Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2e47129-f718-3df1-a6f9-48b6ebe30e18.roa
File:                     f2e47129-f718-3df1-a6f9-48b6ebe30e18.roa (raw, json)
Hash identifier:          fadN4qwqIPwHQ3Nj5SEdVQjTaelLo84623e+9ekM9Ho=
Subject key identifier:   69:8A:D7:FE:92:8E:4F:1E:2E:1C:85:18:CD:1A:AA:07:65:18:47:42
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D1707C2AAD23F6CB9AC2C6100
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2e47129-f718-3df1-a6f9-48b6ebe30e18.roa
Signing time:             Sat 07 Mar 2026 14:00:41 +0000
ROA not before:           Sat 07 Mar 2026 14:00:41 +0000
ROA not after:            Fri 05 Jun 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        68.15.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:17:07:c2:aa:d2:3f:6c:b9:ac:2c:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar  7 14:00:41 2026 GMT
            Not After : Jun  5 13:00:41 2026 GMT
        Subject: CN=b1339810-d4df-4ad2-997d-268401028776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:41:bf:0f:ed:69:a2:52:64:16:9d:68:6d:8f:
                    50:ed:5f:fd:78:88:33:d6:46:02:e7:ae:9b:b8:5d:
                    e2:6d:9b:36:71:77:5d:6a:20:a9:e0:7a:13:b3:b0:
                    51:5d:4b:15:e6:03:0d:30:fc:87:01:a8:1c:3c:ea:
                    18:ea:df:da:8c:a2:3a:2c:d4:a5:82:e4:59:5a:2a:
                    ee:c4:92:7a:cc:f4:d4:e1:17:2e:17:30:36:fa:ee:
                    b9:55:35:ff:81:d0:71:f5:5a:c8:05:d9:91:55:63:
                    5f:8f:f6:80:60:ae:67:22:d9:9d:d4:77:cf:e4:5d:
                    b9:03:77:01:3f:c2:d2:e8:1a:7a:78:33:3f:e0:c0:
                    1a:10:32:16:bc:93:b3:20:63:7e:01:69:9e:47:23:
                    ed:08:a3:ca:fa:24:67:23:5b:ec:47:b8:96:89:ed:
                    18:d8:43:21:61:64:f5:17:7c:a2:bd:0d:21:db:a4:
                    fb:20:88:4f:59:42:d3:f8:e5:ac:a6:60:f5:84:0a:
                    02:07:a1:8f:23:f8:d0:30:17:31:d5:bc:7e:52:44:
                    c2:ec:25:8b:e6:c6:61:85:56:4a:30:0d:69:c9:cb:
                    c7:5c:5c:87:aa:73:73:95:ad:d4:25:99:ad:f1:6e:
                    5b:9b:6e:d2:6e:ab:0a:7a:c6:d5:e7:46:5f:1a:00:
                    33:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:8A:D7:FE:92:8E:4F:1E:2E:1C:85:18:CD:1A:AA:07:65:18:47:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/f2e47129-f718-3df1-a6f9-48b6ebe30e18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.15.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:6a:b1:bc:0d:83:5b:c3:d8:0c:67:3e:92:69:8d:f9:f8:48:
         54:4f:16:1d:70:dd:98:16:0d:9d:99:2f:b3:5b:9b:a8:a0:c3:
         d2:8e:bc:14:7f:58:a4:fc:83:e4:11:b2:e8:f8:16:e9:3c:9a:
         a5:04:bc:26:6a:e4:e3:df:50:40:c3:9f:7f:ab:7b:a3:07:45:
         fc:94:48:d2:d1:35:59:58:7c:e6:fd:b4:e0:d4:d0:37:01:f2:
         f3:e9:07:e2:9c:37:5f:00:04:6c:70:15:dd:ee:06:aa:50:8c:
         e5:f7:04:c1:46:86:06:2d:18:8d:93:53:7d:d5:c9:24:98:92:
         95:cc:1e:81:8c:04:17:d7:73:b4:59:45:9a:b2:2d:d0:7d:98:
         d8:a1:86:05:68:fa:50:6e:69:b1:0a:c8:e9:6a:d4:98:8c:a7:
         00:48:af:d9:cf:8e:a5:4d:1d:6b:66:e3:d9:6d:43:e1:32:6d:
         31:ff:db:a9:0c:c6:b8:e1:53:29:96:fd:5f:0e:dd:32:49:a7:
         b6:16:96:24:02:a7:a2:ba:84:df:d7:cd:de:f3:33:64:db:e5:
         25:42:ee:cc:85:af:25:f6:3a:8c:37:7c:c5:c6:ba:97:2a:f9:
         a2:65:9d:ab:7a:4e:8c:a8:bf:d5:0b:0f:d0:7b:91:ac:8e:62:
         0e:04:a5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 05:42:37 2026 by rpki-client