Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ee77c6a-532b-3799-a2b9-ff1fa4b3b954.roa
File:                     4ee77c6a-532b-3799-a2b9-ff1fa4b3b954.roa (raw, json)
Hash identifier:          VxVNrBbB80keSN3DgCP6PpfvR6PF0ZJ6QQsavynXxcs=
Subject key identifier:   07:0B:7A:B6:D7:FF:31:E5:05:26:2E:35:91:12:B8:18:4E:58:DA:42
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D35A0030AB567CE2560DAE0F8
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ee77c6a-532b-3799-a2b9-ff1fa4b3b954.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        68.7.26.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:a0:03:0a:b5:67:ce:25:60:da:e0:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=42d10ce4-16b6-4203-b540-06569f42c14d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:62:1a:96:26:98:4c:c9:fd:5a:64:c7:63:6d:
                    76:d6:67:c0:37:0a:fc:6c:7e:f0:ee:4b:7b:cc:70:
                    09:c6:7c:af:9b:f4:77:73:a1:d0:31:78:78:08:d3:
                    21:fd:f4:34:31:81:29:9a:b5:7c:5f:9b:6f:60:8b:
                    3f:5b:06:26:be:17:95:34:f0:6a:4a:5d:84:32:57:
                    de:cb:91:90:84:f4:06:85:3d:02:6b:3d:29:38:16:
                    5d:c5:e5:82:6f:c7:81:8c:fe:80:fa:f6:70:1c:70:
                    c6:3c:7b:58:c0:8e:34:d7:9d:5b:58:ad:12:51:ef:
                    43:f1:89:13:c6:9e:51:cf:47:3a:13:53:69:68:e9:
                    07:17:fb:71:44:37:d1:7d:8d:ad:ca:93:dc:53:a0:
                    c1:4b:e1:92:fc:9b:52:44:38:9c:dc:38:a1:5b:d5:
                    2b:f2:37:42:80:99:1d:25:de:f2:e0:60:55:82:08:
                    84:f7:ab:f8:c9:2a:fc:e3:f7:42:46:f5:f0:73:a8:
                    8b:68:bc:4e:0b:63:5f:89:44:ab:a3:47:6e:0d:ec:
                    34:3b:8c:30:04:24:14:8f:1f:75:f6:5c:ba:d1:7c:
                    8c:0c:73:a2:83:1e:5b:61:4b:67:5a:ab:ae:33:ed:
                    56:ca:3b:1b:31:f7:6a:46:4f:b6:26:a5:a9:21:c9:
                    54:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0B:7A:B6:D7:FF:31:E5:05:26:2E:35:91:12:B8:18:4E:58:DA:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ee77c6a-532b-3799-a2b9-ff1fa4b3b954.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.7.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:c6:d6:cf:fb:9a:9c:1f:68:89:39:e7:ca:86:4f:3e:4b:8a:
         bc:0b:35:3f:67:9e:7c:bb:47:6d:b8:aa:73:44:65:ac:14:11:
         81:c7:0e:03:93:8d:44:9d:26:6a:ff:f3:44:6d:27:d9:08:98:
         9c:a5:8d:62:dd:18:ab:cb:73:fb:a5:e7:2a:c8:05:53:73:8b:
         17:80:5b:50:06:fb:fe:d7:bb:71:05:46:c4:b0:49:ed:f7:af:
         3b:d4:6e:09:12:e3:8d:db:51:bf:99:94:18:f9:72:75:67:54:
         d2:6a:64:ae:65:05:b1:b6:87:74:95:6e:dd:6d:b2:33:6d:54:
         92:58:aa:c0:50:6d:72:6f:b3:33:ef:2c:66:06:18:b8:1e:ae:
         0d:e9:d2:8e:17:4d:49:33:47:1c:c4:42:78:32:a2:59:21:8b:
         f6:e3:40:eb:1f:9f:70:08:bc:34:e1:a9:15:c2:41:67:3b:fb:
         76:97:6b:b7:b0:61:54:1c:34:20:a5:30:ad:0f:38:33:81:c3:
         43:92:24:87:a0:c8:2f:32:d4:f8:4b:23:29:18:57:58:b0:8c:
         62:80:95:de:43:08:01:08:73:0f:4c:cd:07:61:4c:c4:e1:2b:
         4b:35:6f:4f:ec:b5:ef:d4:b8:6a:10:60:e0:62:37:57:0b:f3:
         bb:f6:c2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 05:34:40 2026 by rpki-client