Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11246a3d-30d2-3368-acf6-589b31c767fc.roa
File:                     11246a3d-30d2-3368-acf6-589b31c767fc.roa (raw, json)
Hash identifier:          jiwoZ3w+9REO4wR1XMFXMnFwyR0jT/qJylOTqtQTOrc=
Subject key identifier:   8B:85:A5:8D:C3:B0:3D:66:ED:A6:BF:FC:6B:F9:3E:EF:60:09:E2:24
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584CDDCCD6B3D275CE3077502680
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11246a3d-30d2-3368-acf6-589b31c767fc.roa
Signing time:             Sun 15 Feb 2026 02:00:32 +0000
ROA not before:           Sun 15 Feb 2026 02:00:32 +0000
ROA not after:            Sat 16 May 2026 01:00:32 +0000
asID:                     22773
IP address blocks:        174.72.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Mar 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4c:dd:cc:d6:b3:d2:75:ce:30:77:50:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Feb 15 02:00:32 2026 GMT
            Not After : May 16 01:00:32 2026 GMT
        Subject: CN=2bb53aa4-69b1-4267-ad54-8d65ab72bba8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c1:31:61:57:37:8f:4f:e7:67:45:6e:36:a0:
                    cb:e8:35:4b:18:b1:e2:4c:8e:b7:c5:13:e7:a9:da:
                    61:30:98:f1:39:ad:66:6d:74:ee:89:83:95:36:8e:
                    4d:0a:6a:ee:c8:c4:76:66:ab:19:1a:05:95:99:b6:
                    37:b6:02:65:5f:cf:be:25:c0:8e:7b:fd:08:8e:24:
                    4e:48:f6:6b:46:50:ed:b0:68:a9:00:eb:48:e2:1b:
                    67:56:3a:58:19:e9:9d:f5:36:4e:8d:ba:a7:7c:3d:
                    d8:4a:fa:d0:48:27:fe:dd:6d:ea:c5:52:45:7b:4f:
                    5c:5c:4c:f1:39:52:71:43:23:37:60:31:f8:bb:f9:
                    bd:9e:40:9c:5f:bf:90:7f:48:4d:64:df:34:22:d8:
                    a9:22:8d:31:c9:fc:29:b3:42:42:bc:de:41:16:24:
                    ba:f0:fa:4a:f5:e2:07:df:bc:b2:db:fd:44:df:53:
                    5c:1e:68:2e:2e:23:c3:ed:0d:db:c2:a0:d2:2a:0e:
                    3f:3e:57:b1:f2:5f:c1:b6:6d:c0:1b:77:08:87:5c:
                    2a:d5:b9:1a:4d:6e:52:38:84:24:6f:2a:82:76:04:
                    b3:1c:d8:82:5f:20:11:af:f0:9d:3c:2f:61:5c:65:
                    fc:c8:f3:5c:41:d3:0b:17:ef:f4:67:29:e1:ba:7c:
                    1f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:85:A5:8D:C3:B0:3D:66:ED:A6:BF:FC:6B:F9:3E:EF:60:09:E2:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/11246a3d-30d2-3368-acf6-589b31c767fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.72.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:67:9c:b2:10:bb:3a:67:5c:47:4a:12:e5:8e:ba:e9:3b:e3:
