Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b6a3db4-dc81-3b13-ac52-780d365cfdff.roa
File:                     3b6a3db4-dc81-3b13-ac52-780d365cfdff.roa (raw, json)
Hash identifier:          DXHpE0Ldvz/hd0Ob0OdGhjx0rWpY6Q49UXu9JgR4uYg=
Subject key identifier:   1B:3B:B1:C5:48:B1:64:34:60:70:94:FA:45:39:70:AC:9A:4C:DA:C9
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DBE6B54820DFC575324B50D00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b6a3db4-dc81-3b13-ac52-780d365cfdff.roa
Signing time:             Wed 06 May 2026 13:00:30 +0000
ROA not before:           Wed 06 May 2026 13:00:30 +0000
ROA not after:            Tue 04 Aug 2026 13:00:30 +0000
asID:                     22773
IP address blocks:        68.109.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:be:6b:54:82:0d:fc:57:53:24:b5:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  6 13:00:30 2026 GMT
            Not After : Aug  4 13:00:30 2026 GMT
        Subject: CN=fd2500f8-e47a-4f87-89bc-b3603d50fdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:21:92:75:1a:ce:42:b4:6e:fc:1a:a7:f5:85:
                    bb:3c:ca:c9:eb:6a:a0:a8:45:19:2d:36:c9:25:85:
                    aa:7f:23:82:a4:21:3e:54:1f:bc:52:0c:7e:ee:20:
                    18:d7:fa:0e:d3:e1:06:ec:b9:c6:32:a8:6a:02:4d:
                    55:a0:71:ac:d8:32:31:30:50:48:bc:1d:fa:bd:8a:
                    0a:cc:80:11:61:c2:25:53:8e:ac:ba:5e:d9:6c:42:
                    36:c3:a7:a0:57:3b:e8:4f:e9:55:23:c8:66:75:06:
                    40:96:6f:4b:76:53:bc:70:ff:4a:d6:b2:57:ba:78:
                    17:e5:f8:82:28:31:a8:b8:b6:68:32:13:29:ae:d6:
                    d3:f4:f9:19:2f:ab:e3:0a:9d:0c:8d:d3:f6:cc:7b:
                    b5:97:4c:38:e8:4a:05:17:b6:8d:5d:99:6d:60:ea:
                    3c:55:ee:29:07:4d:bb:d0:ff:d9:8c:a0:e1:77:4b:
                    a2:8f:af:7e:1e:a4:91:d4:3d:65:e3:5b:9b:60:57:
                    cb:d5:f4:be:c7:0a:2e:e9:00:3c:de:52:14:b0:62:
                    4a:35:25:25:80:80:14:30:0d:a2:b3:8b:99:a0:de:
                    33:66:4e:52:54:86:bd:fd:dc:3a:71:5a:2c:4f:1b:
                    b4:82:7d:32:2b:7c:86:12:3a:48:8c:3d:f1:a9:de:
                    6b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3B:B1:C5:48:B1:64:34:60:70:94:FA:45:39:70:AC:9A:4C:DA:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/3b6a3db4-dc81-3b13-ac52-780d365cfdff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.109.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:28:f5:de:6d:24:03:7c:30:f3:a3:bc:7f:81:ed:c3:e1:17:
         22:3b:e8:96:6e:cc:3e:24:ed:9c:ba:4a:81:77:81:8f:52:7f:
         a9:f1:8a:73:cc:16:5e:b3:86:9e:51:c0:4e:cc:08:55:49:74:
         cc:53:0c:59:25:07:57:9c:f0:00:a2:bb:40:b8:32:e3:7c:5d:
         db:05:7a:e5:70:cc:ef:20:86:4c:19:49:a2:c6:ff:34:bb:a8:
         7c:5a:45:ac:b4:80:2d:40:c4:a3:b0:df:7e:1a:31:05:7b:a9:
         85:92:55:62:c7:ab:ac:97:1e:b6:b8:03:ca:8a:23:4f:57:65:
         99:d8:21:ab:08:91:a4:5a:15:af:70:db:52:b4:8f:ed:a8:dc:
         5e:59:29:a0:45:3f:e2:89:ec:ba:75:50:a2:d3:5a:7b:cd:b3:
         7d:c2:b4:d2:03:47:a1:cf:3f:c6:ae:5c:01:99:a3:77:08:44:
         e7:7e:ec:16:35:e1:63:3e:4f:08:33:f1:89:ad:dc:de:79:fd:
         e7:a2:55:df:b7:70:1a:9d:6a:d2:27:cf:5f:03:f3:b6:ae:7b:
         b1:33:ea:d4:e8:e0:8b:b1:12:a9:7a:93:50:af:6e:ed:aa:41:
         21:28:8c:44:e9:54:87:46:d3:4d:2f:d3:55:3a:8c:24:8a:31:
         32:b6:e3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:33 2026 by rpki-client