Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ca916f1-6d85-3673-b12b-b1116a389d28.roa
File:                     0ca916f1-6d85-3673-b12b-b1116a389d28.roa (raw, json)
Hash identifier:          ChHlIEAgtE/RZ/zDp6naCtENONaQ/WiAI3uK2KutlcU=
Subject key identifier:   D6:36:BA:06:ED:CB:EA:2B:50:E5:F7:C7:24:D7:32:61:F5:CA:4F:5B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D359FFDA6885B6D583A246F00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ca916f1-6d85-3673-b12b-b1116a389d28.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        68.9.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:fd:a6:88:5b:6d:58:3a:24:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=9619321f-3dc4-44ae-a109-8c6bc1131866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:87:d3:1e:a0:1b:23:e0:84:3c:f9:52:2f:72:
                    0b:44:1d:fc:d2:b5:c4:cc:28:39:bc:04:ef:f9:7f:
                    42:8d:b6:3f:13:2d:be:be:e6:6b:ec:63:8b:74:d5:
                    29:5c:74:84:1e:4a:3d:6e:67:9e:25:36:f2:79:ac:
                    44:3b:3a:2d:2f:57:36:c2:69:1b:54:1a:1d:03:24:
                    d4:db:6e:dd:42:68:05:69:20:7a:74:54:88:ce:b1:
                    94:c5:17:84:8a:e7:16:be:85:b6:6a:0e:24:6b:e7:
                    be:0f:c0:fe:78:40:8b:74:33:a3:34:8a:8a:99:a3:
                    34:26:2a:17:f0:2e:be:3e:04:ba:25:d1:65:7d:56:
                    6f:39:d8:13:9c:d6:04:2a:60:f0:f5:5d:a6:4f:d1:
                    c4:95:55:c6:ba:6b:b3:f3:93:28:3a:b6:8f:c4:9f:
                    e2:49:e5:d8:15:3e:33:26:e7:a4:e4:e9:b6:1a:cd:
                    c6:74:a2:c0:96:b1:a7:57:d3:61:54:f4:32:7c:1b:
                    7e:28:5b:ab:2f:61:81:4f:66:66:15:8c:95:62:ee:
                    ee:d3:43:c2:44:4b:94:73:01:70:55:ae:99:0e:d6:
                    e8:91:c0:f9:b2:48:31:cc:c0:f9:70:86:48:88:08:
                    7b:b4:d3:28:24:57:fd:15:18:f1:5b:77:e4:df:22:
                    ca:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:36:BA:06:ED:CB:EA:2B:50:E5:F7:C7:24:D7:32:61:F5:CA:4F:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0ca916f1-6d85-3673-b12b-b1116a389d28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.9.162.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:ed:05:58:b2:a9:e5:07:77:5d:ec:dd:84:0c:3b:22:51:4b:
         ee:6f:d9:39:ec:58:4d:24:32:3a:c4:7e:b6:38:2f:ea:20:43:
         37:4d:96:66:7f:f8:01:f7:eb:98:88:05:8a:09:38:ab:89:b3:
         1e:5b:72:b6:ae:d6:49:8c:54:a2:71:24:4d:f2:0e:d5:b2:43:
         ab:bd:3a:09:1b:45:6b:8b:49:89:26:7e:b1:fd:5d:76:bf:09:
         15:02:5b:21:41:8b:95:b6:56:f3:46:41:e0:50:aa:97:fa:12:
         a4:56:7a:2a:01:fd:97:36:37:99:2c:fd:86:06:50:ba:c9:81:
         05:d0:5f:76:eb:2a:0f:d7:ea:e9:53:d1:14:95:17:23:a4:87:
         b6:6c:46:35:09:8f:ee:22:c6:a8:a3:d1:12:58:07:74:35:24:
         2f:2a:61:8f:b1:f6:ba:f5:90:d9:63:58:7c:c8:8e:8d:fe:bd:
         a5:2d:29:e7:2b:95:7d:16:f7:d0:02:e4:8d:f3:9b:22:f7:ef:
         23:93:03:ab:eb:6d:a6:ae:7c:cd:22:40:bc:b8:8f:b2:cd:f6:
         f4:51:f0:5f:37:56:f3:99:21:18:77:31:bd:54:c9:76:fe:d9:
         b9:c6:eb:fb:8c:a7:1e:6a:9c:6f:57:d1:d7:1c:15:bf:34:8e:
         42:49:6e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 05:47:25 2026 by rpki-client