Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6416746c-693b-3af8-8899-8f166ad1a845.roa
File:                     6416746c-693b-3af8-8899-8f166ad1a845.roa (raw, json)
Hash identifier:          l85XLwYC7gljX1okjHi/4qvvB0RX6aunCxie9bQrpOU=
Subject key identifier:   8F:E0:15:CD:18:3F:43:9E:CE:25:35:89:FE:59:54:3B:EF:C1:DF:D9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CD99D01AD2817E3323D9F2280
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6416746c-693b-3af8-8899-8f166ad1a845.roa
Signing time:             Fri 13 Feb 2026 14:00:41 +0000
ROA not before:           Fri 13 Feb 2026 14:00:41 +0000
ROA not after:            Thu 14 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        68.2.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d9:9d:01:ad:28:17:e3:32:3d:9f:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 13 14:00:41 2026 GMT
            Not After : May 14 13:00:41 2026 GMT
        Subject: CN=78a9bc18-e043-46e8-9a40-f99f15e76761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8a:da:d2:5c:9d:ff:cd:69:d9:61:8d:1d:50:
                    c3:5c:38:21:6f:56:1d:b1:cd:20:73:c4:11:2f:86:
                    47:68:e5:8c:dd:8e:67:1b:df:32:2f:48:b9:ff:b2:
                    bf:ff:6e:cd:33:1d:89:ab:99:07:63:f1:8e:d1:02:
                    df:44:9a:7e:bd:a2:0f:c5:d0:e4:5f:de:ca:29:27:
                    de:ea:f8:73:31:81:5b:bb:91:96:65:b4:e6:d9:0c:
                    5f:47:b3:10:8c:64:9e:65:46:a7:7e:9c:25:3d:94:
                    08:92:ca:18:df:21:fc:90:04:c6:67:0f:bc:30:35:
                    55:ab:91:c8:d1:2d:fe:28:fb:7d:9e:dd:81:cb:b8:
                    34:59:60:bb:73:13:ea:6c:4a:d4:66:b0:f6:d1:01:
                    3b:29:aa:48:51:21:01:12:5d:ab:e6:5d:9a:e4:22:
                    ef:50:4c:cc:4e:1c:69:ac:8d:45:49:39:85:c4:a1:
                    4d:02:7a:68:11:ee:be:69:09:60:64:15:de:5a:59:
                    32:4e:bd:70:90:ca:7e:5c:ed:2d:6e:56:84:bb:38:
                    6f:57:c5:b9:2e:61:93:c8:4e:11:b8:a1:15:f3:9a:
                    eb:58:d1:ad:e9:48:da:b5:80:20:72:19:3c:6d:2d:
                    26:d3:f6:c7:3b:47:6d:8d:97:35:d6:bc:f2:d6:0e:
                    ea:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E0:15:CD:18:3F:43:9E:CE:25:35:89:FE:59:54:3B:EF:C1:DF:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/6416746c-693b-3af8-8899-8f166ad1a845.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.2.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ee:20:7f:90:98:ae:08:d5:d2:9f:e3:c0:95:2e:ca:3d:28:
         19:c0:46:bc:58:6a:b5:b8:b5:54:1c:2a:5d:62:d3:18:3b:44:
         aa:2f:d7:37:39:08:36:f4:7e:08:30:d0:98:e5:bf:61:42:8d:
         75:42:d9:a1:b6:8d:86:56:37:75:3c:03:29:5b:35:c1:aa:74:
         d2:6c:55:39:e7:61:f5:47:ad:7e:79:98:dd:f5:0a:db:03:ed:
         1c:e3:05:c0:cc:57:a6:a8:c0:3a:c7:27:a5:5a:e0:ef:47:75:
         9e:56:9e:e7:85:9d:ff:8f:1f:d9:55:01:82:41:0f:6b:19:c7:
         c1:5c:54:17:5f:4f:27:be:4b:68:b7:9e:45:31:9e:cd:b1:75:
         60:65:8a:eb:dd:c5:4a:ce:c8:2c:e6:99:e9:35:da:eb:6a:f8:
         2c:41:3c:a6:e5:3c:64:d4:28:6d:a1:62:3e:92:d5:b0:00:6a:
         fb:a2:a9:c0:11:2b:c6:23:c9:3e:51:5e:48:59:96:ba:84:09:
         0e:7e:e2:39:d1:25:b4:e9:e9:01:f7:1d:4a:24:21:3a:ef:04:
         e4:4b:42:14:08:33:45:3c:9f:1b:13:1b:4b:c6:c5:ee:18:65:
         5b:0c:3f:35:36:95:6f:dd:d2:77:74:54:5c:cc:46:e3:09:85:
         20:18:28:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:45:13 2026 by rpki-client