Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0fa5fe68-348e-37ff-9f94-ba5065ef06d9.roa
File:                     0fa5fe68-348e-37ff-9f94-ba5065ef06d9.roa (raw, json)
Hash identifier:          si+4xz030sG1HytKfutSBXn6ihsLq4Qb3RYRlTyOzjE=
Subject key identifier:   02:53:4F:A1:8D:A5:ED:3E:E8:92:33:B5:76:47:FA:BB:72:EB:E6:E0
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DC135D3C7B3BE7C5FD0632080
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0fa5fe68-348e-37ff-9f94-ba5065ef06d9.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     22773
IP address blocks:        68.108.54.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:d3:c7:b3:be:7c:5f:d0:63:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=b7c2c8a5-967e-4916-8114-5ff7bc85439a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:16:e4:04:a9:09:d1:32:0e:5f:72:71:09:e7:
                    78:9d:a0:bf:93:dd:a3:9c:69:3a:71:e5:c7:ad:49:
                    0e:af:70:1c:35:af:99:c5:0f:0f:35:a0:79:40:f5:
                    f8:fe:33:c9:6b:ee:10:fb:29:4a:32:b8:48:25:93:
                    45:b8:81:bc:43:ae:7f:dc:92:a7:72:c8:18:7f:a5:
                    c0:8f:58:37:36:62:8d:be:2c:41:49:a0:4d:37:f5:
                    3f:29:02:d3:79:25:04:04:f3:44:23:ac:a9:c4:1f:
                    9e:71:49:cb:c8:7e:cb:9e:7a:e2:a7:6b:20:1b:3c:
                    2c:1c:1a:19:21:a4:31:72:56:55:9d:5c:a6:84:08:
                    a1:8f:f0:9b:f1:e8:46:3c:7b:54:6f:a6:46:eb:e3:
                    57:9a:87:4c:50:0b:91:bc:3b:62:b6:6a:1f:f0:a4:
                    a3:67:7a:3f:1b:93:2d:1c:72:58:2e:92:aa:24:d3:
                    51:33:5b:6c:2a:a7:d8:bd:e0:b2:85:ef:2d:5a:f9:
                    1a:2f:32:ba:6f:46:f0:2b:1f:d1:ba:5b:3f:69:cc:
                    5b:45:fa:39:b0:57:6a:24:10:82:d4:61:ed:52:bc:
                    a3:88:f4:cc:52:8c:9b:37:7a:ab:39:bc:21:87:39:
                    98:8d:a1:7a:c6:84:80:08:75:8e:11:11:5c:9a:3b:
                    6c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:53:4F:A1:8D:A5:ED:3E:E8:92:33:B5:76:47:FA:BB:72:EB:E6:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/0fa5fe68-348e-37ff-9f94-ba5065ef06d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.108.54.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:08:3e:90:d7:6f:6b:a3:af:88:10:72:60:5b:87:ea:86:61:
         5c:1f:4d:ce:9c:01:9f:48:7e:11:70:51:d1:90:53:95:dd:2d:
         2a:d3:94:a4:16:ef:c0:7d:0b:1d:92:66:f4:55:06:c1:44:bc:
         8a:18:c2:30:c8:1b:4b:e6:9c:9c:67:32:8a:f4:64:85:e6:8b:
         f7:a3:85:0c:17:9e:76:32:43:87:b9:22:18:5d:22:ab:a2:bc:
         30:85:ea:cd:cb:0f:b4:4b:1d:80:ba:78:5f:a8:af:f2:ce:50:
         d2:f7:83:b6:b4:a1:ef:a3:d1:89:ef:5e:8f:13:5e:eb:e2:62:
         d4:74:81:06:8c:dc:79:c3:9f:09:5f:31:26:66:f5:50:6a:ae:
         da:4a:e2:f2:5b:9c:93:b3:63:b2:b7:a1:c0:16:cc:26:32:8c:
         9b:9c:e9:70:80:b0:7a:9a:2e:e7:80:19:9d:e1:74:6c:a5:8b:
         1e:10:13:db:70:22:7f:a1:cc:c9:71:15:a6:b3:7a:44:95:f8:
         f6:a4:2c:f6:6e:08:25:da:78:71:da:a2:86:21:99:04:13:44:
         6c:d0:39:e2:39:95:72:f8:3a:02:76:d6:81:d2:df:ec:13:ff:
         5c:a1:b2:6b:50:85:a1:bc:71:d3:14:7e:e8:82:33:64:fd:6f:
         05:e1:a9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:00:43 2026 by rpki-client