Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bfa1d5d-8d66-39b9-a80c-20790ee738e9.roa
File:                     1bfa1d5d-8d66-39b9-a80c-20790ee738e9.roa (raw, json)
Hash identifier:          HYu03IO53xXy1O+0UUMG7g/ikgdtHiLMoRWunEyzpZg=
Subject key identifier:   1E:F8:F4:8D:A5:54:2C:C2:C8:6D:71:F9:29:C2:E5:26:E8:05:3A:2D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDDCCC7C5F919CE504269CC30
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bfa1d5d-8d66-39b9-a80c-20790ee738e9.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        68.231.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:c7:c5:f9:19:ce:50:42:69:cc:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=1e092004-656b-4bf8-bd49-685ce6ae25cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:8e:fc:d4:64:9a:f6:99:49:f6:83:f9:05:
                    2b:c0:67:74:ff:e2:34:12:33:9a:5b:43:7a:d8:fc:
                    56:dc:c6:63:f0:cc:c7:71:36:a9:c7:ae:70:3c:12:
                    08:39:8a:3e:b3:85:4d:62:e8:4f:6f:5f:e3:38:80:
                    50:07:c8:5f:d6:72:30:eb:1c:1b:b4:2d:9e:e2:45:
                    6e:7a:99:20:55:fe:c2:44:6b:b5:eb:04:d6:43:8f:
                    9d:0c:18:a5:7e:34:db:72:1d:75:63:ab:62:8c:64:
                    ca:0d:1d:57:90:8e:e3:3f:a8:34:78:27:17:4f:be:
                    8c:c4:69:8f:c7:3c:ca:94:22:80:94:dd:f0:97:3c:
                    ae:93:e9:94:35:47:be:b7:61:e0:17:52:69:1b:ea:
                    f3:e4:bf:1f:8d:46:fc:9c:aa:04:7b:ff:27:e6:6a:
                    37:1d:a9:e5:bb:c9:f1:38:fd:f0:b8:4a:31:db:22:
                    62:a0:2a:29:dd:a9:c5:f9:26:9f:bd:d2:1c:4c:0c:
                    76:a0:98:9a:2b:eb:91:51:f8:11:02:95:f6:9e:8a:
                    c0:2a:64:2a:7c:92:af:eb:81:8e:bb:4c:91:00:7a:
                    bf:5f:56:fa:26:ee:64:05:f5:40:b0:85:93:5c:17:
                    7f:52:ee:1c:ac:a5:13:31:07:69:d8:28:47:76:0f:
                    ef:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:F8:F4:8D:A5:54:2C:C2:C8:6D:71:F9:29:C2:E5:26:E8:05:3A:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/1bfa1d5d-8d66-39b9-a80c-20790ee738e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.231.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:98:b6:02:e5:1a:ff:0f:55:02:eb:94:1c:30:28:9b:e0:4e:
         10:65:c0:b5:2b:74:c0:dd:f7:6f:64:7f:cd:13:d3:c3:ed:4c:
         6d:ce:2d:38:82:21:5a:20:3d:3e:8e:2a:05:02:20:27:7a:55:
         6d:4c:b4:8b:0d:52:87:3c:51:63:cf:68:c8:ca:b8:bb:34:19:
         11:47:81:6f:c3:86:6a:fc:90:56:58:65:29:38:10:1f:73:d1:
         67:36:bd:9c:de:74:ee:a6:17:e1:28:d5:85:bf:e8:ef:84:21:
         05:13:29:dc:79:43:76:b0:d1:b0:82:30:60:92:56:20:ac:58:
         c7:91:27:9e:76:f0:a0:c1:e8:14:36:ab:29:e5:d2:ba:56:fa:
         42:a0:53:5a:88:0c:5f:ff:e3:ee:c7:30:97:7f:a1:19:66:49:
         03:c7:99:21:28:64:3c:8a:52:20:10:65:7d:aa:7e:3f:d6:b3:
         43:e7:76:c9:1d:51:f4:22:f1:58:5c:f7:47:cf:d3:64:d0:74:
         37:2f:b1:9e:cd:cd:0b:21:b3:a3:6c:20:64:1f:80:4f:b4:2f:
         71:eb:f2:42:d3:30:49:99:a9:87:3f:cc:47:65:dc:c5:53:25:
         f0:bf:bb:b3:df:05:01:fb:12:a0:ee:a4:2b:2b:e3:ae:be:1d:
         c4:73:a9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:26 2026 by rpki-client