Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07a387d4-2915-3831-9a40-c197fd2567a4.roa
File:                     07a387d4-2915-3831-9a40-c197fd2567a4.roa (raw, json)
Hash identifier:          TFivhIC+Q/zg0AKb5hVeJhwVChjJoFIcQGP2cNHDOpQ=
Subject key identifier:   69:34:DE:84:52:17:10:7B:D5:CF:10:10:14:48:FF:85:5C:50:8E:04
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584EA17A8DDFBAEE35C6B1315E92
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07a387d4-2915-3831-9a40-c197fd2567a4.roa
Signing time:             Sun 26 Jul 2026 21:00:11 +0000
ROA not before:           Sun 26 Jul 2026 21:00:11 +0000
ROA not after:            Sat 24 Oct 2026 21:00:11 +0000
asID:                     22773
IP address blocks:        98.162.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:a1:7a:8d:df:ba:ee:35:c6:b1:31:5e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 26 21:00:11 2026 GMT
            Not After : Oct 24 21:00:11 2026 GMT
        Subject: CN=55c41418-9910-4df5-88e8-388ae8fb90a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ac:aa:71:8b:1d:63:3d:7d:14:76:b4:a6:62:
                    2a:1c:de:83:51:a7:fc:e8:41:97:31:74:f4:86:89:
                    d7:9b:e0:eb:df:66:77:de:20:3b:ef:65:41:d8:49:
                    ab:48:5f:04:67:8d:e3:aa:e1:36:dd:dd:5b:41:4c:
                    98:b1:f8:ab:03:96:3f:f9:52:fb:9f:24:ae:74:d3:
                    d0:19:da:21:c4:52:b9:e3:fa:3d:4b:d1:aa:8b:c4:
                    53:d2:6c:e4:71:96:a3:e3:c2:f1:e9:b0:d9:12:da:
                    b4:73:38:68:dc:4f:19:cf:0d:8b:5d:ae:2d:bd:32:
                    95:58:fd:20:74:cd:eb:96:28:32:eb:c5:b0:4e:1c:
                    91:04:c2:cd:e0:5c:1a:43:0e:c4:7b:ea:6e:77:0a:
                    6b:c9:47:48:f5:8c:e4:88:b1:e3:47:2a:4b:7a:cd:
                    64:8c:ce:e6:30:3c:ce:2f:ff:d5:aa:0b:7d:54:af:
                    07:cd:4d:3f:8c:89:dc:93:0c:8b:e2:b8:0d:1e:dd:
                    4b:55:4c:6f:23:35:bc:d2:c2:20:b4:ef:39:0e:e7:
                    b5:94:52:37:5e:45:33:c7:66:97:54:76:be:0a:b8:
                    2d:42:62:03:64:4e:f3:d8:10:20:ef:e2:0f:dd:1f:
                    4a:75:c1:df:f5:45:fc:f9:11:ed:5f:e9:45:6a:06:
                    9d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:34:DE:84:52:17:10:7B:D5:CF:10:10:14:48:FF:85:5C:50:8E:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/07a387d4-2915-3831-9a40-c197fd2567a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.162.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:e4:c3:f7:a1:00:f4:b4:21:ad:97:ae:ea:57:97:96:ca:be:
         2b:ce:51:71:eb:94:48:b7:ea:a9:02:02:a7:9a:18:23:2d:35:
         70:16:47:6e:03:51:48:b0:01:7b:bb:3f:44:e2:c2:8e:de:b4:
         35:dc:53:02:96:0f:1a:63:e2:a2:be:f9:6c:73:f7:03:cf:63:
         a2:75:dd:19:f1:a3:06:a4:a2:b4:cf:82:24:e8:9f:81:8b:30:
         1d:b5:62:9e:a1:3c:68:a2:bf:bd:72:e2:6a:fe:ac:f9:80:12:
         59:87:b2:89:00:45:4b:aa:58:d0:d1:1c:9f:d3:7a:33:9c:28:
         0b:ae:f8:c7:ce:6b:88:94:50:c0:e6:a0:ff:0c:db:dd:37:83:
         bc:dd:57:1c:f7:43:fe:6c:3a:09:7a:c9:59:12:d0:19:81:1b:
         49:f7:d1:42:51:5a:f4:b4:85:8b:49:e1:ea:05:dc:db:84:d7:
         df:6e:57:c7:3d:e3:55:67:e6:ec:28:6b:2f:b3:67:12:1b:a0:
         83:9b:e4:8d:cb:b8:4d:44:45:7f:45:01:d1:76:4e:22:8d:3d:
         c9:63:a4:85:4b:b7:e5:2c:6c:0d:78:48:8d:49:cd:37:b9:f0:
         9c:e5:cf:a6:46:f7:40:4f:99:1a:ed:87:ca:a2:ce:7f:c8:18:
         ba:f7:8a:c1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6heo3fuu41xrExXpIwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDcyNjIxMDAxMVoXDTI2MTAyNDIxMDAxMVowLzEtMCsGA1UEAxMk
NTVjNDE0MTgtOTkxMC00ZGY1LTg4ZTgtMzg4YWU4ZmI5MGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKyqcYsdYz19FHa0pmIqHN6DUaf86EGXMXT0
honXm+Dr32Z33iA772VB2EmrSF8EZ43jquE23d1bQUyYsfirA5Y/+VL7nySudNPQ
GdohxFK54/o9S9Gqi8RT0mzkcZaj48Lx6bDZEtq0czho3E8Zzw2LXa4tvTKVWP0g
dM3rligy68WwThyRBMLN4FwaQw7Ee+pudwpryUdI9YzkiLHjRypLes1kjM7mMDzO
L//Vqgt9VK8HzU0/jInckwyL4rgNHt1LVUxvIzW80sIgtO85Due1lFI3XkUzx2aX
VHa+CrgtQmIDZE7z2BAg7+IP3R9KdcHf9UX8+RHtX+lFagaddQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGk03oRSFxB71c8QEBRI/4VcUI4EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMDdhMzg3ZDQtMjkxNS0z
ODMxLTlhNDAtYzE5N2ZkMjU2N2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYqJHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA7kw/ehAPS0Ia2XrupXl5bKvivOUXHrlEi36qkCAqeaGCMtNXAWR24D
UUiwAXu7P0Tiwo7etDXcUwKWDxpj4qK++Wxz9wPPY6J13RnxowakorTPgiTon4GL
MB21Yp6hPGiiv71y4mr+rPmAElmHsokARUuqWNDRHJ/TejOcKAuu+MfOa4iUUMDm
oP8M2903g7zdVxz3Q/5sOgl6yVkS0BmBG0n30UJRWvS0hYtJ4eoF3NuE199uV8c9
41Vn5uwoay+zZxIboIOb5I3LuE1ERX9FAdF2TiKNPcljpIVLt+UsbA14SI1JzTe5
8Jzlz6ZG90BPmRrth8qizn/IGLr3isE=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:15:08 2026 by rpki-client