Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1274be8a-6194-3d98-8d36-4165cd4f6d50.roa
File:                     1274be8a-6194-3d98-8d36-4165cd4f6d50.roa (raw, json)
Hash identifier:          lRwtXSsZjpGYrlue5pftQLUPpQ5ksp8NS6nmC80kElQ=
Subject key identifier:   9E:6E:AE:E0:54:8E:E5:B5:6E:89:E3:16:68:94:F3:57:D0:B3:0B:55
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF329974F7F843235AB3B380
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1274be8a-6194-3d98-8d36-4165cd4f6d50.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        72.217.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:99:74:f7:f8:43:23:5a:b3:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=287c3f02-d73d-4926-a0de-c73260888ff9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:e8:bf:7d:e4:24:30:09:64:10:e5:a1:f5:40:
                    50:b2:c1:26:e1:74:ba:95:3d:17:28:0c:01:de:30:
                    67:a1:8a:9a:26:61:09:4d:54:62:0f:29:02:23:07:
                    74:3a:de:b3:41:57:87:ba:3a:cd:1b:cd:15:b6:c9:
                    4b:e2:78:38:65:2c:1d:74:b1:84:e0:8f:07:7a:4d:
                    da:09:46:ae:30:84:67:9a:cd:2d:d7:3d:d3:d1:0e:
                    d1:9f:55:09:66:65:9e:52:7b:f8:02:cb:0b:02:7b:
                    2c:fe:d8:08:c3:b1:66:3f:2e:0f:0e:0f:ae:07:0a:
                    22:e7:ad:86:fa:4d:5e:d9:ac:78:18:45:54:5f:36:
                    e1:85:cb:93:6e:6b:b0:78:57:8b:85:c5:7a:f2:5e:
                    f8:9d:94:0c:ff:f0:e7:88:9b:9a:b9:2e:e7:5f:8f:
                    5f:d7:23:ec:46:f1:f7:a9:85:7c:53:ae:f3:b2:3f:
                    62:e5:e9:a7:09:35:39:15:24:f1:5d:38:c5:dc:83:
                    9b:e2:e4:ce:5e:32:42:a3:e3:dc:8c:24:15:a3:fc:
                    6f:25:0f:0c:48:70:88:8f:dd:06:4b:b4:39:7f:08:
                    b1:ee:95:4b:1a:f0:2d:b6:96:1a:fc:12:3d:33:ea:
                    0d:81:e2:39:2a:8e:8a:0f:b1:5f:17:4e:ba:c9:ea:
                    97:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:6E:AE:E0:54:8E:E5:B5:6E:89:E3:16:68:94:F3:57:D0:B3:0B:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1274be8a-6194-3d98-8d36-4165cd4f6d50.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.217.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:02:86:98:f9:86:85:e4:a9:cb:c9:2b:b4:2f:64:8e:e0:a3:
         75:bf:76:e0:9d:e9:17:54:3b:a9:a0:37:33:06:91:93:57:90:
         54:a6:82:72:46:15:a1:11:6f:26:27:9f:dc:b4:d2:0e:90:2b:
         ae:1b:5a:87:08:01:a5:21:fc:5c:e3:df:08:09:6a:4d:0c:21:
         d9:15:b8:0c:60:2b:9b:76:f9:21:72:49:b3:29:24:ba:d0:07:
         8b:54:ca:86:0e:1f:fc:cf:3c:aa:68:6c:78:3b:0c:a4:7c:c8:
         a2:58:c3:11:72:a5:27:ca:99:43:cc:f7:35:c0:5e:77:79:83:
         7e:16:f3:15:c8:4e:e9:bb:9e:96:32:c2:5d:52:b7:79:7f:84:
         09:98:c4:5e:04:2b:f8:b4:e4:d1:f6:ce:f4:fd:97:84:61:3c:
         30:07:b1:9a:5d:3c:54:b1:39:a6:b3:00:a3:8a:82:12:68:4e:
         32:46:be:c7:ae:5d:1b:58:dd:1a:93:1d:02:e1:f0:03:da:d1:
         50:6b:32:79:a4:01:19:79:cb:7c:82:b7:62:71:01:f8:73:26:
         3b:15:73:cc:ba:20:e8:7f:1f:8b:ce:88:9b:35:cd:5b:d7:07:
         0a:3b:6b:f6:94:e4:81:20:2e:a3:ea:ea:c8:62:ca:81:30:71:
         30:5f:80:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:36:35 2026 by rpki-client