Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d11bf638-093d-36b6-bc6d-e04c40159240.roa
File:                     d11bf638-093d-36b6-bc6d-e04c40159240.roa (raw, json)
Hash identifier:          lsM7N8U9vk2xuhqIHbsGJT6+jyy93fok14hx73YCUQY=
Subject key identifier:   8B:1D:8F:F9:38:96:F1:C0:94:6C:DC:B3:63:A8:5B:23:55:AD:3F:89
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDDCCE7DD896D176D40397940
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d11bf638-093d-36b6-bc6d-e04c40159240.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        68.226.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:e7:dd:89:6d:17:6d:40:39:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=4d57f661-323a-4732-bed0-64a3b2de49eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:9a:f3:41:74:15:b5:93:aa:29:8b:69:fc:2c:
                    c7:28:19:ef:e8:c7:92:22:b8:a8:f3:69:40:09:37:
                    67:54:f3:44:dc:9d:c1:5e:f3:ad:58:5c:0e:27:33:
                    ec:1f:10:01:23:f5:11:4d:88:c9:50:05:28:25:24:
                    41:3c:df:aa:ad:a5:91:1d:c8:f4:2c:d5:06:93:a7:
                    f9:19:45:2b:df:f3:e0:ad:47:6a:06:75:ff:39:b4:
                    bd:19:7b:89:db:ce:41:24:6d:9b:d3:65:5c:8f:13:
                    92:25:97:fa:46:9d:2c:5f:45:32:d9:24:30:fd:a8:
                    77:2a:c7:4b:7e:a3:c4:e4:2b:b9:a9:3f:29:b4:fe:
                    9a:56:99:2c:d1:a9:82:16:ba:76:bd:20:46:a8:27:
                    3e:72:7d:91:c7:fe:2e:05:5c:72:7c:49:fb:74:d6:
                    49:91:e1:ea:1f:02:8d:02:0e:4e:c2:2b:5a:d3:59:
                    50:c9:9c:89:85:03:57:78:68:23:8c:7c:0d:67:6d:
                    57:f2:70:fe:1b:21:c9:81:db:43:14:b9:5c:2f:ab:
                    a7:ac:58:66:e2:46:6e:92:6f:6d:72:7d:5d:02:af:
                    28:b1:82:2c:1a:af:ac:30:cb:81:e4:ec:9b:94:c3:
                    bf:8f:43:e2:94:ce:12:db:84:18:14:7a:99:6d:86:
                    53:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:1D:8F:F9:38:96:F1:C0:94:6C:DC:B3:63:A8:5B:23:55:AD:3F:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/d11bf638-093d-36b6-bc6d-e04c40159240.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.226.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:7d:c3:7e:20:b5:e9:01:0f:db:79:59:d1:dd:6b:71:da:13:
         41:66:80:55:82:24:2a:6e:ad:f3:11:9f:8c:47:b2:e0:3c:a6:
         77:81:72:ad:98:0d:53:1b:88:fe:84:5c:0b:43:e5:11:b4:a9:
         6b:0f:a5:9c:b0:d8:68:27:52:79:90:db:82:1c:16:eb:74:4e:
         aa:c7:a3:21:d8:6f:cd:91:34:d8:08:c2:6c:ac:8a:62:5a:7c:
         b2:c8:d8:a9:12:bb:d5:16:14:bd:a9:b7:9b:11:68:d2:7b:33:
         7d:c0:23:f8:cf:30:78:05:f6:11:67:c3:d8:df:f9:1b:db:7e:
         86:1c:2b:3c:b5:f1:ba:93:6b:0c:0c:f2:79:bc:f8:e8:66:0d:
         4a:c5:e1:f6:57:d2:9e:6e:38:1a:77:c6:0a:c4:a5:dc:f3:21:
         8f:32:50:c0:94:23:f1:23:9a:9d:2c:17:ff:98:dd:9b:32:8d:
         6a:71:19:e8:55:3a:a4:d8:6f:ad:de:5c:14:59:56:79:9d:f4:
         ab:6b:3b:11:88:14:18:59:9f:ef:e7:a0:73:11:6f:9a:76:d0:
         05:fd:4c:10:09:9c:07:27:c3:3b:87:03:2f:65:2a:25:98:c2:
         1a:5a:f9:c6:25:06:23:f3:f8:71:23:5c:2c:e3:c3:99:ce:c7:
         9b:4e:21:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:44 2026 by rpki-client