Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0da11f13-e644-339e-a1b9-fc78cb9466f9.roa
File:                     0da11f13-e644-339e-a1b9-fc78cb9466f9.roa (raw, json)
Hash identifier:          v3bXLGCyBwJGZVhm74MwuSwQZ34TEfAFL2kJPfD+6wM=
Subject key identifier:   87:C1:F5:94:D9:7D:A4:E7:B0:5F:CC:12:55:76:AC:07:60:8C:12:57
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF3239A25EB8EADFB9693B00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0da11f13-e644-339e-a1b9-fc78cb9466f9.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        72.211.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:39:a2:5e:b8:ea:df:b9:69:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=5f8154f9-5a20-4e2f-bdf6-403370eb1f5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:27:19:52:b2:d7:b0:c2:e6:3b:2c:8a:f1:2b:
                    5d:6e:21:82:28:5b:56:0c:76:25:92:84:13:de:b9:
                    2c:bf:cc:6b:f0:8e:0f:c8:ff:76:58:f6:70:92:36:
                    d2:f0:bc:9f:f9:69:ab:d5:b8:18:72:fd:ec:4e:cd:
                    e6:58:26:f0:f0:60:56:a3:6a:3d:cb:6d:70:79:a0:
                    1f:75:57:02:4e:0f:92:c9:3c:f0:ed:63:9c:34:83:
                    6b:f0:ea:ed:a2:71:3e:2c:cf:aa:5f:96:32:a7:33:
                    52:1d:a0:68:e1:ea:94:c4:03:80:a3:10:b2:87:bc:
                    1b:90:a3:cd:ba:48:2c:24:cc:ab:41:67:09:12:d3:
                    c3:d3:c1:57:ab:59:35:f0:a5:68:88:a1:f7:ce:26:
                    8c:ba:24:93:75:2f:56:14:da:8b:00:62:98:8a:e4:
                    a8:4a:b4:bc:dd:f8:e1:b5:ba:fa:31:bc:6c:26:3e:
                    27:ec:d4:fd:57:69:65:ab:d7:7b:52:18:ea:5b:cc:
                    b6:b2:1f:f1:dc:0d:4b:a0:1c:64:41:cf:0e:0e:67:
                    a4:8c:08:13:27:ad:35:df:f4:5a:84:99:37:88:1d:
                    a6:47:1f:69:4d:7b:dd:5b:47:fa:b2:6a:b6:18:7d:
                    63:95:39:63:52:47:01:a2:e4:28:de:f1:b6:c2:79:
                    89:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C1:F5:94:D9:7D:A4:E7:B0:5F:CC:12:55:76:AC:07:60:8C:12:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0da11f13-e644-339e-a1b9-fc78cb9466f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.211.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:2f:69:c9:1a:fe:aa:b2:bf:ae:a9:3f:3a:59:ab:df:19:fd:
         20:9d:95:72:2f:14:eb:d2:d6:e5:05:38:bc:ad:8e:2f:a5:68:
         10:cb:98:18:0e:23:fc:72:ee:80:5d:28:42:b4:a6:f2:b0:3e:
         26:8d:1d:61:1b:e1:d4:a5:7a:bc:e7:3d:7b:50:d0:4c:2a:e5:
         6d:c5:29:6a:a6:47:32:ad:18:6a:62:ef:72:d3:24:f8:d8:bc:
         42:d1:59:e0:0c:d6:53:42:77:0c:2c:f6:6c:40:cf:b7:3e:c1:
         fb:c7:95:1d:e7:b8:71:48:3d:49:96:2d:84:a9:4a:08:9c:a8:
         70:1d:0a:ad:ce:cf:56:63:7d:a0:46:00:b8:71:78:b8:1c:35:
         63:89:4f:82:03:8f:b3:0b:0e:e9:80:ba:a6:a0:82:57:ea:4c:
         2b:73:71:2a:71:74:e5:68:29:2d:f0:d3:3d:04:b6:dc:b6:3a:
         25:bf:cb:ef:69:d2:a1:bd:ce:dc:da:dd:4a:0e:56:1f:68:29:
         25:0f:bb:20:65:89:b2:12:9f:44:22:9e:cb:86:fe:2d:b8:0a:
         e1:13:b1:6d:5a:f3:cc:c9:10:ac:41:fd:a3:5c:ca:8d:26:f9:
         2d:47:d3:62:2a:b2:e4:ad:99:7e:ac:e7:df:14:34:e8:73:b6:
         a3:bb:1b:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMjmiXrjq37lpOwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk
NWY4MTU0ZjktNWEyMC00ZTJmLWJkZjYtNDAzMzcwZWIxZjVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgScZUrLXsMLmOyyK8StdbiGCKFtWDHYlkoQT
3rksv8xr8I4PyP92WPZwkjbS8Lyf+Wmr1bgYcv3sTs3mWCbw8GBWo2o9y21weaAf
dVcCTg+SyTzw7WOcNINr8OrtonE+LM+qX5YypzNSHaBo4eqUxAOAoxCyh7wbkKPN
ukgsJMyrQWcJEtPD08FXq1k18KVoiKH3ziaMuiSTdS9WFNqLAGKYiuSoSrS83fjh
tbr6MbxsJj4n7NT9V2llq9d7UhjqW8y2sh/x3A1LoBxkQc8ODmekjAgTJ6013/Ra
hJk3iB2mRx9pTXvdW0f6smq2GH1jlTljUkcBouQo3vG2wnmJPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIfB9ZTZfaTnsF/MElV2rAdgjBJXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMGRhMTFmMTMtZTY0NC0z
MzllLWExYjktZmM3OGNiOTQ2NmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNOUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkvacka/qqyv66pPzpZq98Z/SCdlXIvFOvS1uUFOLytji+laBDLmBgO
I/xy7oBdKEK0pvKwPiaNHWEb4dSlerznPXtQ0Ewq5W3FKWqmRzKtGGpi73LTJPjY
vELRWeAM1lNCdwws9mxAz7c+wfvHlR3nuHFIPUmWLYSpSgicqHAdCq3Oz1ZjfaBG
ALhxeLgcNWOJT4IDj7MLDumAuqagglfqTCtzcSpxdOVoKS3w0z0Etty2OiW/y+9p
0qG9ztza3UoOVh9oKSUPuyBlibISn0QinsuG/i24CuETsW1a88zJEKxB/aNcyo0m
+S1H02IqsuStmX6s598UNOhztqO7G0k=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:53 2026 by rpki-client