Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/187094fd-3134-3138-a825-9af0ad6a2d85.roa
File:                     187094fd-3134-3138-a825-9af0ad6a2d85.roa (raw, json)
Hash identifier:          tIgjXz9Ba8b/v1Pb7j8iCym2z8Kbs/wM55xoNEsKbOM=
Subject key identifier:   27:B9:B3:71:89:B7:38:97:53:CC:D0:0B:5F:F1:C6:FD:31:3C:04:5E
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E9EB0161106AE1CF948B7EC80
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/187094fd-3134-3138-a825-9af0ad6a2d85.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     22773
IP address blocks:        98.165.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:b0:16:11:06:ae:1c:f9:48:b7:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=dbd6e356-994a-4c6a-9dbd-b3c6337470d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:70:6e:e2:1b:d3:e4:50:7b:89:4e:0e:03:b3:
                    46:ee:36:87:14:cc:f9:1d:c0:75:89:66:b3:63:f9:
                    bc:b2:f1:cb:fb:e8:ec:fa:8a:f0:64:33:17:41:15:
                    ff:a3:d5:16:69:d8:0e:9c:aa:20:7e:93:fa:bc:8a:
                    54:86:0a:5c:1f:dc:63:75:6f:05:c5:77:f1:85:d2:
                    df:fd:4d:55:44:41:00:18:c5:86:d1:13:3e:03:29:
                    9a:c0:cf:a8:5f:ce:dc:21:84:45:2b:de:65:eb:66:
                    ca:fe:62:dc:85:65:68:e4:40:12:be:43:c1:86:cc:
                    1e:cd:a4:30:c9:8e:85:9b:bf:30:f4:86:92:dc:0e:
                    5c:ac:83:ac:dc:a0:ca:a0:ab:37:76:9b:7f:be:07:
                    c9:17:00:49:f1:f6:4f:c7:7a:2f:48:fc:f0:39:c0:
                    54:e3:87:02:f2:c0:82:25:02:b1:26:cd:98:0b:fd:
                    df:42:af:d3:b3:fc:41:20:bd:81:28:98:b4:97:dc:
                    73:f9:9f:7e:6e:cb:29:d7:63:d4:f1:5f:7d:26:b0:
                    b2:9f:01:0c:52:16:1b:41:0f:4b:87:37:c3:64:5e:
                    e5:05:7e:26:e0:7a:c2:be:f6:ec:91:f8:db:ba:06:
                    8e:de:7c:72:09:32:96:8d:f1:fb:81:63:8f:32:bf:
                    98:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B9:B3:71:89:B7:38:97:53:CC:D0:0B:5F:F1:C6:FD:31:3C:04:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/187094fd-3134-3138-a825-9af0ad6a2d85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.165.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:50:59:08:cb:47:6a:be:36:76:24:9f:5e:7e:ea:a9:87:0a:
         bb:fe:97:18:e3:2c:48:aa:1f:3a:54:13:b1:17:37:56:f7:ef:
         d5:c7:00:73:1b:56:90:70:3d:a9:bf:9a:ae:7b:b1:de:89:9c:
         80:2e:2a:f6:b4:95:c6:96:7c:f0:01:6f:46:de:53:94:59:fa:
         ea:83:28:de:6d:c6:84:1f:e8:d6:46:b1:29:1f:0f:bc:fc:b5:
         af:20:f6:c7:f0:fd:03:72:47:f6:18:2c:d4:31:e3:26:8e:0b:
         1d:6f:d3:4d:32:01:b7:86:c9:53:16:21:20:12:ce:30:69:91:
         55:df:45:0a:b6:dc:fb:ce:45:7b:d5:c0:1c:9c:01:eb:52:06:
         d9:8d:12:65:c5:a8:44:90:21:5f:fd:cc:fc:df:14:6b:cd:67:
         b8:45:6d:af:23:5a:4e:47:91:56:fb:e4:8c:2a:04:3c:9e:ad:
         65:e9:0f:d0:bd:a0:17:82:3f:8a:77:49:f6:61:ce:35:10:c6:
         2d:6a:9b:4a:b7:78:d6:fb:b2:0c:2e:62:74:61:dd:ad:ad:fa:
         3f:11:f9:ab:99:a0:62:5c:22:a0:27:b4:31:41:07:fa:80:01:
         9b:38:30:62:6e:81:25:52:53:ad:bf:cd:48:55:20:77:45:7e:
         31:33:90:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:08:33 2026 by rpki-client