Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08d22e75-d8e7-3b4a-b18d-8828e99b1286.roa
File:                     08d22e75-d8e7-3b4a-b18d-8828e99b1286.roa (raw, json)
Hash identifier:          sMEjOH8RnSA9Tj7SIMVjgARfirXuyc49Q1BeasZsZOA=
Subject key identifier:   53:6B:A2:95:7C:67:30:7D:A8:8A:16:4F:90:FE:83:F8:A5:7C:9E:B8
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDDCCB636E0F018B596F13600
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08d22e75-d8e7-3b4a-b18d-8828e99b1286.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        98.168.52.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:b6:36:e0:f0:18:b5:96:f1:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=4f1a7fde-2622-425c-af10-45bc9505aa66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8e:c0:e5:fa:5e:a4:a4:fe:88:0c:32:e6:4b:
                    27:8d:af:1d:09:e5:59:6c:af:12:22:5c:1c:91:ea:
                    ef:7b:d6:7b:51:ec:95:e7:58:e2:55:9c:29:9c:2b:
                    c4:0b:b0:f0:64:da:22:fe:c8:2a:26:97:68:1c:b8:
                    b1:ff:86:3a:b1:8d:41:05:74:6c:b3:17:a4:aa:b7:
                    d4:9a:f5:4a:90:48:28:21:b3:0e:af:cd:70:af:af:
                    9a:68:83:10:72:84:5f:09:57:c5:a1:b9:c1:3d:97:
                    d7:8e:dc:00:af:d6:79:f4:da:b1:55:15:98:5d:4e:
                    3d:2f:38:d2:90:a3:aa:f7:6b:40:47:dc:50:cf:a7:
                    1b:7d:52:f7:d9:25:ed:17:8b:a6:3a:aa:96:89:26:
                    29:fe:3f:da:3d:84:92:a0:69:11:ce:48:a8:a4:f1:
                    48:01:3a:ec:36:34:d2:b6:36:e8:c4:c0:24:c0:63:
                    4c:40:48:80:52:77:f8:0a:cb:06:23:2f:c7:5f:23:
                    87:95:05:6a:ae:bc:22:44:72:38:81:0a:37:32:d2:
                    97:3f:eb:4c:56:e9:2c:2f:66:5e:43:f8:fe:80:c3:
                    c8:86:cd:14:7b:c4:8f:30:bb:73:ff:0d:4d:d4:1f:
                    be:fc:32:a2:e7:a1:66:c3:9d:b2:1c:fb:d1:4c:64:
                    aa:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:6B:A2:95:7C:67:30:7D:A8:8A:16:4F:90:FE:83:F8:A5:7C:9E:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/08d22e75-d8e7-3b4a-b18d-8828e99b1286.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.168.52.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:e6:00:0c:98:13:e8:66:20:e5:b2:8e:16:d2:c4:68:8a:dd:
         4c:fe:c2:86:fe:46:d2:84:eb:fb:0a:ca:c9:f2:29:4a:5e:ef:
         97:de:7d:78:da:a7:40:f9:c6:fc:9a:bd:4a:dc:7f:38:5a:03:
         a2:9a:72:1b:97:71:1f:a6:d1:07:c9:51:99:ef:d1:10:b9:43:
         d7:28:23:8c:9f:62:27:81:d2:fb:ba:a4:f8:b3:26:cb:8e:1d:
         e9:76:b7:bd:db:07:32:ea:b0:90:6f:bc:ed:97:bc:f9:75:f1:
         32:da:6e:54:7e:8c:28:7c:65:85:5e:c1:a5:bc:5d:36:0a:11:
         52:c4:3d:f6:cf:4c:77:6e:4c:ad:fe:a7:7b:3b:b9:22:71:79:
         2c:26:2a:87:d5:43:86:ac:e0:a6:16:50:90:a9:13:4f:97:5e:
         89:a0:ee:ce:7f:ce:fe:d8:69:64:9a:b9:5e:13:ba:91:db:a5:
         36:10:a2:69:2e:15:69:71:56:71:24:97:bc:2c:94:11:fa:a8:
         f8:88:bf:9f:88:65:f0:5b:d4:af:7b:c2:4d:11:bc:49:13:41:
         80:f9:37:de:e2:64:7e:fe:ae:08:0c:28:38:76:28:62:d4:14:
         af:3a:05:ea:3f:9b:b1:9e:b7:8c:a2:7b:81:83:b3:2b:db:16:
         26:3b:3b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:52:09 2026 by rpki-client