Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25a4601b-9b29-395c-b3d7-7fad027f39df.roa
File:                     25a4601b-9b29-395c-b3d7-7fad027f39df.roa (raw, json)
Hash identifier:          +iHv5/HXFXsvPfGLOzRDL1duLFNtK/PTMc/xKgGtsoI=
Subject key identifier:   16:18:23:D4:F5:88:E7:31:46:C4:8F:40:85:EC:34:CE:20:42:B9:87
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F4328584CD0D596107A96968892F15480
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25a4601b-9b29-395c-b3d7-7fad027f39df.roa
Signing time:             Tue 10 Feb 2026 10:33:07 +0000
ROA not before:           Tue 10 Feb 2026 10:33:07 +0000
ROA not after:            Mon 11 May 2026 09:33:07 +0000
asID:                     212238
IP address blocks:        173.245.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Feb 2026 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:d0:d5:96:10:7a:96:96:88:92:f1:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb 10 10:33:07 2026 GMT
            Not After : May 11 09:33:07 2026 GMT
        Subject: CN=4e8aca59-ad05-431f-8696-4ef217a74b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e1:c7:7b:78:9e:78:d0:32:5b:f8:66:46:2f:
                    fa:f3:b8:d5:11:80:2c:de:90:bb:72:9f:04:02:53:
                    38:36:93:84:de:ea:90:fc:fa:bb:19:64:c5:6c:89:
                    96:63:16:52:67:cb:3b:cc:39:3e:bb:c1:fe:4b:00:
                    f6:3e:63:d9:af:47:17:ca:af:3d:e0:42:34:ab:0f:
                    1e:bb:72:38:0d:f2:87:d2:5d:6c:5a:58:bd:9c:8c:
                    f5:d3:2b:4c:0e:ae:ca:1f:82:bd:aa:1c:ff:2a:0e:
                    a7:5b:23:82:b3:af:ef:9a:eb:3a:88:34:19:dd:08:
                    dd:84:87:4f:59:8d:bc:75:e6:cc:45:88:c2:5a:f2:
                    2f:bd:01:61:79:f7:f4:fb:d5:d6:aa:3d:8e:9b:65:
                    9d:06:c1:ae:01:6a:53:67:29:da:6f:f3:ca:2e:fd:
                    84:d3:68:e9:07:f4:8b:a8:5b:26:26:1f:cd:80:dd:
                    f2:2c:cd:35:9b:50:9e:cc:c1:77:60:41:22:32:f6:
                    c3:45:a9:16:9d:ce:27:8a:5f:d1:9b:1b:a8:fa:47:
                    6e:c3:bf:54:3a:6f:64:0b:cf:e6:f5:de:c1:3f:b8:
                    c4:3a:a9:fc:cf:a8:f0:8a:bf:0a:63:a5:97:2a:9a:
                    a7:13:15:27:1d:b3:fa:16:44:a2:14:88:88:43:c3:
                    06:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:18:23:D4:F5:88:E7:31:46:C4:8F:40:85:EC:34:CE:20:42:B9:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/25a4601b-9b29-395c-b3d7-7fad027f39df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.245.90.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:b2:e0:40:14:f4:72:c0:34:c7:ce:0f:f0:ef:c5:83:57:dc:
         d7:31:7d:52:ff:cd:87:41:9e:43:6e:4f:d6:7a:c9:b4:22:3f:
         f8:2e:bd:29:2b:42:d0:4e:62:4e:05:d5:b7:9e:a4:9b:d4:4f:
         0c:6e:bb:c1:62:24:ab:02:31:a4:1c:6a:23:2a:4c:52:13:f5:
         61:6f:d9:d1:aa:bb:f6:25:be:7d:7c:b2:b5:ae:93:f7:67:26:
         03:44:18:ec:4c:50:b1:7a:d7:16:8f:be:10:c3:5b:43:aa:35:
         84:85:e4:a0:83:30:d0:8d:d9:2c:c6:fc:a7:82:db:8b:79:bb:
         59:d3:7c:5c:00:61:f2:5b:16:9d:06:0f:0f:f6:70:ae:3b:89:
         4e:3d:59:29:40:26:f6:a0:bb:bf:c9:e3:32:ae:8f:13:33:35:
         31:e8:8b:6e:c3:8b:33:08:1d:74:72:e8:7c:71:ae:bf:34:1c:
         74:52:be:b8:c0:b5:b6:93:25:04:e5:66:0c:61:08:7d:6d:4c:
         46:c6:0f:2b:6f:60:c8:0d:f8:f0:c7:27:38:9c:97:61:44:48:
         23:f1:be:2a:93:18:90:ee:ad:6c:8d:e7:9f:c1:0f:9a:15:d0:
         6b:7b:36:96:28:4e:37:62:a9:9b:68:70:23:40:1e:7e:e3:4c:
         97:e6:97:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 24 15:44:48 2026 by rpki-client