Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d44a9714-0729-37de-b063-efeef72f87a1.roa
File:                     d44a9714-0729-37de-b063-efeef72f87a1.roa (raw, json)
Hash identifier:          55C0UOwtBmNqZxo0psYWfYbgmt2/f8uXbgE7XZX0mzs=
Subject key identifier:   10:94:72:5B:EB:0E:68:1C:2F:A0:5C:68:FF:5D:B8:AA:D2:8F:E5:6D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D359F7475F6043B7B8DBE9A60
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d44a9714-0729-37de-b063-efeef72f87a1.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        72.221.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:74:75:f6:04:3b:7b:8d:be:9a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=6d5d3805-02b4-4486-a644-362a9a975751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3e:8d:62:5d:82:4f:33:82:64:2e:e2:bb:96:
                    00:d9:23:a8:76:61:82:0a:e7:2f:7a:6d:14:60:60:
                    85:e6:2b:02:56:73:0b:7a:19:1f:e7:82:14:87:8c:
                    54:30:25:d2:2f:66:ce:d1:95:12:52:28:d3:a7:4f:
                    58:8b:53:12:2e:0d:f9:c8:e8:09:02:6c:52:75:df:
                    03:7b:21:29:93:9d:90:2d:07:9e:dc:3b:ef:0a:19:
                    46:e4:37:8f:cc:3e:ca:87:8f:3e:ea:d2:9b:c3:4b:
                    8e:c4:82:1f:d1:d3:be:bf:03:af:fd:a2:c6:7c:de:
                    43:67:53:60:56:b4:d2:56:b2:f7:b9:cf:4c:83:67:
                    c9:f4:ca:5b:a9:dc:ed:d1:6b:30:83:c9:16:76:b2:
                    cb:aa:33:58:f5:a4:d5:23:f7:37:f4:90:3d:88:eb:
                    2e:f8:0e:bf:48:2f:90:53:e0:dd:e2:8b:f6:97:e9:
                    42:79:53:d9:71:42:c3:a5:2c:f1:a1:29:c8:af:5c:
                    fd:d3:6e:42:c4:83:bd:a1:05:68:5e:35:f4:e8:60:
                    4b:b2:a9:13:3e:47:41:e8:48:46:cd:57:fb:7b:8c:
                    b8:af:63:71:d0:6f:c2:6f:e8:77:23:cb:a2:d4:c0:
                    d3:97:b9:94:15:6b:7a:95:e5:d2:46:f9:2d:45:83:
                    11:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:94:72:5B:EB:0E:68:1C:2F:A0:5C:68:FF:5D:B8:AA:D2:8F:E5:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d44a9714-0729-37de-b063-efeef72f87a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.221.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:03:92:cc:c1:7d:a8:a7:2b:e5:aa:63:ad:76:69:39:f2:77:
         e2:22:01:12:4b:31:43:01:61:dd:4d:93:5a:0d:b6:5b:95:66:
         da:c1:12:4e:0c:e7:26:10:02:7b:91:e9:6b:c9:a9:2e:16:18:
         76:3a:d8:f0:a7:f8:78:41:79:b5:7b:ce:99:1a:f2:49:ca:ab:
         10:ca:cc:0e:78:4d:9e:d7:bd:3b:af:d6:85:62:4e:b3:45:44:
         12:17:47:3c:46:4b:50:4e:e2:4e:8d:0c:86:ad:ed:c5:06:23:
         89:4e:68:ab:65:75:49:27:4d:6d:c3:4c:c2:af:dc:14:33:93:
         e0:b2:9c:3b:db:79:4b:de:91:86:05:b8:78:c1:a6:0c:d7:5b:
         30:07:79:59:5f:1a:58:1f:82:97:fb:96:49:a9:6b:31:ba:b3:
         3f:e6:e4:fd:06:a2:28:59:d1:ae:95:81:83:d5:aa:17:91:f5:
         78:26:05:76:f7:e7:ee:e4:42:f4:1b:f9:59:60:0e:9f:58:b3:
         8c:20:20:8a:42:a6:32:5a:0f:f3:ec:4a:2c:4d:8b:d7:2f:71:
         63:59:b2:a8:b9:5b:42:63:6c:59:ae:fe:3e:db:dd:10:bc:38:
         80:46:ce:d2:9b:2d:48:59:45:d1:56:0e:68:c9:e8:ae:eb:74:
         69:ff:be:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 07:09:01 2026 by rpki-client