Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8278f063-c744-31f0-a0b2-0d0a92cfac54.roa
File:                     8278f063-c744-31f0-a0b2-0d0a92cfac54.roa (raw, json)
Hash identifier:          ixX6ZsJEX2rJyxERvGh2Cfa0jhGcr8+Ct1UvgUND7UQ=
Subject key identifier:   DC:5E:DD:7E:AD:C3:99:F5:F8:4B:19:00:03:00:8B:60:01:72:79:BB
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF3271A5FEC4719FD02586C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8278f063-c744-31f0-a0b2-0d0a92cfac54.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        72.208.218.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:71:a5:fe:c4:71:9f:d0:25:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=ad334d70-890d-4dc1-bfa8-e32ec1daaa0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:66:4b:b5:f1:e8:e3:8f:4c:f5:b1:7c:63:39:
                    9f:05:22:7f:03:43:8c:a5:67:b4:33:26:25:c2:e0:
                    04:51:09:84:11:68:08:d4:8d:9e:bb:af:83:da:de:
                    96:3d:e1:86:88:d0:c2:72:a7:d6:ba:95:4f:37:56:
                    59:7b:d1:87:58:d6:d0:1b:6e:00:f3:72:78:69:5c:
                    d8:0a:34:49:15:76:eb:ca:96:4a:ad:9d:6d:2b:e6:
                    7f:3e:f2:32:6b:4f:f1:60:65:7a:a9:67:69:d0:ac:
                    9c:6e:4d:42:55:62:4c:b3:5c:2c:2b:65:fc:9a:d7:
                    de:13:82:4b:17:42:20:c1:7b:86:ce:34:e0:af:46:
                    f4:ea:1b:6c:5b:cb:79:c5:74:d1:3f:ba:e3:d0:6c:
                    87:0f:f8:3e:0e:7a:3f:08:f6:d3:17:50:78:fc:2a:
                    c2:45:26:91:95:e8:46:38:f7:3d:cb:38:09:70:9b:
                    f9:f3:6a:55:d5:11:1e:7f:15:63:3d:f6:85:00:88:
                    04:68:fb:6d:4e:59:c2:ab:1b:dd:55:90:88:6a:08:
                    53:df:b5:9e:2a:6b:c9:e3:34:b5:8c:de:6d:5e:38:
                    47:04:67:dc:6b:33:9a:88:d8:90:d5:14:3d:a0:c8:
                    27:e7:3d:00:d9:81:08:74:68:e5:fb:20:5b:32:41:
                    0c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:5E:DD:7E:AD:C3:99:F5:F8:4B:19:00:03:00:8B:60:01:72:79:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8278f063-c744-31f0-a0b2-0d0a92cfac54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.208.218.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ee:6e:16:8f:87:4f:24:64:3d:75:0b:1d:f2:02:1c:11:81:
         10:ed:77:25:d9:bf:89:61:b0:e5:0e:c0:60:b4:7f:59:3e:69:
         0b:2f:ca:63:9d:a0:d6:70:82:a0:fe:99:7b:1c:5d:c4:26:91:
         ae:bf:55:d6:ee:e6:6d:e2:7c:53:d0:fd:2c:5f:ed:e9:2b:2e:
         48:96:80:0c:97:3f:e1:fb:43:89:64:6b:6a:dd:20:37:39:5a:
         f1:ee:91:14:6a:95:4d:fd:06:7d:0b:d1:8d:28:dc:b2:21:16:
         60:f5:df:08:26:19:4f:e0:ff:0f:1a:e0:54:7d:92:56:14:f5:
         8c:99:48:ad:94:b6:48:b0:88:c8:e3:ad:ad:26:4f:4e:dd:3d:
         20:01:f8:6e:b9:30:28:9c:df:c8:5a:63:4a:fb:6b:88:8e:d2:
         57:93:ee:44:97:fd:2d:74:23:74:70:b9:63:18:6a:8e:df:6b:
         c2:c6:9d:e1:15:d0:7a:f6:24:9d:1d:85:e0:75:10:2a:9e:3e:
         fe:42:58:c5:90:70:5c:35:a5:33:d2:8e:49:7d:b8:1f:1a:1a:
         f0:7f:3d:78:03:35:de:72:92:ff:3d:72:35:12:e9:6b:8b:51:
         4e:22:30:99:b6:28:68:e1:40:c0:06:6d:ec:59:9f:e5:7f:94:
         3a:47:11:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:51 2026 by rpki-client