Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/106acfe3-b1ba-3fa3-a5d1-acc2b564d48a.roa
File:                     106acfe3-b1ba-3fa3-a5d1-acc2b564d48a.roa (raw, json)
Hash identifier:          3GUMMfNefOPHIH0NbsfogZ+FxOvmEQKThwY71/FMtnI=
Subject key identifier:   89:15:DA:B7:72:B3:A0:54:C0:34:17:15:2B:64:00:9B:BC:32:03:4B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584F3FAD3721C4BCBAA09612B200
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/106acfe3-b1ba-3fa3-a5d1-acc2b564d48a.roa
Signing time:             Mon 21 Sep 2026 13:00:12 +0000
ROA not before:           Mon 21 Sep 2026 13:00:12 +0000
ROA not after:            Sun 20 Dec 2026 14:00:12 +0000
asID:                     22773
IP address blocks:        68.3.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:3f:ad:37:21:c4:bc:ba:a0:96:12:b2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Sep 21 13:00:12 2026 GMT
            Not After : Dec 20 14:00:12 2026 GMT
        Subject: CN=2b8c611a-4314-46bb-bc46-c3c49003ea7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:21:c7:5a:42:fd:1f:9e:fb:0f:bd:b0:ca:
                    e8:47:87:c0:a8:22:5e:a8:86:c2:0e:e4:ec:15:61:
                    6d:f6:65:d0:f7:ca:09:30:ff:af:c4:83:2b:4b:f2:
                    db:85:36:4f:c2:c5:64:c3:1c:1b:02:11:72:81:a8:
                    ea:bc:05:75:c5:b8:d5:b1:23:d7:17:7b:5d:18:e1:
                    db:57:be:60:eb:15:e8:52:f4:af:4b:ec:21:9f:b4:
                    5b:ef:41:86:cc:b0:f0:89:2c:c9:ca:cd:76:3f:eb:
                    55:e1:23:6e:31:61:49:68:ca:a2:0b:8d:ab:e1:f1:
                    89:94:b4:38:b5:f6:70:a5:f0:e7:81:0a:da:2d:16:
                    a7:53:43:63:35:69:41:b2:d1:f5:62:fa:5c:9c:83:
                    d7:6d:71:25:d3:12:71:1b:c6:e7:b2:3b:cf:57:df:
                    d1:a2:b3:4f:d2:a7:8c:12:c0:d6:1f:dd:bb:36:7d:
                    d8:64:08:98:a3:c0:cf:85:5d:b0:46:43:0e:ca:bf:
                    5d:fe:e9:d8:4e:47:99:ea:06:cb:8c:7b:64:c5:d7:
                    17:78:5f:74:3f:75:a3:cf:5a:80:f3:af:9d:29:da:
                    98:12:52:11:8e:7e:97:15:20:ab:c6:e1:22:ec:65:
                    71:af:a1:49:d2:2d:ca:b6:be:8f:ed:9b:96:03:e5:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:15:DA:B7:72:B3:A0:54:C0:34:17:15:2B:64:00:9B:BC:32:03:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/106acfe3-b1ba-3fa3-a5d1-acc2b564d48a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.3.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:f0:98:b8:14:cf:d7:07:b7:c6:74:41:89:e8:1d:eb:82:b9:
         06:14:88:85:b6:76:0c:1e:34:3b:37:80:da:44:8d:29:06:46:
         4b:70:9f:30:e8:b3:64:e4:33:0c:16:fa:7f:15:62:9a:df:57:
         bf:a9:19:a2:b3:20:27:ab:ad:ca:e3:e7:ac:bd:cb:91:ca:46:
         a2:d6:97:8f:4e:6c:03:b7:39:51:97:e6:19:d3:5d:8d:8c:c6:
         fa:74:23:61:32:76:70:db:35:08:c3:8a:23:c8:61:04:47:da:
         41:90:16:20:e2:1e:b7:5b:1d:63:05:ae:dd:da:1b:3f:2e:17:
         fa:ce:89:61:4b:62:12:c7:ee:a4:28:ab:f6:20:5a:2b:3d:ea:
         09:39:6e:3a:6d:10:ae:57:1c:55:65:f1:67:03:ae:e1:ca:0a:
         b1:93:bb:58:6d:8e:00:8a:04:7e:40:a9:42:26:0f:68:eb:d6:
         d9:e7:18:06:25:ff:3a:94:e9:5e:11:f4:60:01:13:10:6d:5a:
         10:4b:93:e6:20:62:77:d9:d7:05:ed:a9:17:dc:af:77:e7:b5:
         94:f2:e5:42:d7:1d:f9:ea:58:ac:b4:fb:39:85:6d:af:43:e1:
         79:99:16:a9:b5:d2:e1:5f:2d:c9:7e:e3:00:90:79:5b:b9:64:
         ca:f5:65:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:50:21 2026 by rpki-client