Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b6d4d894-2fb4-3793-9230-0e2c5bbbf58d.roa
File:                     b6d4d894-2fb4-3793-9230-0e2c5bbbf58d.roa (raw, json)
Hash identifier:          b54W0mK1954xkrj+l7qLgZhsFBAZ1FXB+oXvPhLa/vo=
Subject key identifier:   BF:5B:9A:DB:82:E4:7D:9C:5F:3C:FD:CC:1A:56:C4:1A:52:90:41:64
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CE097B6F497F50F80C730CD00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b6d4d894-2fb4-3793-9230-0e2c5bbbf58d.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        70.175.56.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:b6:f4:97:f5:0f:80:c7:30:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=c66303dd-4a74-42cf-9d8f-2dc28763424e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:af:1a:9a:08:53:b1:42:dc:27:15:32:b8:d9:
                    f5:c3:f9:5b:ca:8b:52:f1:2e:61:a1:26:62:c0:05:
                    54:91:f7:63:8b:27:6a:8e:c9:50:47:a9:ef:f6:3e:
                    6b:7e:d6:2e:55:aa:f5:fd:fb:d8:6a:2c:03:84:2c:
                    7d:9e:59:08:f7:2a:cc:c4:0d:1e:98:bb:8c:af:c1:
                    64:4f:8b:51:ce:13:56:d3:7d:1d:66:f5:29:58:65:
                    2a:69:1c:ed:37:b0:1c:99:19:8f:5a:73:01:04:11:
                    26:ac:4d:00:9b:c1:4a:db:e4:4b:db:c8:78:61:05:
                    d3:24:32:f1:c4:8a:5d:e7:a8:06:3c:86:7d:e7:07:
                    44:1e:06:50:aa:a3:9c:46:ef:9c:10:19:23:95:82:
                    bb:17:52:fb:ea:f2:95:c5:22:30:fc:4c:e2:a7:30:
                    7c:ac:1d:db:60:9d:56:e0:c8:7f:e0:46:20:95:44:
                    a6:0f:34:60:ff:91:0a:ac:d8:2f:43:d0:bf:ea:f7:
                    63:0b:35:7d:8f:77:65:e8:16:d2:a2:7e:20:73:47:
                    d6:74:91:e2:e4:69:d5:c0:46:14:52:ea:7d:19:be:
                    97:48:48:ff:65:b9:d9:69:41:74:f8:3a:01:ed:ee:
                    e2:3a:f0:aa:e8:2d:05:c0:47:ee:d0:70:e3:d1:d2:
                    4e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5B:9A:DB:82:E4:7D:9C:5F:3C:FD:CC:1A:56:C4:1A:52:90:41:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/b6d4d894-2fb4-3793-9230-0e2c5bbbf58d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.175.56.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:a4:67:50:c4:a9:2e:1f:72:c5:33:ad:8f:23:76:9b:ff:26:
         2c:cf:18:26:83:b8:11:51:2d:2d:c7:f5:56:9e:9b:83:6f:8d:
         48:0f:c7:7b:13:f5:10:70:f7:14:16:9f:d0:eb:c0:8c:6c:0a:
         11:05:5b:86:03:77:86:58:ce:7e:2a:b1:55:4e:82:28:6d:08:
         a3:53:f9:86:1b:68:d2:bc:19:e2:50:ae:d9:f0:70:c2:7e:c1:
         4e:71:4e:ef:25:69:96:50:a0:9f:f6:f0:fe:c0:98:37:1f:8e:
         4e:e6:0a:51:e9:e7:fd:92:ce:ec:03:ad:56:ae:b6:6c:32:c7:
         55:76:e0:6b:62:24:80:20:2a:2e:83:39:55:fd:31:94:14:6f:
         86:3f:c5:eb:37:a5:77:8d:b5:57:fe:74:f6:07:bd:74:3c:00:
         4a:d0:db:3e:e1:3e:ec:1e:18:02:77:b2:e3:25:1d:97:c0:29:
         eb:11:8d:d1:49:da:2e:38:af:5c:82:20:eb:79:f9:04:39:ed:
         26:3f:be:2f:ae:37:b1:f3:07:95:1d:a1:f5:c9:03:2e:10:f8:
         4b:05:de:c4:28:36:e4:fd:64:6b:49:cb:ed:1a:9b:7a:cd:64:
         e1:29:44:de:e7:cb:8e:5e:ca:be:9d:7c:92:6f:74:24:e4:6d:
         64:f9:17:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzgl7b0l/UPgMcwzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDIxNjAyMDAzMloXDTI2MDUxNzAxMDAzMlowLzEtMCsGA1UEAxMk
YzY2MzAzZGQtNGE3NC00MmNmLTlkOGYtMmRjMjg3NjM0MjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg68amghTsULcJxUyuNn1w/lbyotS8S5hoSZi
wAVUkfdjiydqjslQR6nv9j5rftYuVar1/fvYaiwDhCx9nlkI9yrMxA0emLuMr8Fk
T4tRzhNW030dZvUpWGUqaRztN7AcmRmPWnMBBBEmrE0Am8FK2+RL28h4YQXTJDLx
xIpd56gGPIZ95wdEHgZQqqOcRu+cEBkjlYK7F1L76vKVxSIw/EzipzB8rB3bYJ1W
4Mh/4EYglUSmDzRg/5EKrNgvQ9C/6vdjCzV9j3dl6BbSon4gc0fWdJHi5GnVwEYU
Uup9Gb6XSEj/ZbnZaUF0+DoB7e7iOvCq6C0FwEfu0HDj0dJO0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL9bmtuC5H2cXzz9zBpWxBpSkEFkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvYjZkNGQ4OTQtMmZiNC0z
NzkzLTkyMzAtMGUyYzViYmJmNThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRq84MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABSkZ1DEqS4fcsUzrY8jdpv/JizPGCaDuBFRLS3H9Vaem4NvjUgPx3sT
9RBw9xQWn9DrwIxsChEFW4YDd4ZYzn4qsVVOgihtCKNT+YYbaNK8GeJQrtnwcMJ+
wU5xTu8laZZQoJ/28P7AmDcfjk7mClHp5/2SzuwDrVautmwyx1V24GtiJIAgKi6D
OVX9MZQUb4Y/xes3pXeNtVf+dPYHvXQ8AErQ2z7hPuweGAJ3suMlHZfAKesRjdFJ
2i44r1yCIOt5+QQ57SY/vi+uN7HzB5UdofXJAy4Q+EsF3sQoNuT9ZGtJy+0am3rN
ZOEpRN7ny45eyr6dfJJvdCTkbWT5Fyc=
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:35:56 2026 by rpki-client