Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4bf8f171-9f68-3f0a-9289-c3896f72987d.roa
File:                     4bf8f171-9f68-3f0a-9289-c3896f72987d.roa (raw, json)
Hash identifier:          AhXDrbYfM4sgb+96QaSpBOoDFladsyEc9NB/U6+Jafw=
Subject key identifier:   42:EC:E0:59:DB:E9:15:D5:16:76:C9:00:50:76:27:5F:14:05:00:6F
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDDCD2B170E49B6F9044FF960
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4bf8f171-9f68-3f0a-9289-c3896f72987d.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        68.231.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cd:2b:17:0e:49:b6:f9:04:4f:f9:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=b5185509-c0fc-4d8a-81e7-0b353d2c323f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:96:ef:7d:70:a8:a8:b6:22:47:00:dc:67:15:
                    0d:b4:68:89:7c:b1:54:9c:c2:9d:c6:31:32:fd:a8:
                    c0:81:d8:2c:11:98:1a:9f:21:84:72:3d:0a:4b:16:
                    99:2d:f9:3b:7c:ea:5f:a8:78:38:a0:6b:74:57:de:
                    8e:47:ad:14:00:35:4d:0c:0d:c1:a9:9a:20:63:83:
                    74:69:ba:12:62:d0:ad:97:e0:ae:03:3a:53:73:38:
                    4b:8c:9a:9d:0f:bd:d4:dd:4f:50:87:6b:fc:5e:57:
                    2c:ac:a8:9a:1a:f5:ef:9c:d6:ad:b9:d9:95:de:e3:
                    f9:13:9c:61:f7:cd:69:49:ea:5f:bf:d0:87:44:4e:
                    93:cb:8a:53:57:a1:4c:f5:d0:7d:75:f7:bb:27:6e:
                    d8:f6:64:14:a7:dd:9d:ca:9c:86:8f:cf:fc:fa:fd:
                    bc:6b:02:80:86:2f:93:15:88:6d:b3:dc:7f:88:76:
                    30:15:e0:92:ac:b4:42:9b:c6:67:89:b0:ab:cf:7d:
                    54:19:b3:4d:0b:e6:a3:1a:e4:86:24:8d:fe:45:1e:
                    af:80:48:86:43:0c:74:7e:83:48:9a:c8:55:56:0e:
                    e1:ba:93:2c:99:61:04:f3:d5:a8:40:86:c7:f0:d6:
                    fe:9a:8e:9c:47:95:71:40:23:44:2a:4d:ad:4b:53:
                    ad:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EC:E0:59:DB:E9:15:D5:16:76:C9:00:50:76:27:5F:14:05:00:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4bf8f171-9f68-3f0a-9289-c3896f72987d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.231.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:33:95:b1:2c:26:9b:70:dd:19:14:e5:3a:03:b2:f2:f2:f8:
         e1:6e:dd:1a:73:b8:93:6d:62:82:ab:6b:c0:ea:38:7d:bc:98:
         90:ec:85:ec:aa:9c:bc:13:a7:f3:79:36:3b:48:15:ed:ba:b4:
         14:44:76:43:a0:2c:1e:d3:09:e5:f2:7a:84:c9:91:7d:8e:c6:
         e6:f0:73:7c:29:17:ff:aa:c3:30:5c:e1:93:6d:6e:41:1c:4e:
         5c:90:16:5b:87:77:ef:14:51:61:d4:7e:6b:b0:d8:ee:15:db:
         6a:4d:e7:6b:7d:14:14:04:44:57:0a:f1:94:e4:de:b5:7e:f5:
         5f:d7:0a:a4:dc:ac:ec:ad:57:67:37:fa:9e:b4:d4:7c:ec:32:
         1d:8e:16:e1:1b:39:e2:a1:4a:93:5b:38:f8:d2:64:57:14:e7:
         a3:81:c6:3c:10:f9:bf:f8:0f:53:0a:10:a0:c5:e5:59:ec:71:
         6d:98:55:97:78:27:a3:5d:a7:46:30:f6:5c:91:2a:33:b9:db:
         8e:f1:f0:59:eb:e5:62:d5:33:92:2c:01:f3:9b:9c:be:ac:9b:
         7a:cb:ff:0b:b7:6a:28:56:4f:79:c0:62:6b:56:8a:ef:dc:34:
         2e:7b:94:9d:ac:dc:b2:40:04:f6:79:67:5e:61:41:44:b5:78:
         37:e7:8d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:14:06 2026 by rpki-client