Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5668f0f9-a276-3a21-be35-6bfb78d4116d.roa
File:                     5668f0f9-a276-3a21-be35-6bfb78d4116d.roa (raw, json)
Hash identifier:          0E1xn/6O5IodUNJHI0Nqe4zzKDaEKkL08kL17AdOO4g=
Subject key identifier:   20:4A:BF:F2:20:20:C4:8E:89:2F:BE:C1:A1:6E:2D:1D:6F:57:67:9B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D359F8FE56AC18CFD67D8C833
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5668f0f9-a276-3a21-be35-6bfb78d4116d.roa
Signing time:             Wed 18 Mar 2026 13:00:40 +0000
ROA not before:           Wed 18 Mar 2026 13:00:40 +0000
ROA not after:            Tue 16 Jun 2026 13:00:40 +0000
asID:                     22773
IP address blocks:        174.66.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Mar 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:35:9f:8f:e5:6a:c1:8c:fd:67:d8:c8:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Mar 18 13:00:40 2026 GMT
            Not After : Jun 16 13:00:40 2026 GMT
        Subject: CN=acd407b5-ecc7-4e44-9553-643f3776b3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:bc:1b:db:66:01:ec:f3:07:77:8a:b7:8d:f1:
                    8f:85:f1:f6:b5:d1:e5:fa:d7:f5:99:d1:00:5d:67:
                    a2:55:97:19:d2:4a:13:c3:96:8e:82:c9:5e:34:ed:
                    35:de:5e:3f:01:1e:88:4e:d2:bd:7d:75:43:36:5c:
                    f4:16:6b:cc:20:ee:52:db:5e:d8:31:cc:ef:ff:ab:
                    53:2e:20:a2:41:6b:02:d0:9c:f3:43:b7:d2:c9:96:
                    97:e9:8e:05:92:85:cd:76:86:1b:e7:f0:3e:3b:98:
                    e5:0e:55:d9:02:78:da:25:f1:b7:7b:36:c8:06:df:
                    6d:7e:d3:23:c0:65:3f:45:08:bc:ee:61:9a:be:01:
                    f8:c1:89:83:1a:09:e4:54:b8:07:04:ba:b9:6f:ff:
                    87:bb:2c:94:a4:66:6a:a4:da:38:01:0a:17:eb:82:
                    91:96:9f:e3:93:c0:31:31:72:7c:34:f4:ed:85:38:
                    16:f2:6f:de:80:00:f7:6f:b0:49:fc:02:2d:11:05:
                    e8:78:5c:70:d7:c1:fa:04:eb:3d:43:4f:5b:43:74:
                    06:7c:b4:00:a2:53:e2:df:6f:bb:d0:14:82:9b:05:
                    7e:45:52:6a:d4:d3:ac:fe:10:f5:c9:aa:00:b6:89:
                    db:ab:30:80:97:e1:88:f1:1b:6c:ab:5e:85:6a:cb:
                    d2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4A:BF:F2:20:20:C4:8E:89:2F:BE:C1:A1:6E:2D:1D:6F:57:67:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/5668f0f9-a276-3a21-be35-6bfb78d4116d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.66.183.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c5:69:e9:dd:82:27:65:1d:dd:51:b0:8a:b4:31:e0:e3:41:
         23:cb:44:82:e8:76:41:ef:7f:aa:ef:fe:3c:ba:e8:e0:ec:3a:
         d2:9c:43:5e:4b:98:0f:6a:4e:2d:d9:00:a5:f4:a7:d3:11:4b:
         09:1f:6c:11:48:28:ba:ea:3e:13:4c:79:29:f5:32:c0:e3:05:
         ee:1d:ba:c0:67:0c:00:aa:6a:2b:6f:b7:b3:24:8b:33:4f:9c:
         6d:80:d8:06:41:d0:f7:84:41:a6:31:9f:8f:f0:c7:59:1e:3a:
         49:17:b8:02:df:25:5b:45:ed:a8:08:9a:64:74:e4:ea:be:52:
         80:f7:ce:13:40:85:24:e7:88:1c:74:c7:61:95:ac:04:8e:54:
         8c:0f:ab:0e:5b:f0:5b:ea:b5:47:9f:05:a6:a6:16:e2:16:19:
         81:a9:63:48:68:bb:78:f5:75:3e:09:98:52:67:cc:d2:5a:f2:
         1b:02:44:db:a6:dc:82:a1:af:2f:af:0d:ad:75:d2:a6:c7:f5:
         68:9b:4b:00:4c:59:56:59:a0:a2:b7:7e:82:a3:56:48:0d:93:
         66:20:31:92:9d:78:12:dc:68:a8:d1:39:fb:2e:d7:c4:d2:be:
         e2:a9:81:5b:fa:ff:62:bd:6a:66:07:11:43:42:f6:0d:33:7e:
         ee:b6:7d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 05:40:42 2026 by rpki-client