Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4043bc82-6dd1-3989-817d-195769bd4f82.roa
File:                     4043bc82-6dd1-3989-817d-195769bd4f82.roa (raw, json)
Hash identifier:          zt0idO1Dd/HijONEmOfUL+QJk0DBFVAOKGMvgYwRYB4=
Subject key identifier:   37:A7:BD:AA:CC:0D:93:F4:EC:E6:17:D2:56:A1:17:37:35:A6:BC:1B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDDCCFF562A94C938B4D205B0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4043bc82-6dd1-3989-817d-195769bd4f82.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        68.110.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:ff:56:2a:94:c9:38:b4:d2:05:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=f36253a1-d68b-4583-88d5-b8d06f8795df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:da:99:a5:2c:23:89:03:c9:88:90:de:ef:
                    ab:d7:7e:31:3a:9c:c4:a3:6a:46:31:25:4c:5f:9b:
                    f8:70:39:0c:7b:ad:7f:44:aa:f2:56:37:53:c6:94:
                    3f:07:2a:11:eb:84:c9:2d:cd:25:49:3d:af:4d:70:
                    58:0f:2d:d5:63:30:d7:6d:d7:c7:c5:f1:7b:0d:b1:
                    45:08:0e:f5:fa:a0:8f:9f:b4:c4:ba:25:6f:64:f7:
                    c6:1c:c1:23:4e:6a:0f:92:a6:03:52:d5:20:78:63:
                    e0:85:26:f0:b4:44:0e:37:07:c0:5d:24:28:8a:48:
                    4f:a8:27:73:69:9a:81:4a:83:e2:1e:de:3f:b6:16:
                    12:cf:4c:ff:f6:3c:0d:78:0a:ce:0e:1e:84:ac:37:
                    b2:ac:e1:fc:dd:f2:8f:bd:a6:c4:7b:7f:28:77:d4:
                    e5:b4:c0:81:6d:90:9a:06:a8:d3:4e:36:c5:8a:bf:
                    05:be:8a:05:69:e7:71:2c:3a:b9:82:77:9e:3c:53:
                    ce:ba:b6:18:79:78:33:80:1d:eb:b2:db:e3:4a:b6:
                    e7:0a:56:28:58:6e:14:a4:4d:76:41:63:ac:05:d1:
                    0c:87:1d:91:0f:8f:23:b9:84:d9:8f:75:87:86:6c:
                    7c:4f:a6:7a:e9:17:72:e4:4b:cd:43:ad:b7:0d:5a:
                    d2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A7:BD:AA:CC:0D:93:F4:EC:E6:17:D2:56:A1:17:37:35:A6:BC:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4043bc82-6dd1-3989-817d-195769bd4f82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.110.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:80:8b:3d:3e:a5:ca:92:48:b2:5d:e5:cf:21:07:04:7a:11:
         2c:10:47:ac:ba:e7:1f:92:4e:60:39:9d:5e:d0:74:f2:09:c4:
         fc:0c:39:d9:f5:73:0b:89:b4:69:89:26:fd:06:73:b8:62:c4:
         a2:eb:86:35:b7:38:3a:12:5e:07:1e:8a:9c:f8:32:9a:4d:57:
         a3:c9:bb:97:59:1a:5a:0b:0f:7a:e7:bc:7c:01:1d:89:98:37:
         1c:4f:e7:5b:5d:3b:90:f7:53:84:ef:a5:88:9d:00:37:2b:bb:
         e3:eb:2c:17:08:af:69:1a:b7:6d:10:cc:66:f3:4d:10:aa:fd:
         0e:e8:3b:f7:7c:f8:ee:81:5f:2b:ce:9a:c4:18:0b:08:f3:d0:
         e0:f9:3f:95:0a:66:26:4b:e9:b2:3d:04:39:b9:dc:9c:95:6c:
         98:d6:e8:f1:22:61:ec:f4:d6:02:ab:f2:ac:0f:92:c3:20:b5:
         78:f0:c1:25:a6:12:46:b9:b3:62:7c:09:af:a5:9f:70:bd:60:
         d4:fe:96:d4:f2:da:ef:93:42:e6:44:e0:48:7f:7a:90:b5:a3:
         a8:f4:d8:e9:fa:28:98:88:df:99:11:89:58:8f:4a:0d:ac:1e:
         7e:0b:d2:6a:c2:62:4d:0a:b8:30:af:e4:34:44:1a:31:68:47:
         c7:28:0d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:15:34 2026 by rpki-client