Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d01b68f-280a-3ff5-b236-a737d4f90c29.roa
File:                     4d01b68f-280a-3ff5-b236-a737d4f90c29.roa (raw, json)
Hash identifier:          kFqa6LfCjDel4H5o6sNK79F5Gl3urpuaPrk1Z4/f5Sw=
Subject key identifier:   C6:8B:56:16:5D:CF:AE:81:1A:5A:39:4E:B7:22:AC:10:BA:F7:5B:9E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EB847104C1A96C7957A6913B8
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d01b68f-280a-3ff5-b236-a737d4f90c29.roa
Signing time:             Tue 04 Aug 2026 01:00:12 +0000
ROA not before:           Tue 04 Aug 2026 01:00:12 +0000
ROA not after:            Mon 02 Nov 2026 02:00:12 +0000
asID:                     22773
IP address blocks:        68.101.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:b8:47:10:4c:1a:96:c7:95:7a:69:13:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Aug  4 01:00:12 2026 GMT
            Not After : Nov  2 02:00:12 2026 GMT
        Subject: CN=343dfa9e-9c9a-47c3-b2cc-88c474718856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:15:93:2d:ad:62:96:3e:5f:20:ce:97:33:d3:
                    32:40:6a:fc:30:14:99:21:4e:5c:56:fb:a1:14:c0:
                    41:fe:ed:c4:7f:a9:f5:cd:c9:27:7f:e9:b1:ce:e6:
                    ff:11:15:cb:8b:6f:26:5e:d7:70:ae:22:bb:c5:80:
                    24:53:e5:4d:84:ab:d8:1f:7a:38:da:63:25:3e:64:
                    5f:79:e8:71:e1:1c:fb:39:0a:0a:43:93:08:48:5a:
                    0d:5f:84:fb:5d:61:a5:5a:62:0f:98:2b:c7:8d:38:
                    74:bf:51:62:8d:50:7b:d5:77:de:65:5d:87:63:48:
                    05:72:32:90:19:c9:6d:ab:14:ae:b3:e7:d9:5b:97:
                    e7:0d:51:ec:4e:4f:ad:bf:77:78:62:da:77:a3:43:
                    7d:e1:62:cf:31:e9:5a:11:eb:0e:13:97:73:af:a7:
                    6c:55:87:35:7a:5b:bb:38:c4:a7:29:4f:ba:ee:e9:
                    c1:75:14:a0:63:ff:d9:a9:34:80:5c:b9:b2:31:1b:
                    4f:d3:d9:e9:a3:9f:12:3a:e8:ec:b5:e7:c1:dd:30:
                    e2:e5:22:14:94:67:7a:1f:02:4a:dc:80:d5:fb:75:
                    06:53:2b:ea:7e:bf:d7:5a:49:9a:8d:55:40:08:e8:
                    e7:e1:9f:d9:3d:18:e8:44:ef:e9:fb:89:96:4b:36:
                    6f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8B:56:16:5D:CF:AE:81:1A:5A:39:4E:B7:22:AC:10:BA:F7:5B:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4d01b68f-280a-3ff5-b236-a737d4f90c29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.101.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:bf:9d:0d:e7:bf:56:dd:9c:98:74:d0:75:cb:e1:64:c1:c4:
         75:b9:80:41:dd:2c:db:bf:b2:c8:32:12:f6:f2:3a:46:54:b9:
         77:38:7a:af:20:c9:71:20:cd:fc:55:3f:27:8d:c8:0d:63:13:
         4e:c1:0a:b1:23:f1:a8:00:82:78:ed:0a:aa:54:3f:92:f2:19:
         47:5b:0c:2b:e5:7c:6f:75:10:db:b8:14:64:b7:f0:f1:a8:d4:
         6c:5e:02:da:67:b6:e3:89:08:bb:96:e6:9d:ac:7a:5a:b6:63:
         1b:a5:35:a5:7a:95:df:8f:e6:c2:0b:bd:ad:67:2f:a7:36:28:
         82:69:42:0c:c6:a4:dc:5d:70:39:de:97:d6:eb:c5:29:55:71:
         69:bf:1b:6d:9d:47:6b:61:0f:34:0f:f2:31:b2:8b:4d:f9:26:
         72:53:e3:21:3c:73:19:b2:3e:5d:92:8c:c1:58:2d:7b:53:e6:
         f5:22:1b:aa:ce:28:0f:a4:b9:e8:4d:b4:0b:81:d1:04:5c:ea:
         ec:84:3f:d6:1c:00:17:0a:98:79:57:b7:f3:6c:f0:53:77:d8:
         e9:89:21:70:0c:5c:a2:95:7d:fd:12:89:a4:5f:dc:a9:e9:a3:
         b2:22:32:38:92:97:77:70:ed:0e:c5:ac:50:67:c3:c7:24:3e:
         51:c6:5a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 04:04:34 2026 by rpki-client