Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1377f3ba-ed54-3ba4-9b4f-8e631b168744.roa
File:                     1377f3ba-ed54-3ba4-9b4f-8e631b168744.roa (raw, json)
Hash identifier:          BUawsggr/IP2gcj95WIEn0x8RP2XiWvAIsvcBp1Umc8=
Subject key identifier:   C5:AC:BD:4E:8C:BE:04:18:04:75:7C:EC:07:59:CB:8F:73:71:8E:A3
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF3253CC88A58D45A3979E68
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1377f3ba-ed54-3ba4-9b4f-8e631b168744.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        72.217.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:53:cc:88:a5:8d:45:a3:97:9e:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=1ddaeb69-dd70-4d12-8db7-8899572050db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:d8:e9:04:bd:ae:e2:5c:40:db:4f:f7:03:
                    52:81:a3:15:dd:04:77:87:de:1f:5f:2f:a1:d4:8e:
                    8a:2a:cc:53:e2:d1:5b:7d:4b:74:67:14:81:26:29:
                    55:be:7b:10:a9:5b:a2:88:ba:7c:d7:c6:38:62:15:
                    21:fe:4f:bf:43:91:d0:02:28:c4:6d:92:2e:5a:7c:
                    5a:a9:0e:e3:d2:87:71:e6:70:54:e0:62:05:85:9d:
                    ee:be:8d:ec:ef:41:3b:90:2f:c0:c0:ae:a2:90:d2:
                    f6:cc:ee:97:df:9a:08:fa:db:cd:5b:56:66:c6:1a:
                    66:02:71:93:07:42:ff:34:71:a5:99:6b:cc:53:5c:
                    0c:3f:e9:d2:d5:78:12:95:35:87:d3:87:81:21:2d:
                    ce:91:e0:5d:fc:31:83:7c:2b:7c:33:07:f2:c6:52:
                    0a:44:6a:cc:8a:ff:95:4a:db:c4:37:c1:4a:7b:df:
                    6e:70:57:7b:45:d6:d4:22:50:ca:f4:4c:95:45:bc:
                    1d:42:a5:d8:1b:b2:6e:88:50:43:4e:44:d9:17:d2:
                    87:9e:9f:dd:b9:8e:2c:76:5f:90:1f:da:d3:a5:99:
                    be:41:f7:57:6d:d3:1e:41:bd:d5:2f:69:24:97:f4:
                    71:97:3c:99:a2:fa:64:d8:a3:4a:38:f8:47:ac:37:
                    9d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AC:BD:4E:8C:BE:04:18:04:75:7C:EC:07:59:CB:8F:73:71:8E:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1377f3ba-ed54-3ba4-9b4f-8e631b168744.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.217.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:dc:08:25:86:c7:75:4a:8b:24:ae:3e:0c:e0:20:36:a7:03:
         cd:2b:c3:ef:c3:f9:f6:58:a4:54:be:c8:cd:77:ca:7b:3b:e4:
         74:6f:00:9f:81:4d:49:7a:b1:2f:0b:77:48:6f:c4:44:5f:f5:
         a8:0f:8c:d6:a4:80:e2:35:ef:a4:b9:5d:cd:e2:68:6b:3b:80:
         70:8a:ca:9f:79:ef:09:a0:5e:d8:d2:80:5b:f6:f8:24:89:c3:
         03:22:63:2c:65:5e:58:ee:f1:85:bd:a1:4a:2e:e0:50:8f:56:
         53:c5:7e:a2:99:ca:11:30:06:8e:3f:95:88:e0:f2:f1:d8:f0:
         71:46:62:f3:a6:ea:69:98:88:27:2d:27:ff:5f:d0:b8:d6:85:
         47:27:b9:df:6f:6e:70:84:b7:e1:aa:ab:22:37:9c:67:28:c1:
         15:1a:fb:7b:44:ed:26:c9:73:ac:83:d5:dc:12:af:b0:9a:26:
         00:c2:7d:64:dd:e4:99:63:c8:1c:8c:c7:6f:16:8c:1d:71:92:
         ee:ce:98:a1:fd:e8:e4:6e:be:dc:ef:5f:70:eb:aa:1b:4b:bf:
         dc:7d:42:ea:a9:2e:9a:38:a5:41:39:9f:e0:fc:ce:39:60:46:
         da:ed:35:90:5b:7d:c2:47:55:8d:67:96:64:f5:ee:c7:e6:14:
         b8:b3:66:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:54:38 2026 by rpki-client