Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/512eb15b-6558-343d-ba07-2d74e936e14a.roa
File:                     512eb15b-6558-343d-ba07-2d74e936e14a.roa (raw, json)
Hash identifier:          1ou4lkxwpcRtNXraYhSjjWyAe41/1LzAb/YTunNXF/M=
Subject key identifier:   80:CF:B2:8B:79:AE:C3:88:12:66:62:8C:35:19:33:B4:4B:DD:5E:E5
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D359FC633A7407425D367E080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/512eb15b-6558-343d-ba07-2d74e936e14a.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        72.200.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:c6:33:a7:40:74:25:d3:67:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=9019b8ed-07e7-4e93-b0e1-376d965a6f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7b:62:28:46:37:c6:38:93:79:ab:59:42:85:
                    1c:78:3a:07:d8:d1:f6:92:b3:de:ee:c5:c2:ce:69:
                    89:0d:66:77:a2:00:94:21:55:02:89:c8:16:9b:b6:
                    b4:72:8a:3a:34:81:3d:25:2c:b1:08:96:eb:de:04:
                    4d:f1:70:be:c0:89:18:d6:f6:d4:86:e1:53:00:94:
                    12:ad:b2:fa:7b:97:ce:81:43:ac:c4:1e:35:84:00:
                    0c:e5:10:e9:27:1e:46:33:79:44:9a:7d:83:67:cd:
                    99:b0:60:ca:b1:5f:49:f1:75:97:a7:ef:56:4d:ec:
                    7a:15:6e:4b:ae:71:5c:9f:fe:73:11:cb:3c:89:b1:
                    c0:a8:1f:22:7a:8a:41:45:c0:eb:05:ba:40:de:56:
                    4b:2f:e0:a0:d5:21:72:6a:80:7a:cf:f8:92:88:61:
                    67:62:41:fd:7a:4f:eb:b1:5b:c9:63:27:19:41:ff:
                    42:fb:bb:d5:a2:55:74:9c:1e:83:05:84:b5:ab:d0:
                    34:5d:0e:e1:cd:80:25:38:9d:a6:23:dc:eb:75:45:
                    f5:a2:fc:0e:12:c0:a7:c5:15:29:72:91:c8:90:c8:
                    7b:07:ec:fb:ba:ea:0f:60:5b:b9:27:5f:db:c7:e9:
                    5c:61:ef:58:e6:59:f1:f5:50:3e:73:78:e7:91:19:
                    dd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:CF:B2:8B:79:AE:C3:88:12:66:62:8C:35:19:33:B4:4B:DD:5E:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/512eb15b-6558-343d-ba07-2d74e936e14a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.200.150.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a0:cf:af:b2:09:4e:68:63:6f:b1:d4:2b:b0:ab:9e:07:57:
         39:a8:39:15:7b:4b:d6:09:6c:5a:1c:32:8f:af:77:7b:78:b8:
         65:19:4c:ab:eb:2b:ed:a3:49:51:7d:45:36:68:4e:44:8d:78:
         9d:2f:93:3c:f7:4c:df:aa:fd:17:a6:a1:e5:fa:6e:f3:79:c9:
         e5:5d:66:31:1a:0a:4d:e6:04:f2:58:87:20:7c:b5:cc:6e:0a:
         5e:01:59:5d:80:c3:60:c1:ea:ab:af:17:28:7b:8f:5c:72:36:
         3e:f1:48:e6:be:69:d1:21:64:11:b2:47:0d:16:41:f6:9b:32:
         5c:f4:da:85:e7:ff:3b:87:e7:9b:24:e9:e7:70:39:84:79:69:
         b5:e3:8b:6b:07:13:48:04:ff:d3:78:bd:d5:d5:25:25:f7:07:
         59:79:06:5b:14:95:5c:21:96:dc:0b:6e:e3:06:7c:d9:a6:df:
         0b:46:54:f9:dc:d3:25:55:6b:ea:f5:eb:a9:81:bf:27:ff:6c:
         1d:6f:26:5d:76:7b:de:36:fa:b9:25:84:6a:28:c8:86:17:36:
         e9:4b:d6:86:ea:e4:88:2e:f2:ee:87:78:07:90:b8:e8:38:ef:
         21:85:25:63:30:88:82:52:28:9f:79:ee:17:65:66:32:32:49:
         ac:fb:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 07:07:07 2026 by rpki-client