Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d838612-1c08-3867-b2b3-267389ecdf04.roa
File:                     5d838612-1c08-3867-b2b3-267389ecdf04.roa (raw, json)
Hash identifier:          NiMIXu/UdL/rB4O1jAwGrbkfQ3Z3ovdY8+tt0T0394g=
Subject key identifier:   1D:F5:20:45:3B:93:40:08:B7:11:CF:37:D4:76:23:FA:CF:70:BD:84
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CE09751FB011AA05BC7359D50
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d838612-1c08-3867-b2b3-267389ecdf04.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        68.224.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:51:fb:01:1a:a0:5b:c7:35:9d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=9965bcbe-7e37-4de7-9ab1-d09a1497b039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:6c:95:2d:2c:f5:a3:61:68:79:7d:3f:e9:28:
                    8b:74:ef:3d:c3:7b:6a:35:85:f9:56:45:9f:a3:e5:
                    50:4f:01:d8:88:51:45:6a:70:9c:e8:69:0c:84:63:
                    0b:64:31:b3:55:1e:10:54:47:85:e0:7e:e1:f1:82:
                    3e:93:47:b0:27:ed:2f:a0:80:9b:74:48:99:ea:18:
                    54:46:74:b4:a0:e9:3c:ce:7c:f1:ab:ec:22:c0:97:
                    0c:81:d9:68:79:44:bb:7f:6a:e2:24:1c:62:dd:e2:
                    20:41:06:b8:d4:30:e5:b9:69:5a:30:2c:2a:f3:d2:
                    d9:4f:14:a3:d7:61:2f:1d:a3:e1:0a:97:92:4f:45:
                    54:cc:98:5b:79:2c:cc:f2:9a:63:67:a3:97:17:2d:
                    55:0d:2f:14:4a:d5:e1:d8:fb:a9:a6:d5:3f:61:d8:
                    a3:6e:4e:ca:01:c1:a7:b1:e4:f2:97:9c:e3:5c:76:
                    eb:fd:8e:a3:ef:c1:b1:b6:e1:fc:bc:b0:73:0d:7b:
                    07:67:1a:3f:95:d4:e3:44:39:9b:b4:0a:9f:92:1c:
                    5e:58:46:e1:4d:56:60:85:09:d2:ae:a1:0c:6d:f0:
                    6e:c2:80:8e:95:77:39:01:59:74:93:23:f2:29:0f:
                    48:25:05:05:ee:f1:71:5b:a0:80:6d:c8:71:ec:6c:
                    f7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F5:20:45:3B:93:40:08:B7:11:CF:37:D4:76:23:FA:CF:70:BD:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5d838612-1c08-3867-b2b3-267389ecdf04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.224.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:bb:4f:79:f9:31:59:ea:ea:f1:4a:b6:43:1b:9c:ee:e8:55:
         31:5e:4e:5f:a8:a7:a8:61:bd:93:13:ee:cc:20:bc:e2:e5:cf:
         1c:c1:dd:d1:12:bf:9d:6a:e4:c7:fc:f0:55:b5:76:e1:c4:a6:
         5b:25:95:9e:8d:68:73:0b:4a:e1:9d:74:e8:43:3d:d1:b6:c8:
         51:21:a2:65:84:76:bc:17:5b:5f:40:a8:d9:e2:fe:14:19:32:
         06:9b:96:e4:eb:b3:55:d3:09:5f:d0:45:e2:69:a4:e4:cd:18:
         fd:21:8b:c7:49:77:15:6a:63:a0:6d:32:66:cc:13:c4:85:88:
         f2:6f:b6:2b:18:c4:02:6a:7a:08:42:63:21:cd:cc:fe:f0:3c:
         5d:01:b4:0b:35:ae:77:20:73:2b:e7:bb:bc:79:44:04:95:a7:
         4c:66:72:ac:b6:36:c0:01:80:9b:d1:47:cd:94:22:52:7f:a9:
         d9:99:65:38:6e:63:da:fd:ab:a8:50:94:a6:a3:2c:c8:6e:8b:
         52:f6:91:5b:d5:ab:16:bc:90:0e:49:5d:42:77:2f:fc:c8:55:
         f2:bd:ad:31:ef:fd:29:98:6a:d6:1b:34:e1:da:44:ed:b7:f1:
         1c:02:b4:59:4b:ff:a4:e3:d5:7d:e6:5b:13:7a:9a:f9:b1:02:
         f2:10:9c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:30:49 2026 by rpki-client