Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e972f3c-5cb7-36f1-8971-7067dd2d6263.roa
File:                     8e972f3c-5cb7-36f1-8971-7067dd2d6263.roa (raw, json)
Hash identifier:          3lXY8RS1eyNXR5P6miLXhNXmAdeKi5JhREFhK0gEahg=
Subject key identifier:   CE:E3:D7:7F:CD:9C:62:38:EA:EC:08:DC:7E:BE:96:71:C2:E1:7F:F5
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDDCCD930C77B1CCF94BCC640
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e972f3c-5cb7-36f1-8971-7067dd2d6263.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        68.231.114.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:d9:30:c7:7b:1c:cf:94:bc:c6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=10a529ee-32cc-4fbb-9f4f-e23aef127a7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:93:1a:bd:2a:31:6e:b2:9a:a8:73:ea:b4:
                    60:6a:5a:36:3d:b2:7d:6f:49:88:d9:e2:76:13:dd:
                    5b:ca:54:77:fb:dd:6a:9a:96:a6:cd:68:06:dc:dc:
                    b0:e3:30:92:b9:da:aa:d2:a2:58:d0:7c:da:95:b8:
                    63:a0:86:ca:ea:73:ad:4b:76:93:02:c6:0b:61:b8:
                    23:95:7d:cc:6f:c2:79:67:53:7d:70:1b:d9:01:ce:
                    a0:fb:c0:2b:76:de:8c:c4:54:37:e0:75:55:0e:5c:
                    1e:6c:5c:35:3b:1c:bc:4a:82:be:bb:75:3e:d5:46:
                    1f:11:07:57:74:c0:16:49:f8:c6:0d:72:99:5c:39:
                    54:7c:22:b9:27:eb:ed:85:39:4b:d6:ec:3c:39:17:
                    7d:56:d4:11:41:b5:9a:ce:29:4a:62:2b:69:81:82:
                    6b:0a:dd:f4:84:45:f5:68:30:32:77:8a:d6:79:c0:
                    1c:29:3c:97:0b:25:2b:3d:36:97:f9:48:65:82:b8:
                    4b:fb:81:42:6f:0f:28:a1:ed:56:16:47:18:21:04:
                    19:42:aa:aa:b9:4a:b9:d8:81:c1:ab:e4:06:75:ee:
                    4c:7b:2d:c2:f6:79:7c:3e:81:37:1a:72:fe:ea:c7:
                    46:fc:7d:8c:92:9d:90:5f:38:09:40:ce:a3:3e:1c:
                    ac:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E3:D7:7F:CD:9C:62:38:EA:EC:08:DC:7E:BE:96:71:C2:E1:7F:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/8e972f3c-5cb7-36f1-8971-7067dd2d6263.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.231.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:9b:17:73:fc:17:11:16:1e:e1:39:68:7e:95:29:a5:fd:8a:
         07:79:0d:f3:de:a3:57:0a:56:61:ca:23:37:74:3a:41:e1:a3:
         97:de:32:83:41:55:86:b7:12:90:63:f6:4f:99:65:59:1b:49:
         7a:80:4a:75:79:f7:ce:f2:c3:65:ba:0d:5c:1a:90:c0:ff:1b:
         e8:87:59:0d:a7:61:61:8e:d7:cf:63:3c:f3:6b:46:2b:99:a5:
         5c:50:5a:a0:88:85:82:30:55:c2:6c:1d:88:8a:e8:56:8a:42:
         17:1b:9a:51:ca:22:ff:62:c2:b4:3a:e1:df:29:9c:80:a9:5a:
         56:42:80:ca:3d:38:63:0a:c9:f3:20:41:f2:9d:be:ab:22:3c:
         21:88:2b:36:69:10:b7:89:58:da:9a:b0:b3:34:df:19:30:00:
         59:1e:08:0c:35:d2:37:a2:43:6f:28:8a:5e:26:86:0d:f6:9a:
         a3:56:2c:4f:9b:60:20:e1:d8:a2:93:43:df:5e:8d:ea:f1:b0:
         5b:60:a9:7f:42:fb:16:bb:0c:ca:f5:f2:65:a0:8b:08:98:74:
         06:5d:43:c2:50:27:18:db:22:0c:54:13:a3:87:00:8c:42:01:
         8f:85:8b:8c:71:dd:54:d3:65:b8:10:85:b1:d3:ba:6f:92:56:
         10:98:18:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:48:06 2026 by rpki-client