Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30a220b5-5fc2-369c-b239-050af0ee8fbe.roa
File:                     30a220b5-5fc2-369c-b239-050af0ee8fbe.roa (raw, json)
Hash identifier:          CKgZlb7UWVKbSC1maIp6W8akHgM3nB8UK4OvvMh2C+0=
Subject key identifier:   FD:49:BA:6D:15:D2:82:CC:47:47:1D:62:AD:17:84:89:D7:B8:5E:40
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E9A7FDF4503A9003E9997A700
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30a220b5-5fc2-369c-b239-050af0ee8fbe.roa
Signing time:             Fri 24 Jul 2026 09:00:12 +0000
ROA not before:           Fri 24 Jul 2026 09:00:12 +0000
ROA not after:            Thu 22 Oct 2026 09:00:12 +0000
asID:                     22773
IP address blocks:        98.181.60.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9a:7f:df:45:03:a9:00:3e:99:97:a7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 24 09:00:12 2026 GMT
            Not After : Oct 22 09:00:12 2026 GMT
        Subject: CN=c8cf0854-10a3-4a21-8683-5897f1152b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:81:7c:eb:ba:91:a6:38:99:28:a7:e0:df:f4:
                    ff:ac:7e:86:f4:85:9e:7f:35:f9:01:91:fb:e6:24:
                    87:7b:8a:eb:8f:67:fb:49:95:6f:53:25:9b:db:ea:
                    99:9e:28:5a:a1:8c:59:e8:5c:23:c6:b4:ed:60:6b:
                    e4:b5:b7:94:9c:f7:ec:88:21:01:24:f5:94:f4:c8:
                    21:cd:04:09:2a:54:5d:89:c4:28:aa:fd:7e:35:aa:
                    cf:03:9f:5d:18:3c:4a:14:d2:c1:ed:6e:e3:9f:ea:
                    90:d9:ca:31:e4:b6:c7:b6:57:1d:98:9a:28:df:a4:
                    02:97:5f:9e:46:43:e8:f2:49:9b:0a:b4:a0:b0:80:
                    9a:ba:6f:46:b0:d9:f8:db:82:fc:51:ef:28:87:d6:
                    57:39:85:0f:31:a7:15:9d:2a:f8:47:e7:ee:a9:3f:
                    86:22:a1:de:c5:7c:06:3e:8f:41:7b:34:b5:90:4f:
                    72:04:9b:fd:b7:bc:34:4d:af:f5:46:fb:ff:2f:2c:
                    47:c6:2c:d8:c1:2e:93:c7:98:02:c5:39:a8:e0:74:
                    4f:d1:22:f9:02:86:cf:c0:5b:95:d1:4f:20:87:ad:
                    38:cd:ed:b3:dc:2f:ae:79:0b:26:79:1a:9e:48:64:
                    9b:01:dd:9d:71:8f:e2:12:5a:bd:eb:6f:39:c9:fb:
                    b1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:49:BA:6D:15:D2:82:CC:47:47:1D:62:AD:17:84:89:D7:B8:5E:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/30a220b5-5fc2-369c-b239-050af0ee8fbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.181.60.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:03:cc:e2:df:df:5d:5d:95:95:9b:62:52:cf:72:5e:44:7f:
         29:ff:fc:ae:11:99:c5:bc:98:74:83:0b:93:a1:52:ac:37:f2:
         ab:48:85:d0:86:fb:77:0d:30:1d:ba:f1:e1:89:4b:0c:01:90:
         ee:d8:35:6c:4e:43:bd:e6:23:69:b1:08:6d:bb:ac:3a:4b:e2:
         b1:e0:f4:47:24:6e:7c:a3:6e:e9:58:c0:06:a6:aa:87:42:f8:
         8d:f1:a2:05:55:1d:20:74:e6:db:15:f9:3f:df:2b:5d:a9:b7:
         b0:ef:ef:01:b4:24:46:ba:16:b8:bf:a3:53:20:58:7e:8d:06:
         29:b5:1f:99:ee:68:8b:9b:24:58:0e:c8:f5:f2:e2:05:f2:ac:
         31:8e:8b:ff:9c:e4:13:2f:a8:09:b9:76:de:a0:f4:57:16:df:
         9c:aa:72:a4:85:cc:cc:46:5d:0f:6e:80:a9:cd:b8:e7:ff:6f:
         7b:5b:0b:54:8f:e0:05:ae:d3:d9:19:d5:c5:9a:a1:05:a0:fa:
         ce:3f:56:7d:d0:67:5b:72:ff:cc:e2:8c:d6:1a:de:4d:26:90:
         f2:42:47:ee:00:2f:fd:fe:5a:0e:67:41:22:e3:4a:82:bb:1c:
         bc:e7:e8:50:8e:fc:56:29:f6:7c:2b:79:65:c0:0a:b7:2d:c4:
         b2:f0:5b:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:20:14 2026 by rpki-client