Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d08936aa-bcff-3af5-a6c4-3f625549c171.roa
File:                     d08936aa-bcff-3af5-a6c4-3f625549c171.roa (raw, json)
Hash identifier:          /rVhsdrruUXkEWZMGkRSajHxo95vEPyzKrS1PsNI8dY=
Subject key identifier:   E2:0F:16:78:D8:75:CF:D2:3A:BE:53:AC:50:F9:C9:FA:BC:A0:27:4D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF32C7784A373562CF298540
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d08936aa-bcff-3af5-a6c4-3f625549c171.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        2600:8800:4d06::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:c7:78:4a:37:35:62:cf:29:85:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=c9fe383d-4248-4e08-8c1b-b0c7eb7fcab7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c4:32:9a:8f:d0:90:bb:a2:d1:bb:60:d0:84:
                    24:65:48:f8:6e:0f:c7:18:3f:e5:4a:db:d2:7c:90:
                    89:1c:3f:1a:8b:49:dc:80:49:0c:1b:62:48:10:ec:
                    6b:21:04:ac:0b:6a:fb:ca:71:a0:e7:9e:72:ac:f0:
                    d9:b9:aa:42:24:1d:83:b4:f7:cc:9d:a3:b1:88:2c:
                    0d:1e:04:94:91:b7:52:cb:78:cd:36:d3:1b:3c:b2:
                    1a:08:49:d2:ce:5a:e9:82:68:bd:87:b5:13:ff:26:
                    26:98:24:99:67:91:7e:c8:c7:7b:f5:f4:7f:18:11:
                    6e:30:d6:d5:e5:53:9c:4a:13:db:ee:40:6d:26:7b:
                    33:28:51:86:43:91:ab:fb:6f:63:e1:da:54:33:35:
                    1e:b1:39:39:de:9b:c1:41:dc:c6:33:65:fb:87:b0:
                    54:d2:e9:67:c0:c7:52:4d:ae:12:61:f3:b6:e0:a6:
                    f5:72:94:9a:d1:a4:3d:e6:ea:96:90:5c:68:48:6f:
                    40:46:35:50:c7:bf:38:a8:42:cf:29:ef:4c:a0:f6:
                    63:4e:ba:87:1f:01:56:e2:f3:b4:3d:1d:cf:cc:1a:
                    33:c3:62:d4:4c:a5:db:76:5a:3c:a7:91:de:3b:b9:
                    33:62:3a:9d:4e:52:26:e4:04:81:e8:65:84:9f:14:
                    1a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:0F:16:78:D8:75:CF:D2:3A:BE:53:AC:50:F9:C9:FA:BC:A0:27:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d08936aa-bcff-3af5-a6c4-3f625549c171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:8800:4d06::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:51:d4:df:35:19:63:89:37:01:79:73:cb:7e:f4:70:f7:18:
         5d:e5:7d:35:da:4d:db:3d:0d:81:36:8d:b1:66:19:eb:68:67:
         25:fd:ed:16:67:b0:97:34:bb:98:aa:e4:be:40:c2:2f:c9:ed:
         f8:f1:03:00:c0:b7:5f:0f:db:5f:6b:de:56:1e:17:a3:cb:52:
         0c:c0:64:8d:87:34:d8:5f:52:5a:f5:fc:ff:84:6b:1a:24:9c:
         8e:cc:97:ff:e4:9c:82:4a:89:57:e4:bc:f5:1a:6d:e7:a0:58:
         c3:f4:26:9f:76:d0:ed:5a:f3:8c:ce:69:15:b6:26:df:3f:9d:
         b8:1c:b3:82:6c:7d:b3:e2:57:38:45:06:bc:20:2a:af:30:5e:
         77:b1:7e:cc:58:35:77:6f:52:a7:ee:84:98:74:b4:9a:d4:9e:
         0c:ab:13:4d:97:5f:1e:6f:13:2d:16:b8:bc:a8:82:ad:df:1b:
         03:40:83:32:1c:77:ce:e0:09:0c:c5:ef:d4:51:f5:d1:4b:ff:
         dd:9e:c8:b1:b3:64:d1:65:dd:d6:fb:66:2c:7f:2c:01:bf:6c:
         94:60:4d:12:46:2b:5b:d0:e7:0c:0c:d6:1f:4f:be:a8:78:09:
         fc:1c:df:54:8e:24:45:28:39:d2:56:b1:3f:1d:4a:8a:36:6f:
         85:a7:d8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:35:04 2026 by rpki-client