Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a366239-ecb2-3f51-bdf9-875d1612cd50.roa
File:                     5a366239-ecb2-3f51-bdf9-875d1612cd50.roa (raw, json)
Hash identifier:          p0s2coQWzdYNH1SiIIhkgVTpxkmHCHgdvA0TOZZ3DjU=
Subject key identifier:   1F:2A:33:FF:26:0F:89:61:40:AE:B9:47:57:49:28:D8:D5:94:8F:EB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D359F755A2FC5F680A5104A10
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a366239-ecb2-3f51-bdf9-875d1612cd50.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        68.0.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:75:5a:2f:c5:f6:80:a5:10:4a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=7e64fe82-dca2-4b3b-abba-a00495f5117b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:57:03:c4:e1:d5:2c:ba:4d:31:22:40:e6:d6:
                    b4:51:36:d9:75:47:01:d0:54:36:d2:2a:c6:52:cb:
                    59:b5:2b:ca:26:f9:40:aa:dc:20:c9:c3:88:eb:b3:
                    72:cb:af:17:2f:29:1e:d8:d8:da:87:39:37:2f:39:
                    a3:e5:02:33:dd:b4:9d:b8:3d:eb:70:e5:58:7b:00:
                    b9:fb:2c:bc:bb:ff:55:96:99:07:97:b7:e8:97:0c:
                    db:04:3c:34:bd:67:6c:e6:92:98:16:08:d3:19:a2:
                    8c:2e:3b:47:85:50:82:2f:b4:f6:ad:a2:60:ac:82:
                    ba:ba:eb:3d:54:19:c2:3e:9b:cb:a2:ed:82:41:85:
                    3c:ab:45:98:28:c1:a3:da:5d:61:57:93:c1:81:03:
                    44:4e:77:96:d0:3c:8a:5a:88:71:85:68:02:07:2e:
                    ce:e3:f8:31:75:49:95:86:b4:f2:27:c3:4b:a0:27:
                    f2:ca:9a:38:c0:18:19:4d:6b:4b:a0:45:49:90:32:
                    b5:1a:95:d3:bd:bf:d2:35:b2:53:78:cc:5f:d1:b6:
                    06:fb:d1:32:e5:74:f8:30:c4:61:61:2f:4c:b8:ab:
                    8b:9d:8e:5f:ba:08:e4:13:81:06:a7:e8:49:60:d3:
                    1d:76:f2:a4:78:12:1e:4d:a0:cf:6c:91:71:45:ce:
                    a2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2A:33:FF:26:0F:89:61:40:AE:B9:47:57:49:28:D8:D5:94:8F:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5a366239-ecb2-3f51-bdf9-875d1612cd50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.0.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:07:5a:ef:b2:aa:1b:2a:e5:12:23:f0:0c:25:cd:e1:cf:aa:
         8a:3a:4b:72:44:a4:ee:78:a5:84:58:3c:15:85:76:9b:2f:39:
         8f:17:92:91:c7:a6:57:cf:b9:24:d7:14:f2:86:14:37:7b:db:
         9e:b6:f5:9a:8b:40:b7:44:11:2e:a6:d4:f1:07:5e:6c:65:cb:
         43:a7:36:e2:d8:b8:19:3f:51:d5:88:62:32:fb:66:57:0e:8f:
         28:e5:da:e8:f2:53:bf:67:31:1e:cc:92:68:f8:97:6b:10:35:
         cf:22:74:7a:3e:89:76:3a:f6:2d:0a:a0:69:48:6c:1b:aa:54:
         c6:cd:ea:01:9e:27:33:a0:ab:fb:5d:ac:2c:fe:19:8f:69:4e:
         01:88:74:d2:ea:d4:e0:23:27:c6:eb:e8:08:a8:80:fa:cd:ad:
         fa:59:8e:07:34:f3:4e:df:18:df:d3:01:c3:0e:86:1d:99:b4:
         94:24:1a:76:b4:32:a7:7b:73:91:d9:36:f6:61:07:f6:fb:2e:
         88:cd:dd:21:cb:f9:54:16:70:33:df:90:cf:a6:c1:fa:ec:e0:
         1a:f2:34:cf:27:31:10:f1:05:3e:96:e3:27:6f:17:4c:fc:7d:
         fe:df:49:d8:8a:eb:bb:34:8c:3a:78:ec:72:96:6f:ca:4e:d1:
         64:0d:d5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 05:35:47 2026 by rpki-client