Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e2ce9904-fb10-33b7-b732-ab0d750c8a0e.roa
File:                     e2ce9904-fb10-33b7-b732-ab0d750c8a0e.roa (raw, json)
Hash identifier:          yt9wlN7kiUnY13CJ2vYaqxtifapGk6q4f/E0wWdDfA0=
Subject key identifier:   6B:24:5C:5C:21:B3:FF:AC:80:7B:28:C1:CC:36:7E:C4:9E:0F:69:46
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDF321C9429BC6DA4C5851224
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e2ce9904-fb10-33b7-b732-ab0d750c8a0e.roa
Signing time:             Sun 15 Feb 2026 14:00:41 +0000
ROA not before:           Sun 15 Feb 2026 14:00:41 +0000
ROA not after:            Sat 16 May 2026 13:00:41 +0000
asID:                     22773
IP address blocks:        72.208.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:df:32:1c:94:29:bc:6d:a4:c5:85:12:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 14:00:41 2026 GMT
            Not After : May 16 13:00:41 2026 GMT
        Subject: CN=85e7c36e-eb36-4f43-a3e5-d195102b5c19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:aa:89:1e:87:7b:49:aa:04:d5:95:a5:ca:09:
                    ef:9c:ee:26:20:69:56:1d:7f:9f:18:b9:89:91:9d:
                    63:c5:e6:db:a7:54:ff:61:60:76:66:b6:32:f2:10:
                    64:d8:f1:7d:f9:04:fc:82:d1:53:a8:8b:25:f8:0f:
                    13:7f:53:61:60:44:b8:87:e0:d2:1f:5c:73:d9:eb:
                    b0:40:34:65:ca:77:a0:a2:ee:ec:1a:21:17:01:3d:
                    1e:31:5d:a7:79:61:b9:64:46:f5:1c:e9:8b:e3:41:
                    25:72:a0:a2:17:cc:92:fe:22:ec:d9:f1:70:02:26:
                    70:29:6b:3e:0e:c7:9e:99:07:2f:2a:ba:47:3d:ab:
                    fc:a4:5b:44:1f:b1:70:76:2a:c7:b2:f2:97:dc:37:
                    ad:88:45:d6:c8:93:73:55:69:01:21:09:c6:df:dd:
                    dd:37:4f:91:5b:49:7e:fc:3c:1a:2b:31:05:ce:62:
                    c3:80:3b:de:e3:ec:db:dc:cb:76:47:01:28:24:79:
                    da:1e:ce:42:aa:c4:7d:8e:71:62:d0:ff:49:ac:d4:
                    30:e2:a2:4c:be:dc:35:ba:22:49:e8:ef:19:7e:26:
                    24:6e:00:66:94:56:7e:f5:ec:64:5a:31:b9:80:23:
                    41:b9:f8:32:ec:35:0f:84:8a:13:0a:50:58:01:ad:
                    52:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:24:5C:5C:21:B3:FF:AC:80:7B:28:C1:CC:36:7E:C4:9E:0F:69:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/e2ce9904-fb10-33b7-b732-ab0d750c8a0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.208.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f3:88:d1:18:74:f1:59:fd:e4:b4:f5:67:9d:58:22:b2:16:
         59:62:e8:27:15:5c:5d:e1:42:ba:3b:fe:0b:77:39:9d:e8:d2:
         54:d9:1b:97:4a:92:6e:35:f5:7f:ce:63:6f:66:b2:56:85:b2:
         84:b8:7f:57:58:d3:59:d0:b7:c4:b6:69:ab:57:35:e4:4f:5e:
         67:19:ec:d0:f5:71:41:da:c5:7a:62:f0:e4:28:ff:7d:a2:65:
         ec:6f:9a:6d:fa:64:83:36:c2:85:ab:23:db:6b:dc:d6:e1:e9:
         ab:02:2c:94:2a:15:ec:c3:32:85:92:0e:1f:6f:fa:d1:46:ab:
         29:6a:63:cb:a5:f5:b7:2f:3e:e3:f3:a5:67:c7:ee:fe:64:29:
         1f:38:57:3e:14:85:b3:43:fb:5d:9d:10:7b:e9:51:c8:3e:6d:
         51:87:9f:7b:17:a6:bf:4b:23:5e:fc:96:2a:dc:28:8e:63:c3:
         ef:21:70:65:7e:4e:eb:7c:80:a6:61:b6:44:65:62:53:11:14:
         d6:14:be:30:f5:c1:02:57:c3:74:78:f1:3a:b9:1b:dd:cd:20:
         84:c5:5e:55:13:89:85:63:99:df:f9:1b:0c:ff:72:aa:e7:fb:
         cc:ec:ac:64:83:01:ea:f5:bf:01:13:7c:48:cd:d3:12:a7:7b:
         9f:16:f9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:03:34 2026 by rpki-client