Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/377e0fb7-3810-3dfd-90fe-e2752066dac7.roa
File:                     377e0fb7-3810-3dfd-90fe-e2752066dac7.roa (raw, json)
Hash identifier:          FXPLYlqtVPJZwtGSg530sMIirKrJkBFtN4V7JSKciwc=
Subject key identifier:   BF:5F:6C:20:13:7E:A6:B5:82:D1:B9:BF:43:0A:8C:0C:D9:34:E7:77
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EB84747D068395FF04A6BAD00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/377e0fb7-3810-3dfd-90fe-e2752066dac7.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        68.224.197.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:47:d0:68:39:5f:f0:4a:6b:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=619251d1-6a24-42c2-9da5-78031eb8be10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:40:0e:a2:00:fc:d7:bc:e1:14:4d:0e:3c:cd:
                    81:a0:fd:9e:56:e9:04:26:18:01:e1:6f:c6:9a:f9:
                    b0:eb:dc:5d:13:e7:e3:dd:c7:a7:5a:5d:55:80:d1:
                    8d:2b:ce:80:c3:24:24:bf:ab:e3:3e:61:db:ed:85:
                    7c:d1:03:59:c4:a6:00:56:5a:76:16:9b:ea:2b:02:
                    83:f1:1b:57:a0:35:14:44:bc:6a:49:ec:56:cc:c7:
                    f7:22:5f:db:81:e7:dd:a8:72:50:83:ff:de:0e:6b:
                    a6:87:8a:4f:2d:43:31:ea:a8:d8:59:54:15:ee:de:
                    c7:aa:2b:18:ff:e6:84:f6:79:a8:f3:53:15:c9:76:
                    9a:c0:a5:dd:52:46:84:fd:7f:ab:55:1e:08:49:df:
                    f4:e0:48:0c:84:74:08:fe:43:28:ff:b2:d5:c3:52:
                    8a:81:4c:4c:d9:05:81:83:64:3c:cc:8c:d4:2d:24:
                    ca:51:f8:fe:1d:22:16:d5:cd:28:0b:d3:95:32:f1:
                    56:1f:4b:dd:4a:54:0a:8d:fb:d3:72:09:e4:4d:62:
                    eb:38:9c:db:d3:65:c2:56:d2:0b:bd:74:67:f4:06:
                    c6:07:2c:b6:6a:71:60:0d:f5:78:5c:38:d1:a4:3c:
                    88:0b:d2:84:ea:68:17:08:f6:de:7e:c9:b8:53:9f:
                    8b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5F:6C:20:13:7E:A6:B5:82:D1:B9:BF:43:0A:8C:0C:D9:34:E7:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/377e0fb7-3810-3dfd-90fe-e2752066dac7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.224.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:e7:be:8f:f4:0f:09:a1:ab:c3:75:5f:89:f5:b1:42:06:b6:
         53:2e:fc:cb:7c:f0:22:ca:53:7f:23:45:8f:f7:14:75:0c:24:
         ab:19:68:37:e1:8d:e7:91:ec:0b:99:93:56:1e:8b:2f:eb:73:
         d2:a7:b6:68:68:f9:79:4b:4f:ce:eb:23:a3:05:97:a2:e4:a1:
         f5:a6:a4:63:8b:01:7b:4d:fa:05:ae:e2:fb:ac:97:f7:f3:da:
         f4:eb:5f:5e:03:22:54:ac:ff:cb:aa:cf:f0:76:65:73:8e:d6:
         65:2a:a5:45:14:ad:5c:f9:00:3a:ed:63:bd:ad:56:3a:a3:9d:
         22:70:f3:5e:e0:56:af:a3:c0:14:af:1c:82:a1:4b:68:99:31:
         db:92:87:dc:0d:ca:99:53:45:37:6d:c8:14:e3:96:7e:77:58:
         06:ae:18:80:d3:ea:76:fe:18:39:78:ad:73:fc:e3:8f:13:ee:
         76:ac:92:98:ba:fa:db:bf:0f:9c:f6:e7:02:be:27:e8:40:cb:
         ce:c5:34:77:6a:a9:65:42:a0:d4:6b:da:70:74:e5:b1:b4:6b:
         9e:b1:9d:fe:0f:dd:8f:ad:84:62:11:47:52:df:59:ad:89:f9:
         84:72:1d:06:fb:6a:67:d8:37:dc:17:ce:5b:05:6e:f1:8f:ca:
         3a:12:69:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 04:29:12 2026 by rpki-client