Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07a387d4-2915-3831-9a40-c197fd2567a4.roa
File:                     07a387d4-2915-3831-9a40-c197fd2567a4.roa (raw, json)
Hash identifier:          cYQWda5aF2462nLDWT4kdqqDwFZrMvj8Yj+Gut4yLq4=
Subject key identifier:   0D:D3:0B:E5:4A:23:86:24:EC:C7:9C:6E:74:1D:1B:2F:C8:17:BD:6B
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CE09795BD27C8E3AB95F3D3A0
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07a387d4-2915-3831-9a40-c197fd2567a4.roa
Signing time:             Mon 16 Feb 2026 02:00:32 +0000
ROA not before:           Mon 16 Feb 2026 02:00:32 +0000
ROA not after:            Sun 17 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        98.162.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:e0:97:95:bd:27:c8:e3:ab:95:f3:d3:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 16 02:00:32 2026 GMT
            Not After : May 17 01:00:32 2026 GMT
        Subject: CN=6ec7354b-31d2-46cc-9203-d94430be8a06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:d6:95:fa:35:ca:42:11:60:71:43:40:c7:b6:
                    40:0b:54:01:7a:f8:0d:4c:4c:0a:5d:83:36:ac:5a:
                    37:f3:15:72:db:f2:b3:e9:ea:e1:e6:2a:99:1e:08:
                    20:17:93:f7:88:1e:8e:13:56:90:13:e0:87:ef:3d:
                    22:8b:cd:46:2a:55:fb:53:cd:61:88:88:03:4d:42:
                    bf:b3:8a:31:fd:0b:11:1b:18:f9:09:71:63:10:63:
                    0c:b7:54:2a:90:7b:e1:91:69:37:c4:8e:0b:5f:b2:
                    17:1a:78:f6:62:1f:9c:88:dd:9a:0b:d2:9e:f1:60:
                    c4:e3:0b:89:1d:dd:f5:6c:fa:52:87:67:79:9d:96:
                    c0:ae:c5:90:29:77:8d:8f:75:9b:58:93:f2:3f:8a:
                    ed:a9:53:62:93:b3:3f:70:a5:dc:48:cb:e4:91:12:
                    93:29:ff:8d:fe:46:41:0f:5d:28:87:09:67:b8:3b:
                    5d:17:1e:bb:54:c3:5f:e1:d7:a2:ed:6d:dc:3b:09:
                    56:89:36:17:2d:5a:f4:ce:54:fe:e0:cd:1b:18:15:
                    66:0d:b4:45:a6:53:29:2b:e4:d1:0d:85:3f:a8:c0:
                    72:71:31:d4:e1:d3:38:c8:4f:cf:64:71:32:c7:11:
                    98:e1:83:0f:52:35:a1:24:f7:d3:d0:1f:d8:a7:f1:
                    3d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D3:0B:E5:4A:23:86:24:EC:C7:9C:6E:74:1D:1B:2F:C8:17:BD:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07a387d4-2915-3831-9a40-c197fd2567a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.162.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:04:da:c8:ce:f8:3c:f5:e5:19:e5:6f:1f:11:4c:8c:e5:b7:
         16:b6:c7:c9:c2:36:30:91:f1:e3:58:13:94:9d:92:d8:a8:66:
         5d:bc:15:e1:a5:fd:27:fe:d3:4d:fb:fd:d2:03:20:69:16:72:
         06:8a:91:44:da:c7:09:b4:c8:2b:c5:a5:d2:eb:69:ab:83:ff:
         6e:ca:a3:28:52:f2:80:62:05:be:48:b0:ee:3f:9e:e7:9a:48:
         79:70:96:88:f4:23:5a:6d:9a:c0:6b:74:b7:e8:76:cc:5c:b3:
         e0:2e:dc:ef:88:c5:bc:29:e7:78:99:23:64:8f:89:3e:52:5a:
         8a:3b:38:3f:47:41:9c:b7:f7:58:40:8a:ee:40:6d:cd:3a:e9:
         e6:dd:2e:31:2f:69:ff:b8:e5:31:cf:a3:dd:0f:95:30:65:83:
         65:5a:dd:a9:03:42:4b:b2:bd:76:da:5b:3e:41:ae:5e:66:e9:
         8f:bd:d1:38:ea:9f:d7:22:18:1c:6b:e6:86:5e:ed:5b:98:2d:
         bc:39:1f:c8:5c:a0:1e:b0:10:6c:cc:c8:83:f6:38:e3:1d:28:
         fc:07:72:e7:aa:a3:3a:0c:71:06:09:54:00:de:1c:09:13:d9:
         c1:c8:db:6b:0b:eb:ed:6b:6d:32:46:71:cc:f7:80:38:31:e9:
         4a:69:a3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:32:12 2026 by rpki-client