Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ddc945a-a198-3782-83e6-4208fe300ee0.roa
File:                     4ddc945a-a198-3782-83e6-4208fe300ee0.roa (raw, json)
Hash identifier:          m9OR9Pp02uY8akErm5TAT0KxoxFUQy1txGVpkloPdpI=
Subject key identifier:   77:96:CB:67:65:7C:4C:CA:9E:52:6E:9E:7C:50:C3:A4:8E:EF:27:E0
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584DC135E0DD5513014AE1ED1700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ddc945a-a198-3782-83e6-4208fe300ee0.roa
Signing time:             Thu 07 May 2026 13:00:31 +0000
ROA not before:           Thu 07 May 2026 13:00:31 +0000
ROA not after:            Wed 05 Aug 2026 13:00:31 +0000
asID:                     22773
IP address blocks:        68.104.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 15 May 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:c1:35:e0:dd:55:13:01:4a:e1:ed:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: May  7 13:00:31 2026 GMT
            Not After : Aug  5 13:00:31 2026 GMT
        Subject: CN=4df59870-289a-4fef-bb4b-28605446c0af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7b:ad:96:32:15:50:1e:e3:6b:ef:b6:59:4e:
                    1e:e3:d8:d6:aa:02:31:e8:be:6c:36:5c:b9:5d:07:
                    5b:5f:52:a8:7c:6e:bf:d4:61:48:bf:31:bd:e9:0c:
                    79:64:cf:c3:1f:37:81:75:c1:00:7e:36:0e:49:c5:
                    02:06:12:f2:d9:cb:be:21:f9:3d:b0:9a:06:02:c2:
                    0e:33:52:34:5a:91:2b:16:77:1f:40:db:36:41:6f:
                    73:51:79:91:fc:10:84:ab:cc:c6:3c:15:df:1b:59:
                    33:3e:8d:dc:d4:93:52:9d:a3:5f:d5:e3:ae:51:bb:
                    dd:dc:74:47:1c:ee:21:26:fc:de:61:15:62:ea:9d:
                    5d:98:55:16:8c:0c:27:c6:41:8c:d6:22:13:c6:43:
                    17:5b:f1:63:da:45:c9:0f:72:82:39:37:af:1e:90:
                    85:cd:af:98:23:61:17:1a:52:ec:a1:93:0f:3f:c5:
                    11:96:b4:f4:6c:52:96:6f:e5:77:09:92:b5:f6:2a:
                    26:d2:df:ff:0d:04:cb:9e:72:70:66:f0:60:2e:96:
                    df:a3:51:fa:82:52:a1:42:c1:0a:ab:83:ca:b3:f5:
                    ea:12:34:c9:63:0e:a3:ab:8f:1f:dd:e5:e2:94:71:
                    6f:f8:98:8f:4b:4d:d5:79:d9:dd:04:62:63:a1:05:
                    9d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:96:CB:67:65:7C:4C:CA:9E:52:6E:9E:7C:50:C3:A4:8E:EF:27:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/4ddc945a-a198-3782-83e6-4208fe300ee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.104.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:93:de:9b:d1:5d:50:bf:27:87:29:87:8c:77:70:60:fe:da:
         1b:96:3e:06:85:f8:5c:58:14:ef:f3:f1:f2:41:19:c6:2e:5b:
         da:60:7b:1e:ee:7f:f5:a8:e7:c6:3f:49:91:7b:db:b4:6a:23:
         37:27:07:2f:5c:9a:93:85:f9:5b:fa:12:dc:56:5f:43:63:5b:
         96:1c:49:90:0c:89:69:49:d3:48:bf:e9:0e:96:60:05:66:9b:
         65:94:43:ec:8e:31:08:b8:a2:8b:44:f3:1b:c3:f5:d0:7c:d6:
         57:e1:9f:90:a7:7f:8d:09:f6:c9:da:9a:93:d1:a5:55:6f:d6:
         ea:75:0f:bb:54:5b:be:59:24:c8:20:6a:e7:f4:75:a0:ac:0e:
         e9:67:cb:82:31:5d:93:78:52:37:89:b3:47:24:4b:b3:d1:24:
         29:4d:13:d6:d8:80:de:8f:e1:fc:f3:88:bb:9d:67:8a:b5:7b:
         a3:70:0d:9e:d7:f9:bd:67:a1:cb:14:7c:d4:36:83:e9:0f:46:
         01:d7:65:80:ca:02:79:c9:eb:a7:60:ab:ed:ab:4d:d1:e5:28:
         e6:72:95:4e:43:35:6c:be:ea:8c:0b:e3:6f:95:f0:64:af:df:
         3e:8f:ce:6c:97:4e:b4:9e:92:8a:ed:f4:f4:6e:af:97:b4:4e:
         3d:d2:83:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:37:36 2026 by rpki-client