Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/259cfdf4-ec01-313b-9e61-3c35644318c4.roa
File:                     259cfdf4-ec01-313b-9e61-3c35644318c4.roa (raw, json)
Hash identifier:          d40AbgaCRu4Jr+VZkoCV5kQOmuvxlM2WV7vjSZOR44o=
Subject key identifier:   0C:8D:7D:A8:6B:DE:4F:ED:A6:53:E6:5C:ED:E2:E8:7A:E5:F6:0A:6D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF3216DD9BF4D8C589B5C900
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/259cfdf4-ec01-313b-9e61-3c35644318c4.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        72.208.94.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:16:dd:9b:f4:d8:c5:89:b5:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=23ec430e-8be7-4680-807d-07e0aa1b1860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:18:3e:40:38:36:9d:b3:c5:43:a4:1a:de:3a:
                    ca:77:6b:0c:fb:eb:bf:73:2a:e5:36:df:13:14:a0:
                    6b:af:90:83:72:54:90:b2:62:6b:37:f6:56:68:00:
                    ca:7f:a5:da:37:dc:58:dd:85:9d:11:4f:de:79:18:
                    27:fe:0f:7d:ab:17:ea:c1:f3:9b:3f:7c:cf:25:6b:
                    46:20:30:1b:6d:97:60:c7:39:6b:59:3e:de:4b:fc:
                    d2:af:ef:15:be:95:d8:0e:1a:89:70:63:2a:e7:d7:
                    c2:af:92:d9:41:06:20:66:da:74:9c:c3:95:20:7d:
                    b4:9e:95:38:21:4c:be:98:3e:26:fc:22:63:03:26:
                    51:e1:76:4e:8d:fb:ac:38:d7:6e:59:19:08:dd:1d:
                    a4:82:49:58:53:16:a0:97:65:1f:26:58:91:d9:1d:
                    b7:76:07:77:61:44:71:3d:b3:a3:e7:8b:f9:2e:e0:
                    0c:5b:23:92:0c:73:bb:17:63:b5:ef:bb:84:36:d3:
                    0e:8f:c3:7a:55:a6:a1:7a:13:c2:fb:95:9b:41:32:
                    13:a8:d1:14:dc:15:25:42:78:67:00:35:ab:8c:e7:
                    ba:c1:b7:b4:c7:36:72:3d:70:1f:3b:f9:02:f3:65:
                    79:eb:c1:bd:af:55:58:20:7c:91:b6:cf:17:2c:cd:
                    cc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8D:7D:A8:6B:DE:4F:ED:A6:53:E6:5C:ED:E2:E8:7A:E5:F6:0A:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/259cfdf4-ec01-313b-9e61-3c35644318c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.208.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:d5:a4:ef:7b:0f:2e:d0:e8:c5:1f:26:61:7f:6f:a4:a8:ab:
         00:ad:87:93:bc:c9:b3:60:8f:b2:6d:43:76:9b:49:cf:07:d6:
         bb:1e:ea:20:f8:98:e0:65:1b:f2:c2:f5:5a:84:df:8e:a7:71:
         8b:7f:fc:5b:90:e9:b9:1e:e3:4b:2a:ce:c8:e7:5b:d6:83:32:
         d4:26:12:62:53:93:f3:27:c9:b7:64:5b:d2:13:5f:4b:64:16:
         57:a5:a8:43:75:93:c1:9e:df:d3:fb:1b:79:68:bc:5a:31:30:
         54:76:11:37:f5:ab:8e:3c:cd:e3:df:9b:a5:55:f2:00:b9:6e:
         9f:b5:0f:5b:bd:7a:9c:36:fa:ce:81:6b:4a:15:7a:fc:3a:9d:
         e3:4d:ad:e7:07:32:58:32:d7:87:b1:d0:e8:1d:64:e5:3a:fa:
         3e:45:4e:23:da:5d:08:e1:7d:e8:3c:b9:00:f4:2e:f6:80:eb:
         b5:49:58:35:94:ce:1c:e1:a9:9f:dc:80:f1:ad:f8:ce:38:76:
         ba:e1:7a:32:c3:a1:c6:e6:c4:c9:9f:72:77:8a:2a:56:ef:af:
         e9:a2:55:54:b9:67:11:b9:93:a7:f3:03:1d:62:90:10:a9:83:
         3b:32:10:46:75:03:23:61:23:e2:79:36:a5:be:d6:70:08:a5:
         33:de:35:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzfMhbdm/TYxYm1yQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDIxNTE0MDA0MVoXDTI2MDUxNjEzMDA0MVowLzEtMCsGA1UEAxMk
MjNlYzQzMGUtOGJlNy00NjgwLTgwN2QtMDdlMGFhMWIxODYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxg+QDg2nbPFQ6Qa3jrKd2sM++u/cyrlNt8T
FKBrr5CDclSQsmJrN/ZWaADKf6XaN9xY3YWdEU/eeRgn/g99qxfqwfObP3zPJWtG
IDAbbZdgxzlrWT7eS/zSr+8VvpXYDhqJcGMq59fCr5LZQQYgZtp0nMOVIH20npU4
IUy+mD4m/CJjAyZR4XZOjfusONduWRkI3R2kgklYUxagl2UfJliR2R23dgd3YURx
PbOj54v5LuAMWyOSDHO7F2O177uENtMOj8N6VaahehPC+5WbQTITqNEU3BUlQnhn
ADWrjOe6wbe0xzZyPXAfO/kC82V568G9r1VYIHyRts8XLM3M4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAyNfahr3k/tplPmXO3i6Hrl9gptMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMjU5Y2ZkZjQtZWMwMS0z
MTNiLTllNjEtM2MzNTY0NDMxOGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSNBeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADrVpO97Dy7Q6MUfJmF/b6SoqwCth5O8ybNgj7JtQ3abSc8H1rse6iD4
mOBlG/LC9VqE346ncYt//FuQ6bke40sqzsjnW9aDMtQmEmJTk/MnybdkW9ITX0tk
FlelqEN1k8Ge39P7G3lovFoxMFR2ETf1q448zePfm6VV8gC5bp+1D1u9epw2+s6B
a0oVevw6neNNrecHMlgy14ex0OgdZOU6+j5FTiPaXQjhfeg8uQD0LvaA67VJWDWU
zhzhqZ/cgPGt+M44drrhejLDocbmxMmfcneKKlbvr+miVVS5ZxG5k6fzAx1ikBCp
gzsyEEZ1AyNhI+J5NqW+1nAIpTPeNbA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:47:08 2026 by rpki-client