Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/acb83e38-eb2c-3c13-8184-359174c2e077.roa
File:                     acb83e38-eb2c-3c13-8184-359174c2e077.roa (raw, json)
Hash identifier:          vnPRgzf7C+u/4gajWkCmQrZnA46Qg5RqN8ISYz1m2Kg=
Subject key identifier:   EA:A4:2C:1D:FF:41:DB:4E:53:6F:32:21:EB:C2:8C:EC:85:6D:BD:A4
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584D9A202E4553B8D23FC1267780
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/acb83e38-eb2c-3c13-8184-359174c2e077.roa
Signing time:             Thu 23 Apr 2026 13:00:32 +0000
ROA not before:           Thu 23 Apr 2026 13:00:32 +0000
ROA not after:            Wed 22 Jul 2026 13:00:32 +0000
asID:                     22773
IP address blocks:        68.225.176.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:9a:20:2e:45:53:b8:d2:3f:c1:26:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Apr 23 13:00:32 2026 GMT
            Not After : Jul 22 13:00:32 2026 GMT
        Subject: CN=4c4912e2-a436-4cae-a0c6-8a26f22a6e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8c:cd:c5:e1:0f:a4:9e:1d:ca:96:de:72:ee:
                    be:b2:14:d1:75:7a:cb:f4:41:e1:d9:fb:5d:d5:cc:
                    40:4c:49:9d:c3:79:11:fa:e7:fb:f0:2d:f6:67:37:
                    e3:37:d8:f9:02:5e:3b:72:2b:11:19:1d:fa:81:a6:
                    d1:5a:56:12:3f:ee:64:43:0d:13:92:f8:cd:ba:16:
                    41:37:9e:bf:c7:2d:1d:c3:5f:75:00:9b:97:43:66:
                    aa:ba:9c:ac:0c:d9:65:b2:fb:ad:8c:07:d2:78:00:
                    e4:47:77:65:85:4f:67:e9:4d:5e:7a:aa:38:7f:79:
                    a2:e4:74:71:2b:ba:d4:0a:0f:bb:d3:76:b7:61:e1:
                    8f:97:24:61:32:d9:9c:37:2c:fa:b2:59:67:26:f3:
                    76:2a:57:b4:a1:4d:cc:78:90:a1:7b:44:33:fb:a5:
                    02:0b:55:5a:40:5b:f5:cf:25:7c:41:16:01:25:7b:
                    eb:e7:81:10:18:fd:9d:38:ff:1e:ea:1c:90:e8:dc:
                    e8:63:1f:8a:37:43:06:11:bd:38:3c:a9:c6:77:10:
                    5e:cb:59:05:05:b9:8b:bb:da:2a:5b:3e:d7:16:89:
                    72:21:53:03:a7:51:77:93:a5:f1:bb:9b:bc:19:da:
                    dd:af:ab:3a:cb:45:8d:b6:6f:2b:eb:46:4a:eb:f3:
                    d1:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:A4:2C:1D:FF:41:DB:4E:53:6F:32:21:EB:C2:8C:EC:85:6D:BD:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/acb83e38-eb2c-3c13-8184-359174c2e077.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.225.176.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:fc:98:22:16:2d:77:4e:49:08:58:8b:81:f5:59:90:e3:25:
         4f:d1:cf:dc:2e:ca:14:02:92:03:84:ce:f5:9e:e4:06:6e:af:
         de:27:d1:ac:5a:5c:1e:29:14:dc:cd:dc:fc:81:88:a9:3d:37:
         62:31:33:bd:b3:06:38:11:5d:3b:e8:6f:6e:2a:33:97:aa:62:
         d2:e4:a5:5d:da:f7:8e:15:56:f2:de:5e:5a:5c:a8:b5:f8:a0:
         cf:9d:20:85:18:51:1d:35:3a:13:5b:21:28:1c:a2:b3:09:99:
         bf:e4:ca:b0:34:d5:63:5a:a3:c4:d8:e9:0b:ed:6e:d3:ca:8e:
         9f:7b:c3:df:96:3f:a0:cf:35:a4:08:07:c1:04:ba:52:fc:7b:
         5c:c2:c8:33:e9:56:2e:30:66:5f:b0:b6:4d:06:6d:40:9f:ce:
         27:0f:3a:7d:07:65:c6:3e:55:01:02:db:1a:58:e6:da:0f:5f:
         05:34:64:73:b8:e7:85:de:72:da:ad:ff:a8:bc:9e:85:ed:24:
         c2:8f:cc:c3:bb:70:7a:1a:41:fa:dc:a2:f3:50:7c:d6:2f:93:
         17:a9:e0:fa:2f:43:f4:55:58:82:eb:fb:89:51:28:45:94:80:
         5a:49:71:22:a4:75:15:7d:a4:a8:7b:99:cb:72:8d:e6:23:27:
         40:69:5b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 4 23:28:25 2026 by rpki-client