Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/039c879b-d15b-3867-b5bf-fcb3e7867da0.roa
File:                     039c879b-d15b-3867-b5bf-fcb3e7867da0.roa (raw, json)
Hash identifier:          p8BBwR/IAzQcoWGZWoM+N2mVzc5cSHKRLqHNx+dSGCk=
Subject key identifier:   62:22:CA:D6:D0:42:65:66:6A:A4:6A:6D:C3:D3:F9:16:46:77:D8:7D
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D359FF049E95C6D3F027A8A00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/039c879b-d15b-3867-b5bf-fcb3e7867da0.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        68.1.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:f0:49:e9:5c:6d:3f:02:7a:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=5a96b70a-85f5-46db-8060-e47fd52893f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d8:e9:7d:8b:13:ff:c8:28:1e:e5:a4:7c:8c:
                    34:fa:57:df:d1:61:ab:51:dd:54:dc:0a:df:e3:8a:
                    7f:1d:a6:a6:21:7a:72:23:a7:3c:d9:a3:cb:d6:41:
                    99:80:ed:ff:5c:79:72:6d:1c:42:f2:aa:09:fb:0a:
                    ce:7c:30:0e:a5:8e:18:bb:60:9c:88:ac:37:0b:ee:
                    b1:cf:23:5f:6c:a7:76:b1:f3:ff:78:5d:bf:63:cb:
                    31:cd:a0:46:b0:39:73:62:1f:ce:ed:bf:75:9b:5b:
                    b8:fb:f3:d0:d9:14:37:0a:21:a8:82:59:89:bc:5f:
                    37:26:ae:55:1c:bc:f5:f6:7b:f7:95:8b:c3:4a:b3:
                    b8:d2:73:0b:f0:f7:54:6d:f8:d6:4b:e2:ab:e2:6d:
                    fd:91:a4:cc:12:34:6b:ba:52:87:bb:a8:76:f2:47:
                    2e:9b:40:b4:0c:05:a1:51:90:57:6e:89:59:93:76:
                    c6:f8:a2:ec:10:a7:93:dd:e9:70:6b:46:98:d8:1b:
                    18:1e:22:2c:19:83:49:e5:ad:d3:89:f5:09:08:b7:
                    87:7f:a3:cc:c3:f8:6e:55:af:3c:8b:65:18:21:f7:
                    c6:df:34:73:28:8f:69:6c:64:1d:11:cf:3e:ba:63:
                    50:92:00:68:ec:89:22:a1:b7:a0:97:20:33:aa:11:
                    88:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:22:CA:D6:D0:42:65:66:6A:A4:6A:6D:C3:D3:F9:16:46:77:D8:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/039c879b-d15b-3867-b5bf-fcb3e7867da0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.1.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:d3:a2:e0:8c:3d:62:14:0e:92:39:89:e8:c2:20:c5:0b:e3:
         e4:ce:29:4b:23:e6:ae:f1:64:dd:cc:12:53:6c:a8:d3:88:3d:
         a1:59:26:be:dc:e8:77:4f:ca:00:f4:b2:eb:78:3e:84:b1:63:
         f5:99:49:17:f7:e2:d3:6f:b6:fd:5f:4c:23:df:22:ee:05:5c:
         c4:55:79:36:4a:1a:87:33:76:b3:e7:d7:9d:71:58:d0:0b:9b:
         b7:60:e9:7a:6b:88:af:aa:1d:51:00:94:26:ab:68:74:b2:80:
         cc:9f:0e:b6:c1:03:0c:1f:be:71:56:c7:14:f9:25:87:f9:10:
         d8:d6:92:bd:20:08:9c:61:7d:81:55:11:27:59:ea:34:9b:49:
         81:1f:4a:f6:cf:29:43:54:f8:02:4b:70:21:f7:c9:6b:1d:05:
         1a:a3:fd:f6:eb:72:8d:f5:10:76:93:ca:90:65:1f:45:06:2f:
         15:04:df:09:c6:ff:0b:59:77:5b:82:ca:3f:89:ee:74:c7:84:
         3a:2a:b7:11:04:49:19:eb:7a:26:2a:2d:45:13:1a:17:3d:3a:
         54:33:98:66:5f:72:9d:26:5a:dd:1f:fd:a0:88:10:6a:e3:91:
         d5:8f:e1:d3:ef:b6:f2:78:73:5e:0e:d3:f6:a9:87:3e:30:aa:
         c2:32:93:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 05:47:31 2026 by rpki-client