Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c42460f-a499-3656-8fc7-dcc2711db18a.roa
File:                     6c42460f-a499-3656-8fc7-dcc2711db18a.roa (raw, json)
Hash identifier:          6d3QxGoNCOGuqClYwouLPFCzl1FX9HaUAYOjH8Sk2nw=
Subject key identifier:   7D:E7:5B:37:4D:45:B8:82:21:68:7E:4C:AD:1C:24:2B:00:E5:26:82
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584E2D9F373FAD6E3D1D27308010
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c42460f-a499-3656-8fc7-dcc2711db18a.roa
Signing time:             Mon 15 Jun 2026 09:00:12 +0000
ROA not before:           Mon 15 Jun 2026 09:00:12 +0000
ROA not after:            Sun 13 Sep 2026 09:00:12 +0000
asID:                     36183
IP address blocks:        172.226.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:2d:9f:37:3f:ad:6e:3d:1d:27:30:80:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 15 09:00:12 2026 GMT
            Not After : Sep 13 09:00:12 2026 GMT
        Subject: CN=69c2ea28-81f3-4518-87d9-4e89a804a067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:0e:aa:ab:b8:c1:b3:9d:f2:27:74:ba:27:f0:
                    cb:b7:fa:36:70:f3:a4:60:49:4b:cf:4b:27:4e:ec:
                    55:fe:b4:fc:e1:3b:1a:93:a1:1e:a7:33:fd:6e:b5:
                    6d:de:43:70:5c:8c:af:3c:f7:86:6c:e7:1f:9c:6a:
                    f0:34:2f:3f:28:0b:9e:1d:70:aa:d6:10:c6:e8:a2:
                    28:e6:70:71:c8:65:27:2a:b2:0e:2f:48:d3:d1:bb:
                    dc:39:7e:a1:7c:4d:95:a7:ae:ac:90:dd:62:6d:6e:
                    c8:50:d9:45:6d:48:03:13:f0:25:4a:a9:6f:92:6a:
                    2a:35:bd:9f:8e:fc:92:b0:62:9d:5a:d7:ae:df:24:
                    f7:69:5c:34:6e:53:e1:23:13:85:0e:f4:2a:ae:a1:
                    c8:43:89:08:f2:67:7a:30:d1:c2:fb:09:73:f1:e3:
                    c6:c0:2f:35:bf:ad:df:43:c3:05:05:28:d2:a7:15:
                    e1:06:a3:9c:74:5f:90:4f:3e:b4:91:c7:d4:78:1f:
                    17:6c:e4:23:d5:5b:4e:54:94:58:f8:51:45:14:28:
                    45:33:86:92:ee:83:42:01:61:50:98:1b:3e:04:37:
                    3a:63:df:5f:4f:bc:89:8a:1d:f4:ed:0d:57:ab:27:
                    b9:88:4a:2b:71:ba:9c:3b:0d:a9:a3:d2:4f:ba:0d:
                    bf:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E7:5B:37:4D:45:B8:82:21:68:7E:4C:AD:1C:24:2B:00:E5:26:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/6c42460f-a499-3656-8fc7-dcc2711db18a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.226.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:72:76:53:e0:bd:16:d9:50:fa:98:63:1d:f5:8c:23:55:a0:
         ec:1b:47:fc:48:e2:44:71:ff:0d:1e:ce:31:ce:74:88:d1:3d:
         4a:df:b5:4f:ac:ef:75:2c:d2:3d:a0:65:bd:fe:19:4d:b4:47:
         11:8d:05:f4:ad:a6:3c:a1:b7:1c:7e:de:9b:69:4b:db:31:4f:
         db:06:4e:4d:5d:64:68:7d:52:1c:c3:76:90:dd:39:a8:29:80:
         5b:6d:29:78:69:ff:7c:04:63:c0:6f:0e:70:51:e9:eb:11:51:
         9b:c9:ae:57:7b:1a:58:c9:fc:b6:cf:23:2d:27:e2:fb:f1:7a:
         5c:f1:26:06:40:43:23:92:60:fa:67:cb:49:8a:f6:4d:4d:c4:
         23:54:70:46:0e:3f:ca:16:eb:fa:eb:dc:ba:b8:fd:cb:d3:6b:
         10:f5:8f:1a:10:62:60:96:32:97:81:d7:06:8e:20:b0:68:27:
         97:8c:40:18:83:ae:1e:3b:99:7c:b1:c3:5a:68:d1:19:f6:db:
         e8:5c:f2:cf:9b:67:0e:e1:c8:71:6a:9d:16:31:ec:c5:eb:55:
         f0:54:47:bb:f0:68:47:17:cf:ce:a6:b3:8f:72:cb:79:6e:2c:
         b1:0e:8a:9d:92:d6:53:d7:59:1c:e0:43:f5:c2:8d:1f:b2:e4:
         0c:33:dd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:46:09 2026 by rpki-client