Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9a906dc-54bd-31b7-b620-94f70204197d.roa
File:                     e9a906dc-54bd-31b7-b620-94f70204197d.roa (raw, json)
Hash identifier:          plwgj8n8KiSOQHF3l/h08xdjszTFfAgU0fGy8IN79l4=
Subject key identifier:   1B:80:90:94:11:8D:6C:F8:F2:C5:34:40:4D:B7:E1:0C:A6:F2:11:11
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D359FA11157A26741E33DF180
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9a906dc-54bd-31b7-b620-94f70204197d.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        68.1.168.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:a1:11:57:a2:67:41:e3:3d:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=d2cf868d-7a87-47fe-9ff9-0f4b94c10492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d7:b8:23:e5:42:fb:41:27:ce:ab:e2:e2:37:
                    a8:43:62:c8:9b:3b:62:30:fa:2b:ac:01:e4:f0:50:
                    c5:44:94:13:9c:17:01:8c:d8:8d:b0:ab:b7:0b:5d:
                    18:03:ae:03:0d:27:2d:3b:ef:87:7e:5d:4b:a9:63:
                    32:ab:d1:af:22:f7:68:42:11:8b:25:7f:73:6a:01:
                    7c:08:54:34:91:75:90:78:61:4a:6a:0a:1f:47:23:
                    2c:70:52:34:81:7a:40:2b:3f:67:51:cb:c9:94:e8:
                    d8:80:15:2f:01:1a:6a:72:15:51:a6:fc:17:e9:ce:
                    b3:03:dd:ba:ec:62:bb:50:d0:f8:5d:b2:e0:ef:27:
                    13:00:42:40:ac:18:e7:15:53:d8:56:ca:18:bd:97:
                    fe:c6:85:85:4d:5d:28:13:a4:28:f8:8d:7e:ec:d9:
                    ee:79:cf:e7:bb:7e:25:30:19:34:50:25:6c:ad:d0:
                    35:68:44:a6:cf:3f:c9:6d:8c:fc:a5:8f:0c:a0:12:
                    ec:72:1c:3d:b4:f5:68:c0:97:d6:56:30:2e:ae:09:
                    c0:c6:25:ef:97:e9:6c:78:68:5c:ab:31:c9:e3:a7:
                    76:e1:b3:4b:25:b5:a1:99:1d:c4:35:39:9d:97:53:
                    44:b7:22:08:9b:05:a7:f7:d0:f2:77:3a:c2:9e:90:
                    db:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:80:90:94:11:8D:6C:F8:F2:C5:34:40:4D:B7:E1:0C:A6:F2:11:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e9a906dc-54bd-31b7-b620-94f70204197d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.1.168.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:10:a6:a6:1a:8a:f0:26:e4:aa:bc:69:11:db:b0:30:65:dd:
         c8:f9:00:cd:77:d5:74:67:78:87:87:13:99:2c:91:12:cb:e1:
         c7:32:be:51:8a:4d:62:d1:bf:93:ea:2f:ed:b8:0b:0a:f8:ec:
         7e:8e:86:f7:f4:f8:3c:6c:7f:7d:3d:fd:f9:49:6d:3a:f8:3c:
         1d:4d:80:47:3f:b8:b9:3a:8b:bc:38:7f:5d:90:91:22:62:4f:
         cd:25:04:dc:30:08:d4:fd:04:b4:c4:77:2c:df:41:a7:f0:c7:
         86:3d:5a:7d:16:51:0e:cc:27:c7:84:71:de:2d:72:ce:36:e2:
         e1:d6:20:1d:c8:31:e4:14:62:6a:8e:85:d7:c6:25:7c:b3:ab:
         ef:f6:6a:36:13:4d:1c:45:89:e7:e4:6b:02:f5:89:7f:ed:76:
         cd:21:0a:8a:dd:dc:61:83:a5:84:e3:28:12:7e:a8:37:f9:ba:
         e8:c7:8b:cd:01:7b:1f:2a:a5:e2:41:90:a3:9c:12:d6:d1:a9:
         89:a0:1f:cc:d4:d6:95:82:9a:64:17:39:87:46:2f:c4:8d:6d:
         c6:d3:4c:4a:43:c6:ff:2d:60:0b:25:fc:b9:fe:0b:ca:e2:10:
         fa:8f:23:91:ae:32:43:89:df:f2:fb:7f:f6:87:3a:21:b0:53:
         cc:02:8d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 05:41:18 2026 by rpki-client