         22:55:b5:18:f9:e0:45:b6:e4:61:86:c0:a5:fd:75:6b:4c:bb:
         af:36:46:c3:69:84:40:07:c0:5f:14:53:cd:ef:06:ff:af:68:
         26:d3:54:e3:28:d9:94:d9:6e:3f:55:fa:4d:c8:17:0c:6b:db:
         9a:8d:ec:47:36:c6:8f:fc:fa:5d:7d:97:d7:b7:df:e9:00:93:
         99:af:36:1b:bb:99:f6:f3:c2:b7:ea:14:65:d6:ae:91:bd:c5:
         23:50:47:5d:3b:f0:35:2c:d0:bf:64:86:ac:fa:ae:15:3c:09:
         55:0e:7d:ff:12:9c:a6:fb:24:dc:9a:31:d8:88:05:55:65:ff:
         2d:03:60:26:88:b4:cc:3a:00:6e:24:14:4c:e2:8c:0f:85:0a:
         e4:b7:0d:be:0a:c5:ae:f3:7f:78:ac:3e:6a:fa:e4:97:a9:b3:
         ec:75:2b:c4:2a:fe:87:0f:f5:64:2e:55:bb:8b:dc:fc:04:e6:
         43:d6:ea:8c:0f:a6:93:34:6c:e8:66:c3:ea:22:ef:82:65:16:
         ff:26:1e:73:f4:3b:61:e8:6f:3e:6b:0a:11:6f:77:94:51:b3:
         03:9b:cf:8e:c7:37:d6:47:a0:a4:0c:eb:42:47:45:f3:3f:ac:
         26:ac:9a:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzdzNaz0nXOMHdQJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTBkY2YyYzAtNjYwNi00YmQ5LWI0NDUtNzdiMTgzZWYy
ZmY0MB4XDTI2MDIxNTAyMDAzMloXDTI2MDUxNjAxMDAzMlowLzEtMCsGA1UEAxMk
MmJiNTNhYTQtNjliMS00MjY3LWFkNTQtOGQ2NWFiNzJiYmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMExYVc3j0/nZ0VuNqDL6DVLGLHiTI63xRPn
qdphMJjxOa1mbXTuiYOVNo5NCmruyMR2ZqsZGgWVmbY3tgJlX8++JcCOe/0IjiRO
SPZrRlDtsGipAOtI4htnVjpYGemd9TZOjbqnfD3YSvrQSCf+3W3qxVJFe09cXEzx
OVJxQyM3YDH4u/m9nkCcX7+Qf0hNZN80ItipIo0xyfwps0JCvN5BFiS68PpK9eIH
37yy2/1E31NcHmguLiPD7Q3bwqDSKg4/Plex8l/Btm3AG3cIh1wq1bkaTW5SOIQk
byqCdgSzHNiCXyARr/CdPC9hXGX8yPNcQdMLF+/0ZynhunwfjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIuFpY3DsD1m7aa//Gv5Pu9gCeIkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGRj
ZjJjMC02NjA2LTRiZDktYjQ0NS03N2IxODNlZjJmZjQvMTEyNDZhM2QtMzBkMi0z
MzY4LWFjZjYtNTg5YjMxYzc2N2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBkY2YyYzAtNjYwNi00YmQ5LWI0
NDUtNzdiMTgzZWYyZmY0LzkwZGNmMmMwLTY2MDYtNGJkOS1iNDQ1LTc3YjE4M2Vm
MmZmNC5jcmwwHwYDVR0jBBgwFoAUxy6ZAZJ1RMfvA105vL4X8HnVwacwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy85MGRjZjJjMC02NjA2LTRiZDktYjQ0NS03N2Ix
ODNlZjJmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArkhYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIJnnLIQuzpnXEdKEuWOuuk74yJVtRj54EW25GGGwKX9dWtMu682RsNp
hEAHwF8UU83vBv+vaCbTVOMo2ZTZbj9V+k3IFwxr25qN7Ec2xo/8+l19l9e33+kA
k5mvNhu7mfbzwrfqFGXWrpG9xSNQR1078DUs0L9khqz6rhU8CVUOff8SnKb7JNya
MdiIBVVl/y0DYCaItMw6AG4kFEzijA+FCuS3Db4Kxa7zf3isPmr65Jeps+x1K8Qq
/ocP9WQuVbuL3PwE5kPW6owPppM0bOhmw+oi74JlFv8mHnP0O2Hobz5rChFvd5RR
swObz47HN9ZHoKQM60JHRfM/rCasmhM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:51:45 2026 by rpki-client