Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b7203e1-14ef-3b47-a215-c54bbb6b4d95.roa
File:                     3b7203e1-14ef-3b47-a215-c54bbb6b4d95.roa (raw, json)
Hash identifier:          4iFSh+dOetjhO4TV4BqY7fQFJDQJth3zRTwPixBlQEM=
Subject key identifier:   5E:E9:63:CC:49:E0:82:24:98:30:14:3E:30:5E:F7:B1:B4:C7:E5:E4
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF32AF50009063B47E073B00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b7203e1-14ef-3b47-a215-c54bbb6b4d95.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        72.206.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:af:50:00:90:63:b4:7e:07:3b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=5cb8694c-e7af-47e2-8c69-e0751b8983e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ab:80:0e:74:58:0d:9d:23:70:41:36:8b:69:
                    55:b5:1a:78:b9:06:a0:43:03:26:8d:07:16:45:e7:
                    99:6c:d0:a0:19:29:e4:9f:86:73:d8:15:b1:2c:b9:
                    15:73:a7:5e:ba:31:96:fa:f7:a1:e1:88:ea:70:17:
                    f7:e4:52:0f:5e:3d:b4:ea:f9:d9:9f:f4:89:cc:32:
                    54:07:68:e5:28:30:fe:a5:e3:ce:11:00:f8:69:fe:
                    87:15:d8:99:0f:e3:41:ca:97:0d:e9:1a:30:05:32:
                    cf:cc:d4:4c:24:c9:04:7c:4b:24:bb:d5:78:10:bb:
                    2b:84:e9:db:69:93:0f:2b:08:47:ca:0e:d4:1d:1f:
                    7a:49:68:ad:09:c3:8f:ce:40:1f:56:67:a8:d3:5e:
                    3a:e5:2d:80:42:93:9b:85:3b:05:4c:37:8f:6a:8a:
                    af:65:88:e8:ad:fe:5f:3a:d5:d1:36:b5:6f:b2:3c:
                    32:77:57:c4:84:2d:a3:dc:c7:04:b2:3b:41:63:82:
                    9c:48:75:66:dd:c8:49:2b:2c:02:59:fb:f6:88:51:
                    fe:f5:96:67:b1:b9:28:91:3d:3c:bb:de:a8:a6:5a:
                    42:bc:2c:44:7f:c6:31:d3:db:0c:cf:f7:99:e5:d7:
                    5a:d8:60:91:7a:c4:08:4e:9e:18:99:10:74:da:08:
                    e2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E9:63:CC:49:E0:82:24:98:30:14:3E:30:5E:F7:B1:B4:C7:E5:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b7203e1-14ef-3b47-a215-c54bbb6b4d95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.206.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:89:0d:bf:1d:05:93:90:f5:95:31:c7:a6:00:7f:d0:12:4b:
         6f:06:b6:71:68:50:f7:a9:d1:f0:7d:c3:3c:f6:96:59:d4:b2:
         e8:4e:d9:d6:fc:e8:78:25:a3:1e:41:ab:70:ff:0a:3e:2e:b3:
         27:83:e6:a7:37:8e:3a:ce:85:a6:51:ec:4e:05:be:72:01:e0:
         f4:08:3f:83:1d:d4:cc:89:83:70:9b:7f:fa:18:bf:50:1f:b2:
         bb:0a:e4:05:37:a7:eb:c5:6c:21:66:78:05:ad:8c:e5:68:50:
         06:b7:03:19:f3:cc:1f:d8:ef:72:6c:55:da:fb:04:4a:38:b7:
         7f:ca:00:b9:7a:be:ae:92:98:9a:59:d1:86:21:35:c5:a2:56:
         cd:51:75:83:12:89:74:07:7f:73:6d:9f:fe:98:98:b1:95:23:
         a7:17:13:8c:ed:97:1a:6e:ec:89:87:e8:af:e7:4b:4e:76:ea:
         ee:b3:57:db:60:92:01:95:3b:5b:96:ff:7c:d0:bb:cd:e1:3e:
         83:09:53:e4:41:1b:55:c4:21:4c:5f:63:25:a5:94:9b:37:07:
         1e:a7:21:dc:f0:e0:fe:7d:f6:3f:c8:9e:b2:90:d6:20:a0:13:
         8c:f3:04:47:ff:8d:75:cc:32:a2:10:49:1f:8b:fa:e5:d1:de:
         fe:d2:19:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:34 2026 by rpki-client