Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c0ab6ef-d1ae-3503-9488-95b96ef93ad1.roa
File:                     5c0ab6ef-d1ae-3503-9488-95b96ef93ad1.roa (raw, json)
Hash identifier:          XY7KE/sV//ldWC52elfvWSW7bauLXCwz7VQhFKgGxAE=
Subject key identifier:   32:CB:34:25:94:81:8B:AD:E2:5B:EA:8C:41:5E:92:05:41:E8:71:96
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDDCCD672BBB2E5C3FACF22F0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c0ab6ef-d1ae-3503-9488-95b96ef93ad1.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        68.108.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:d6:72:bb:b2:e5:c3:fa:cf:22:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=2f0e8630-d951-423e-be81-7390d637633f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1a:fa:14:2e:1d:f1:a8:21:ca:fb:54:46:d4:
                    2b:b0:b3:e4:77:13:78:92:87:9f:0c:90:c7:94:ff:
                    00:ba:e8:6d:82:ab:6f:d9:ea:95:63:15:d6:45:d6:
                    9f:74:a7:15:c4:b4:22:f6:6b:71:80:18:83:31:3b:
                    02:c2:0a:4f:c2:a5:ac:93:6a:30:0b:ae:17:d4:f6:
                    d3:0c:db:eb:ce:6a:5b:61:e2:df:3c:92:7b:fa:79:
                    a1:8b:3e:99:a3:00:e7:1a:77:76:39:cc:61:44:85:
                    fa:d0:6a:d9:d2:a8:42:4f:39:bc:49:b6:a4:a0:1d:
                    c3:bd:0e:91:c6:56:bc:77:a2:1b:b9:08:45:5f:7a:
                    f7:66:a0:16:5a:18:d4:56:7c:62:70:36:3e:a1:12:
                    f5:45:54:06:97:d9:a4:9f:e4:82:83:c7:5e:fe:32:
                    05:f4:81:d8:da:41:f1:31:11:a7:b4:fc:8c:c1:15:
                    b3:78:a4:33:3c:0d:22:e6:13:72:36:fc:42:e0:e3:
                    87:93:04:3c:ae:d4:83:50:c1:b7:25:61:4d:48:66:
                    ba:92:02:45:84:ee:f7:9b:c6:ae:0a:bc:91:d1:3c:
                    38:77:0e:27:b7:f1:c7:ed:a5:b8:da:69:19:04:01:
                    f4:15:89:46:d9:5f:8c:a5:f0:fb:c6:99:c7:8c:ed:
                    1f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:CB:34:25:94:81:8B:AD:E2:5B:EA:8C:41:5E:92:05:41:E8:71:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5c0ab6ef-d1ae-3503-9488-95b96ef93ad1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.108.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:e8:8b:41:9d:aa:06:89:15:f2:6d:0d:8f:ab:5f:dd:85:35:
         26:1e:e8:a3:17:bb:f1:3c:1f:58:8c:72:a9:12:b4:ec:70:d4:
         15:69:08:f7:83:f3:5d:16:67:f5:55:da:38:7f:5a:af:d7:e8:
         e7:42:1a:2b:b9:b8:5a:d7:bd:6b:6a:c9:84:46:f6:47:ec:08:
         a3:74:a3:b1:9c:d4:0a:e2:39:62:1f:bb:22:87:49:56:94:b1:
         50:d6:99:5d:d1:d8:99:80:e8:fb:d5:38:24:5d:52:86:cb:6e:
         57:1d:ba:f0:c1:1e:fb:9a:66:f7:26:0e:48:19:fc:dc:48:26:
         b9:11:42:8d:8f:b3:a3:75:92:1e:6b:54:1e:4e:9e:f1:3b:d3:
         36:e8:8e:ac:1b:88:a2:60:6d:46:49:a6:aa:21:fd:1f:54:dc:
         fc:5c:f7:8f:25:67:3b:07:9b:55:ae:c9:fb:50:9f:2b:4a:7b:
         14:d3:bd:5b:48:21:70:ba:f8:08:44:22:27:98:cc:0a:f6:ba:
         41:9b:38:10:81:04:ae:2d:ea:b9:e4:32:36:2f:b3:df:21:29:
         53:3b:21:1a:5c:f4:76:1b:66:b6:40:23:c8:d6:09:2d:a2:f3:
         52:0d:03:46:48:19:16:f0:38:e4:54:bb:46:c0:af:dc:d8:5a:
         66:4b:8a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:14:40 2026 by rpki-client