54o8OV8XHmQ2H06i6Ng2f5TG1q4qHidc0YbJXKTPZx4xPbNg6djLcY
9ApfyhtNZQv3id6HNIeZEl5h2kfYhHqRrtu62lKrD9WYuFkZW8thoQtDU1DPL5n/
ZaiTOxNJ4Exod4Kn97CnmVmoLzugLBLWBZDH8iBN+6gWOIdGPWQuycd1au2W3AhM
1NDQN1YrnDLoWjMVSJiYM7x2oaGS0J1E1ZFYQEshc8EEKaqGZJW8HP13fy2JOi1O
CEdoyZiCsTK70QGsIiFUupmEfRFszYap9k6Y2l28KFIVBW66guMxdwZUphmoLU9L
EmYOQhdC4VWoiCF6uc5HoB3r9hQeAnE=
-----END CERTIFICATE-----
Generated at Tue Aug 4 05:23:54 2026 by rpki-client