Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32d48949-c1a4-3075-b842-0b44d6b4eaba.roa
File:                     32d48949-c1a4-3075-b842-0b44d6b4eaba.roa (raw, json)
Hash identifier:          QxdsThu/aA4N37HtZPloCvrTHoJ3yJM8n6Hks4mrJaw=
Subject key identifier:   8C:CB:C3:29:D3:3B:B6:A8:D3:83:C7:CF:B7:52:C7:EC:62:CB:FF:23
Certificate issuer:       /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial:       010D0C9F4328584E9EB00AFCBE73067617BBE949
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32d48949-c1a4-3075-b842-0b44d6b4eaba.roa
Signing time:             Sat 25 Jul 2026 21:00:12 +0000
ROA not before:           Sat 25 Jul 2026 21:00:12 +0000
ROA not after:            Fri 23 Oct 2026 21:00:12 +0000
asID:                     22773
IP address blocks:        98.167.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:9e:b0:0a:fc:be:73:06:76:17:bb:e9:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
        Validity
            Not Before: Jul 25 21:00:12 2026 GMT
            Not After : Oct 23 21:00:12 2026 GMT
        Subject: CN=67233fcd-ad77-41fd-8a5d-bb6da7cc482a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c5:fa:26:1d:bd:df:32:3d:e0:ec:bb:6a:b9:
                    84:32:7b:6b:36:ee:a9:2f:54:71:e7:ff:92:98:f2:
                    96:1e:9b:d2:aa:cc:c2:c8:79:d7:f8:28:5f:06:97:
                    0a:38:fa:e3:43:92:93:ab:10:f2:a8:c7:4b:90:8f:
                    a7:67:36:6b:dc:cd:40:1a:dd:3a:10:89:1d:1d:d9:
                    19:bc:e8:be:ae:e9:e7:3f:9a:13:d5:c4:de:eb:c5:
                    69:74:aa:c2:eb:6f:4a:67:4a:16:af:17:04:28:ad:
                    de:47:24:4d:42:37:a6:75:e1:90:e1:e1:58:39:6c:
                    97:63:7b:5f:00:d8:70:81:88:dd:30:15:15:95:e4:
                    32:cd:a0:5a:d2:67:bc:8b:05:de:46:cd:4c:c4:f6:
                    3b:b1:84:c2:44:a4:db:16:a0:74:4b:2b:3c:33:86:
                    1d:3a:a8:c5:61:f5:9b:cb:b3:82:b5:0d:4b:a6:bb:
                    8e:74:1a:e9:ef:00:3a:6a:7e:48:45:24:c6:a2:05:
                    a1:80:e3:50:b4:95:5d:40:ff:85:0b:12:d0:c1:18:
                    db:14:af:40:8a:ad:a7:a2:b6:33:e2:7b:fc:e1:25:
                    ca:59:b4:75:66:1d:59:d5:14:d3:12:90:63:12:82:
                    ab:d3:96:09:44:66:fc:b9:12:21:06:c1:3e:15:dc:
                    45:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CB:C3:29:D3:3B:B6:A8:D3:83:C7:CF:B7:52:C7:EC:62:CB:FF:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/32d48949-c1a4-3075-b842-0b44d6b4eaba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl

            X509v3 Authority Key Identifier:
                keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.167.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:bd:e4:c6:25:05:ab:ba:55:e4:6a:d1:f2:b0:8e:7f:db:3a:
         94:ad:5b:99:3f:42:e7:67:f4:18:91:5a:bf:31:f0:31:2e:0d:
         81:4d:48:a6:6f:e7:e8:e3:1d:a1:6b:f1:92:fe:3f:f8:12:03:
         7c:f6:01:ad:fc:26:e3:bd:e6:df:9a:79:36:c0:0b:17:f9:19:
         f6:3b:bc:a0:f8:e3:e1:7e:f9:f0:bd:2f:1f:8e:78:61:30:77:
         a8:d5:6f:31:c7:cd:6b:7e:b1:5c:0e:11:72:d3:80:95:1a:54:
         8f:8f:12:45:12:d2:3f:5b:df:44:00:ee:2d:f6:9b:8c:ab:72:
         f6:83:49:fa:aa:e8:59:25:b2:3e:7f:d6:26:86:be:74:49:3e:
         32:86:a7:3e:b1:53:ae:5d:72:30:80:b3:3d:d8:7b:67:c4:50:
         7a:5e:4a:69:2f:5e:31:1d:9a:e6:cf:a1:f4:47:cc:fb:c7:0d:
         96:e3:71:a5:30:71:f8:a1:40:ce:28:72:1a:8c:62:b7:4f:cd:
         b2:d9:f5:06:e3:a6:0d:ed:22:f3:89:9c:4c:96:00:38:d2:11:
         79:4d:89:6a:a4:7c:40:d9:d0:54:07:0d:96:ee:bf:55:e7:10:
         d3:88:8e:fd:90:e1:d4:eb:73:5a:34:08:20:f3:71:3d:e2:3f:
         76:5e:22:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:37:35 2026 by rpki-client