Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a13d722b-8768-3465-ad07-1753eea22842.roa
File:                     a13d722b-8768-3465-ad07-1753eea22842.roa (raw, json)
Hash identifier:          2skV2mUBmdXjBaAPkcXp+/rP+E9CigC3z7RZh8zhdus=
Subject key identifier:   F6:C2:87:7C:16:64:C2:82:40:75:54:99:90:96:18:DF:FE:36:E6:CF
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDDCD08B0179926EA241116C0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a13d722b-8768-3465-ad07-1753eea22842.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        70.171.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cd:08:b0:17:99:26:ea:24:11:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=e375fda5-54f0-432c-b3f0-3095a187133b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:db:d2:dc:33:d1:ce:63:45:a5:8a:bc:19:39:
                    8f:d2:22:4c:e1:b7:a9:0e:83:10:2c:b2:e9:e3:4d:
                    9c:f2:e9:6b:23:75:74:ac:63:0a:7c:e9:68:ae:1f:
                    0b:32:c1:d2:d0:6d:1b:c1:bd:21:73:4c:5e:e6:65:
                    b1:64:56:71:66:32:de:f9:cb:e5:14:2e:e5:a3:7d:
                    11:4e:5c:83:33:23:68:39:63:67:69:03:ac:ee:f9:
                    94:84:40:a7:43:f2:d9:8e:87:01:bb:c5:e0:7d:99:
                    4d:9f:c0:3f:f4:48:8e:36:e4:9a:6c:25:01:af:20:
                    e8:ee:04:4c:6e:3e:53:d6:d4:bc:91:99:d7:b1:99:
                    30:76:22:52:c5:ae:63:b7:7a:13:ef:ce:9e:ce:38:
                    ac:0f:7d:48:dc:28:82:27:1d:d9:23:c5:00:08:28:
                    6e:76:60:99:98:ac:69:0a:ef:53:b2:05:b1:12:4f:
                    66:72:69:89:a5:71:06:5f:2a:5d:0c:ad:33:d7:ef:
                    ca:ad:f9:b7:9e:88:e1:8e:d6:a3:e8:45:22:98:95:
                    1c:8a:9a:de:57:a2:c8:80:5d:26:3f:15:ac:30:bc:
                    54:e3:7c:a0:7c:42:d1:0d:d7:a1:55:e9:40:12:a2:
                    78:51:34:48:f6:a3:df:df:0b:09:bf:29:dd:d8:12:
                    77:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C2:87:7C:16:64:C2:82:40:75:54:99:90:96:18:DF:FE:36:E6:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/a13d722b-8768-3465-ad07-1753eea22842.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.171.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:05:b3:ae:94:f4:7d:a1:6f:c9:59:2e:de:56:41:ca:06:e3:
         61:87:a2:2a:cf:b0:d7:ce:b4:f3:bb:6f:c4:94:0c:fb:f5:e7:
         6e:9b:60:5a:c3:41:a9:ae:85:75:bd:12:87:b6:ef:10:ea:b8:
         8e:fe:75:8e:fb:1e:ea:db:fd:3c:d6:b3:61:02:eb:19:71:07:
         75:dc:99:7c:bd:d3:76:dd:59:6e:d4:3e:fb:26:0b:0c:02:53:
         66:1c:e3:a6:4f:8d:3c:f9:56:c8:d5:5a:92:3d:8b:1d:43:0e:
         b7:0a:a0:8a:07:ac:e1:5e:43:84:de:b9:7d:ec:bf:b8:47:be:
         3d:c2:12:33:4e:8a:f2:a0:17:9f:0d:3d:4a:14:8f:fe:58:22:
         fe:11:48:e4:8c:78:61:8d:9d:ef:05:bd:69:9b:1d:24:05:81:
         ec:de:10:64:5a:a3:7e:8f:8d:a1:62:e0:17:7c:6e:64:7f:9e:
         47:d3:0b:9f:1b:ed:e2:4f:8f:2b:71:af:e4:1b:76:48:20:d6:
         57:d0:21:b4:31:5f:74:c0:f1:7f:59:d3:b5:6b:f8:b0:64:c8:
         bb:d1:96:b2:cb:11:ff:fd:86:cd:24:97:46:3a:1d:54:cb:10:
         75:0d:a0:19:16:a5:19:63:08:68:b6:6a:25:e6:8e:67:12:61:
         82:93:d7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:32 2026 by rpki-client