Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b600909e-57ad-385a-9028-5b65ba80cffb.roa
File:                     b600909e-57ad-385a-9028-5b65ba80cffb.roa (raw, json)
Hash identifier:          e8/zjxLiJR0Sd6x3SlRz1tKqNH40vEVzCw+SvMiIBpY=
Subject key identifier:   B6:24:2C:1F:7B:44:62:90:BF:A4:C7:EA:FF:6A:A4:B8:58:BA:2A:0B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDC67836937A374C70D36D780
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b600909e-57ad-385a-9028-5b65ba80cffb.roa
Signing time:             Sat 14 Feb 2026 14:00:41 +0000
ROA not before:           Sat 14 Feb 2026 14:00:41 +0000
ROA not after:            Fri 15 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        68.98.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dc:67:83:69:37:a3:74:c7:0d:36:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 14 14:00:41 2026 GMT
            Not After : May 15 13:00:41 2026 GMT
        Subject: CN=efe80d32-3e8d-466d-8ce6-c07934cf8d41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:93:0d:d8:7e:45:bc:71:69:be:ee:12:89:f1:
                    a2:74:82:97:fa:75:ee:df:5c:16:56:0b:49:a6:1d:
                    e6:02:f2:e9:ac:8d:58:80:84:fd:e4:97:55:53:cd:
                    74:8b:2c:13:50:21:52:71:c4:9c:79:ef:60:60:6f:
                    bb:7a:b6:6c:ac:4d:a0:31:f4:6f:e4:da:c1:99:ff:
                    4a:f4:b3:12:25:bf:42:9b:af:a4:82:88:66:75:fb:
                    fc:64:9c:f1:9d:1a:88:5e:51:81:78:d4:bc:45:b6:
                    33:9d:92:1d:4f:d0:d6:b0:84:73:41:40:07:70:22:
                    d7:1b:00:a0:55:f3:20:ea:ed:f6:cf:66:70:8e:e3:
                    69:a7:e8:8a:46:96:3c:20:f0:8a:92:4d:f5:0e:71:
                    ca:cc:de:71:ea:60:a3:a1:31:b0:b3:b3:c6:b8:9e:
                    cb:7a:82:37:c5:8e:b9:3c:00:45:ce:45:1a:d2:be:
                    21:ed:d5:1d:7d:d5:66:8b:e4:fd:db:17:07:ef:cf:
                    12:a5:de:66:c9:8b:d1:90:2c:19:41:25:a6:c5:58:
                    6d:b3:4b:09:09:3c:36:d9:98:3e:84:60:5c:74:3b:
                    7c:4f:b6:13:48:8b:71:48:d0:fb:39:37:95:00:dc:
                    b0:33:f1:79:b1:3c:d6:85:d4:0b:e4:a0:0a:b0:03:
                    d2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:24:2C:1F:7B:44:62:90:BF:A4:C7:EA:FF:6A:A4:B8:58:BA:2A:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b600909e-57ad-385a-9028-5b65ba80cffb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.98.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:66:aa:a7:0a:5a:a7:9d:f4:33:c5:79:01:66:c0:9c:9c:2e:
         c8:05:39:b8:f7:85:8f:22:5c:3f:64:c6:6c:5d:3f:7b:1e:88:
         a1:54:fe:07:fe:b9:84:aa:7c:e8:49:cb:0b:23:a3:c4:8a:70:
         04:e6:6f:24:72:0b:a1:f9:3e:b8:cd:84:81:17:c2:75:27:ed:
         5e:5f:2e:44:6e:4d:78:7c:20:63:18:c0:cd:e2:bd:b6:29:75:
         05:e8:ed:23:1a:c3:05:f6:86:00:b6:5f:90:23:c2:d8:de:2e:
         73:14:37:31:cb:cf:32:73:43:d9:38:33:30:87:f0:b8:90:51:
         0b:78:b5:4d:a9:f0:cd:09:1d:28:c6:4c:2a:18:4f:d2:fe:6b:
         22:20:84:74:5e:d7:8f:44:05:cb:e4:5a:b7:7e:1a:ef:1b:ad:
         88:29:d0:94:32:08:14:8e:22:1c:73:47:da:b6:61:5f:86:5e:
         10:d0:52:78:9e:8d:79:db:92:b5:56:72:c6:0f:3a:2b:f8:07:
         08:73:64:74:bd:80:c6:7d:d7:9f:35:7c:f0:0e:c2:a0:f7:ef:
         92:4f:c6:16:16:e6:20:5e:65:a2:79:30:85:a6:6d:40:b7:a6:
         4b:5f:c0:d9:13:db:a6:e4:17:09:e7:78:5c:26:83:de:32:45:
         df:4b:09:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ4NpN6N0xw0214AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk
ZWZlODBkMzItM2U4ZC00NjZkLThjZTYtYzA3OTM0Y2Y4ZDQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZMN2H5FvHFpvu4SifGidIKX+nXu31wWVgtJ
ph3mAvLprI1YgIT95JdVU810iywTUCFSccScee9gYG+7erZsrE2gMfRv5NrBmf9K
9LMSJb9Cm6+kgohmdfv8ZJzxnRqIXlGBeNS8RbYznZIdT9DWsIRzQUAHcCLXGwCg
VfMg6u32z2ZwjuNpp+iKRpY8IPCKkk31DnHKzN5x6mCjoTGws7PGuJ7LeoI3xY65
PABFzkUa0r4h7dUdfdVmi+T92xcH788Spd5myYvRkCwZQSWmxVhts0sJCTw22Zg+
hGBcdDt8T7YTSItxSND7OTeVANywM/F5sTzWhdQL5KAKsAPSbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYkLB97RGKQv6TH6v9qpLhYuioLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjYwMDkwOWUtNTdhZC0z
ODVhLTkwMjgtNWI2NWJhODBjZmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARGIBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAJmqqcKWqed9DPFeQFmwJycLsgFObj3hY8iXD9kxmxdP3seiKFU/gf+
uYSqfOhJywsjo8SKcATmbyRyC6H5PrjNhIEXwnUn7V5fLkRuTXh8IGMYwM3ivbYp
dQXo7SMawwX2hgC2X5AjwtjeLnMUNzHLzzJzQ9k4MzCH8LiQUQt4tU2p8M0JHSjG
TCoYT9L+ayIghHRe149EBcvkWrd+Gu8brYgp0JQyCBSOIhxzR9q2YV+GXhDQUnie
jXnbkrVWcsYPOiv4BwhzZHS9gMZ91581fPAOwqD375JPxhYW5iBeZaJ5MIWmbUC3
pktfwNkT26bkFwnneFwmg94yRd9LCYg=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:06:55 2026 by rpki-client